last executing test programs: 44m40.221168367s ago: executing program 32 (id=37): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 43m23.204876571s ago: executing program 33 (id=394): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 42m55.395309864s ago: executing program 34 (id=597): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r4, 0x1, 0x70bd2a, 0x25dfd9fc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x20000000) 40m30.369029685s ago: executing program 35 (id=1266): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x800, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x40}}, 0x0) 40m13.319978317s ago: executing program 7 (id=1425): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) unshare(0x6020400) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x4) openat$cgroup_ro(r4, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) r5 = pidfd_getfd(r2, r2, 0x0) setns(r5, 0x66020000) close_range(r0, 0xffffffffffffffff, 0x0) 40m13.041504214s ago: executing program 7 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000020c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 40m12.723135512s ago: executing program 7 (id=1432): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x20ff}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) 40m11.96950158s ago: executing program 7 (id=1433): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) creat(&(0x7f0000000380)='./bus\x00', 0x4a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x0, 0x1a, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./file0\x00') 40m10.620428882s ago: executing program 7 (id=1441): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x80000, 0x0) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 40m9.209562457s ago: executing program 7 (id=1448): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x2113ce8, 0x0, 0x85, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 40m8.741712778s ago: executing program 36 (id=1448): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x2113ce8, 0x0, 0x85, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 39m14.058515392s ago: executing program 8 (id=1642): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000180)='./bus\x00', 0x308e0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x4, 0x4459, &(0x7f0000004480)="$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") r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 39m11.060828724s ago: executing program 8 (id=1653): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff0200000000000000000000000000010000000000000000000000000000000080000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="002bb7000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000010000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x8, 0x7, 0x6, 0xb, 0xf60, 0xe}) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = memfd_secret(0x80000) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r3, r4) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 39m10.286427363s ago: executing program 8 (id=1656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 39m8.134213995s ago: executing program 8 (id=1660): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) creat(&(0x7f0000000380)='./bus\x00', 0x4a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x0, 0x1a, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./file0\x00') 39m6.857993366s ago: executing program 8 (id=1666): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0xfffffffd, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x1, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xd3d, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x2, 0xff}}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {0x1, 0x1, 0xa8fe8ad4eea2351f}}, 0x18) 39m6.27334296s ago: executing program 8 (id=1670): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000940), &(0x7f00000002c0)=@tcp6=r2}, 0x20) recvmmsg$unix(r2, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 39m5.770097932s ago: executing program 37 (id=1670): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000940), &(0x7f00000002c0)=@tcp6=r2}, 0x20) recvmmsg$unix(r2, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 38m5.96031936s ago: executing program 4 (id=1868): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 38m5.693392236s ago: executing program 4 (id=1872): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0002"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 38m3.872618371s ago: executing program 4 (id=1881): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$media(0x0, 0x1ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 38m2.373489676s ago: executing program 4 (id=1894): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x408, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [], @ipv4=@dev, [], @ipv6=@mcast1, [], @ipv4=@local}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r1 = syz_open_pts(0xffffffffffffffff, 0x2000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) ioctl$TIOCSTI(r1, 0x5412, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 38m2.197651031s ago: executing program 4 (id=1886): r0 = socket$inet(0x2, 0x80001, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getpeername(r1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)={r4, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) 38m0.377589825s ago: executing program 4 (id=1897): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) pwrite64(r2, 0x0, 0x0, 0x4) close(0x3) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 37m59.770596809s ago: executing program 38 (id=1897): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) pwrite64(r2, 0x0, 0x0, 0x4) close(0x3) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 37m26.163726783s ago: executing program 1 (id=2004): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000280), &(0x7f0000000500)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 37m25.729653123s ago: executing program 1 (id=2006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 37m25.249573135s ago: executing program 1 (id=2008): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 37m24.992446681s ago: executing program 1 (id=2010): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) ioctl$PPPIOCGUNIT(r1, 0x80047456, 0x0) 37m24.130057082s ago: executing program 1 (id=2015): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r4, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r4, r0}}, 0x18) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r8, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r5}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x48d0) 37m23.357423691s ago: executing program 1 (id=2021): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x0, 0x40, 0x11}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x6c, 0x4) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0xf17d}, {{0x0, 0x0, 0x0, 0x20}, 0x1006}], 0x2, 0x0, 0x0) shutdown(r0, 0x1) 37m22.805902144s ago: executing program 39 (id=2021): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x0, 0x40, 0x11}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x6c, 0x4) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0xf17d}, {{0x0, 0x0, 0x0, 0x20}, 0x1006}], 0x2, 0x0, 0x0) shutdown(r0, 0x1) 31m58.900767013s ago: executing program 0 (id=3115): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000480)=""/145, 0x91, 0x20000000) 31m56.45014826s ago: executing program 0 (id=3124): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/77, 0x0, 0x2000}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)={0x1, 0x0, [{0x0, 0x9d, &(0x7f0000000440)=""/157}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 31m56.256935475s ago: executing program 0 (id=3127): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:07.0', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:07.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x148, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ec}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x16, 0xf801}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff5}, {0x6, 0x16, 0xfff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x71571b2b}, {0x6, 0x16, 0xb}, {0x5}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 31m56.113588839s ago: executing program 0 (id=3128): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 31m55.155424601s ago: executing program 0 (id=3132): r0 = msgget$private(0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x10000008) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000180)={0x0, 0xea60}, 0x10) recvfrom$inet_nvme(r1, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) msgsnd(r0, 0x0, 0x401, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x800) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) 31m53.553572159s ago: executing program 0 (id=3137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 31m53.06945585s ago: executing program 40 (id=3137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 28m48.328998357s ago: executing program 5 (id=3582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x3, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r3, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 28m46.96531704s ago: executing program 5 (id=3586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000004000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b0022000000f023022e68439c07bfc0ee573ae8578cd58144c97b1c108c2450e909460e777fea47c60dc4c9cf9ff8c8c7852728cf363467c0960e012f33f9bf8ed86900eeb360ee1f21f581f6d54349b70ff345d4d8b38e"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4000880) 28m45.337599228s ago: executing program 5 (id=3589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000e9ffff470000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa645335000000000000000a0000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d11410500000000000000f6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000380f00000000895ddbb76122bf222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d143107006b9419c2b6353fcf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000800425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f210ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f00000000c4c2566179b9043a48da00000000003f000000cf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f58fa48f61071f548d411353965615c24c1860fd0dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8ba9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba00000000000000ce4801461c36b5f430dc67f3759c367c43398cdfd550bcbb"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000100), &(0x7f00000002c0)=r4}, 0x20) 28m44.033099029s ago: executing program 5 (id=3592): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) open(&(0x7f0000000140)='./file3/file0\x00', 0x2200, 0x9a) chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 28m42.73065631s ago: executing program 5 (id=3595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_uring_setup(0x579e, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 28m41.840409591s ago: executing program 5 (id=3601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000e9ffff470000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa645335000000000000000a0000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d11410500000000000000f6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000380f00000000895ddbb76122bf222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d143107006b9419c2b6353fcf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000800425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f210ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f00000000c4c2566179b9043a48da00000000003f000000cf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f58fa48f61071f548d411353965615c24c1860fd0dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8ba9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba00000000000000ce4801461c36b5f430dc67f3759c367c43398cdfd550bcbb"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000100), &(0x7f00000002c0)=r4}, 0x20) 28m40.723801927s ago: executing program 41 (id=3601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000100), &(0x7f00000002c0)=r4}, 0x20) 1m34.280925792s ago: executing program 2 (id=7090): r0 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r5, &(0x7f0000002240)=""/236, 0xec, 0x4eb) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x6a) 1m31.357494885s ago: executing program 2 (id=7093): setpriority(0x0, 0x1, 0xa7a8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) keyctl$get_persistent(0x16, 0x0, r3) 1m25.623352448s ago: executing program 2 (id=7108): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x100) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$userns(0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="10000000f1000000980000000000000000000002"], 0x400040) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x80, 0x80000], [0x7, 0xc0000000, 0x7f, 0x0, 0x0, 0x0, 0x1cf], [0xfa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1]], '\x00', [{0x0, 0x40000001, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0xffffff88}, {}, {0x0, 0x5}, {0xff}, {}, {0x0, 0x1}, {0x0, 0x80}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @alu={0x5, 0x1, 0xd, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000003c0)={'dummy0\x00'}) 1m22.226122032s ago: executing program 2 (id=7114): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000680)=ANY=[@ANYBLOB="757466383d302c757466383d302c757466383d312c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c757466383d312c008c66543f5d9819a000d4e83c546404a071cad2145d3fb8a62515f51f30c9e8ee65d81f17556db1fbd9bba8311ff6c51e26fbc301f624c68ff373cb5fde2e2938a0247b42fa7b274ded"], 0x1, 0x35e, &(0x7f0000000240)="$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") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x12001, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24004101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x8f, &(0x7f0000000940), &(0x7f0000000080)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x58f, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 1m20.312945s ago: executing program 2 (id=7118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r5, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 1m17.237655766s ago: executing program 2 (id=7123): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000280), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 59.964848307s ago: executing program 42 (id=7123): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000280), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 15.417610336s ago: executing program 6 (id=7208): pipe(&(0x7f0000000000)) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000200)={0x13, 0x10, 0x10f, {0x0, r3, 0x3}}, 0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r4, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040), 0x4) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xffff}}, 0x2, 0x0, 0x3fc, 0x0, 0x32, 0x3}, 0x9c) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pwrite64(r1, 0x0, 0x0, 0x7ff) 13.409743736s ago: executing program 9 (id=7212): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 13.367341067s ago: executing program 6 (id=7213): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_open_dev$vim2m(0x0, 0x3, 0x2) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendmsg(0xffffffffffffffff, 0x0, 0x10040800) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.538373973s ago: executing program 9 (id=7214): r0 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004c000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e1e, 0xb205, @mcast1, 0x1}, 0xb) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x2) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e1f1b"], 0x22) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x1) 11.430045936s ago: executing program 6 (id=7215): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES16=r4], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$kcm(0x23, 0x5, 0x0) listen(r5, 0x800) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008000) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x800, 0x0) connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x40080) sendto$phonet(r8, &(0x7f00000008c0)="0155", 0x2, 0x80, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80000) 10.186578037s ago: executing program 6 (id=7217): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x111) r0 = getpgrp(0x0) r1 = msgget$private(0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3, 0x0, r2}) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(r4, 0x1, 0x0) 8.05037115s ago: executing program 6 (id=7218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xd, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, 0x0) ptrace$getregset(0x4205, r4, 0x2, 0x0) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) 8.04992877s ago: executing program 3 (id=7219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = fanotify_init(0x200, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x8, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x5, 0x4) readv(r5, 0x0, 0x0) r6 = memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, 0x0, 0x25, 0x8, @void}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008804}, 0x20000020) 7.960563032s ago: executing program 9 (id=7220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xa000000c, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x2, @vbi={0x3, 0x7, 0x1, 0x30314752, [0x9, 0x3], [0x4a0, 0xa], 0x1}}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20004803) socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create1(0x80000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8014) 6.856812839s ago: executing program 3 (id=7221): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_destroy(r3) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000180)={0xfff, 0x0, 0x1000, 0x9, 0x4, 0xfffff800}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.785454801s ago: executing program 9 (id=7222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = inotify_init1(0x0) fcntl$lock(r4, 0x5, &(0x7f0000000380)={0x0, 0x2, 0x5, 0x7fffffffffffffff}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 5.076658914s ago: executing program 9 (id=7223): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = open(0x0, 0x1f6000, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r2, 0x0, 0x0) r4 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) flock(r0, 0x6) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 4.983099086s ago: executing program 3 (id=7224): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) keyctl$read(0xb, 0x0, &(0x7f0000000000)=""/107, 0x6b) socket$kcm(0x2, 0xa, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e50000000000000079104800000000006104"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2.861189439s ago: executing program 9 (id=7225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00'}) syz_open_dev$vim2m(0x0, 0x800, 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000a80)={0x33, &(0x7f0000000280)}) close(0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.679467384s ago: executing program 3 (id=7226): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x20400) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000000) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x1418, 0x1, 0x20000000, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5", 0x3a}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000400012800c0001006d6163766c616e00f60002800800030003f9ffffffffffffff000000", @ANYRES32=r4, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) sendmsg(r1, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, r4, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd64875ba4665cc0184c6eef9eb1b3138f21b17b019a344eded35fad5c9b826aa0258495d1f4f4c9aa59a7eba8aabf481e79a1893e010de8302d3252b5563c1fa90ce42d4dc316648e16e58a1ee", 0x98}], 0x1, &(0x7f0000000800)=[{0xb0, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800ab"}, {0x28, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857"}, {0xd8, 0x10c, 0xd, "08b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc857533449770084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d465"}, {0x10, 0x10f, 0x4}, {0x48, 0x116, 0x3, "e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3"}, {0x40, 0x101, 0x5, "ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a934"}, {0x10, 0x108, 0x8fa}], 0x258}, 0x4000004) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.876320594s ago: executing program 3 (id=7227): r0 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004c000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e1e, 0xb205, @mcast1, 0x1}, 0xb) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x2) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e1f1b"], 0x22) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x1) 485.254998ms ago: executing program 6 (id=7228): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000240)={0x0, 0x1, 0x38, 0x3}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) r5 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003580)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private1}}, &(0x7f0000003680)=0xe4) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x4e8, 0x40000) statx(0xffffffffffffff9c, &(0x7f00000036c0)='./file0\x00', 0x400, 0x80, 0x0) sendmsg$unix(r4, &(0x7f0000003840)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f00000003c0)="b64fcee0daaaef399c88aad4b339607c3cc3bd752e9097e10a763e06e0ed5968bfc45b85aacabce6f41c16ddbf871ce6e5aca6cf9d0bc2e3edda8369ef74caa70e9d7116a42bb957d3cd3a4456991b82df26d6158470eafd27561b800085fa4a9fba4270f57334299b4b39b96cc92afa3525dd048bb8eb2fa305cef27b9781a9", 0x80}, {0x0}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="04bb80f0ac85788107991c3988b0b55817e2a9df128949b1edf7d53eeb27a2ec752b3c935146ae0813e336e66e054e6d", 0x30}], 0x4, &(0x7f0000003800)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32], 0x30, 0x4000800}, 0x4000000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x2000000}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000002480)=""/105) poll(&(0x7f0000000040)=[{r1, 0x10}, {r7, 0x2010}, {r7, 0x2}, {r7, 0x1304}], 0x4, 0xbfcb) pwritev2(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=7229): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pa', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) kernel console output (not intermixed with test programs): ibutes in process `syz.2.4821'. [ 1562.468426][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4823'. [ 1566.497645][T26371] netlink: 'syz.6.4837': attribute type 5 has an invalid length. [ 1568.042148][T26381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4833'. [ 1572.013887][T26405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4842'. [ 1572.025958][T26405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4842'. [ 1578.169746][T26433] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4847'. [ 1578.236288][T26433] infiniband syz0: set active [ 1578.263429][ T789] lo speed is unknown, defaulting to 1000 [ 1580.735730][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c995c00: rx timeout, send abort [ 1581.235860][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c997000: rx timeout, send abort [ 1581.244409][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c995c00: abort rx timeout. Force session deactivation [ 1581.744218][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c997000: abort rx timeout. Force session deactivation [ 1583.869988][T26469] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4860'. [ 1584.085808][T26474] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4858'. [ 1586.262890][T26503] tipc: Enabling of bearer rejected, failed to enable media [ 1586.392324][T26507] infiniband syz0: set active [ 1586.407066][ T789] lo speed is unknown, defaulting to 1000 [ 1586.474294][T26511] netlink: 'syz.9.4867': attribute type 5 has an invalid length. [ 1588.070992][T26528] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4871'. [ 1588.336310][T26529] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4872'. [ 1588.883837][T26538] infiniband syz0: set active [ 1588.890523][T26538] infiniband syz0: set active [ 1588.900595][T26538] bridge0: left allmulticast mode [ 1588.908370][T26538] tipc: Resetting bearer [ 1588.914200][T26538] tipc: Resetting bearer [ 1589.665464][T26538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1589.681763][ T5832] lo speed is unknown, defaulting to 1000 [ 1589.705535][ T789] lo speed is unknown, defaulting to 1000 [ 1591.614130][T26555] overlayfs: failed to clone upperpath [ 1593.226597][T26577] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4885'. [ 1593.568976][T26584] tipc: Enabling of bearer rejected, failed to enable media [ 1593.741416][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4886'. [ 1599.217954][T26636] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4896'. [ 1604.122402][T26670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4904'. [ 1604.420747][T26672] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7970] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[26672] [ 1605.025061][T26683] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4906'. [ 1605.604306][ T28] audit: type=1800 audit(1785565370.748:1039): pid=26684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4907" name="cdrom" dev="configfs" ino=64110 res=0 errno=0 [ 1605.725433][ T28] audit: type=1800 audit(1785565370.808:1040): pid=26684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4907" name="file" dev="configfs" ino=64111 res=0 errno=0 [ 1607.146137][T26703] netlink: 'syz.2.4913': attribute type 13 has an invalid length. [ 1607.760708][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.768029][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.779992][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1613.990436][T26760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4928'. [ 1616.522630][T26779] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1617.644974][T26786] tc action pedit 'at' offset 6 out of bounds [ 1619.977839][T26800] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4936'. [ 1621.775312][T26814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4939'. [ 1623.075394][T26826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4948'. [ 1624.844919][T26844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4943'. [ 1631.287765][T26895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4953'. [ 1632.457838][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4958'. [ 1636.197429][T26947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4966'. [ 1636.280251][T26947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4966'. [ 1636.503189][T26947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4966'. [ 1639.995476][T26981] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4975'. [ 1642.265188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1643.043309][T27003] netlink: 'syz.2.4981': attribute type 5 has an invalid length. [ 1644.016044][ T5435] veth0_vlan: left promiscuous mode [ 1644.075475][ T5435] veth0_vlan: entered promiscuous mode [ 1645.577748][T27027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 1646.262232][T27032] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4986'. [ 1658.873780][ T28] audit: type=1326 audit(1785565424.028:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a19e019 code=0x7ffc0000 [ 1660.000146][ T28] audit: type=1326 audit(1785565424.028:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a19e019 code=0x7ffc0000 [ 1660.654243][ T28] audit: type=1326 audit(1785565424.028:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a19e019 code=0x7ffc0000 [ 1660.712731][ T28] audit: type=1326 audit(1785565424.028:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a19e019 code=0x7ffc0000 [ 1660.805429][ T28] audit: type=1326 audit(1785565424.028:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f722a19e019 code=0x7ffc0000 [ 1660.895505][ T28] audit: type=1326 audit(1785565424.028:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a19e019 code=0x7ffc0000 [ 1660.956464][ T28] audit: type=1326 audit(1785565424.028:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a19e019 code=0x7ffc0000 [ 1661.283077][ T28] audit: type=1326 audit(1785565424.028:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a19e019 code=0x7ffc0000 [ 1661.831439][ T28] audit: type=1326 audit(1785565424.028:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722a19e019 code=0x7ffc0000 [ 1661.991607][ T28] audit: type=1326 audit(1785565424.028:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f722a19e019 code=0x7ffc0000 [ 1663.771635][T27179] netlink: 'syz.9.5017': attribute type 1 has an invalid length. [ 1665.158656][T27186] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5017'. [ 1665.607328][T27186] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1669.192498][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.199334][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.211228][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1670.345443][T27225] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5027'. [ 1670.865899][T27226] netlink: 'syz.9.5029': attribute type 1 has an invalid length. [ 1671.521461][T27236] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5029'. [ 1671.546713][T27236] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1672.402882][T27247] netlink: 'syz.9.5042': attribute type 1 has an invalid length. [ 1672.850230][T27259] loop3: detected capacity change from 0 to 8 [ 1673.097651][T27247] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5042'. [ 1673.504278][T27247] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1673.547465][T27257] SQUASHFS error: Unable to read directory block [631:26] [ 1675.145871][T27264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5037'. [ 1675.306208][T27272] netlink: 'syz.3.5037': attribute type 5 has an invalid length. [ 1679.082930][T27299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5046'. [ 1679.214411][T27299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5046'. [ 1679.401716][T27299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5046'. [ 1679.450567][T27307] netlink: 'syz.9.5047': attribute type 1 has an invalid length. [ 1679.503314][T27307] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5047'. [ 1679.515066][T27307] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1681.751387][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 1681.751404][ T28] audit: type=1800 audit(1785565446.908:1110): pid=27329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5054" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1683.225133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1683.745007][T27341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5057'. [ 1683.798029][T27341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5057'. [ 1684.045623][T27344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5058'. [ 1684.140285][T27347] loop3: detected capacity change from 0 to 164 [ 1684.169681][T27344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5058'. [ 1684.184267][T27347] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1684.541631][T27344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5058'. [ 1685.785144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1688.634741][ T28] audit: type=1326 audit(1785565453.788:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27379 comm="syz.9.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 1688.702827][ T28] audit: type=1326 audit(1785565453.818:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27379 comm="syz.9.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 1688.789125][ T28] audit: type=1326 audit(1785565453.828:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27379 comm="syz.9.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 1688.875411][ T28] audit: type=1326 audit(1785565453.828:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27379 comm="syz.9.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 1688.963294][ T28] audit: type=1326 audit(1785565453.828:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27379 comm="syz.9.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 1689.042735][ T28] audit: type=1326 audit(1785565453.898:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27379 comm="syz.9.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 1689.095880][T27385] loop3: detected capacity change from 0 to 164 [ 1689.106246][ T28] audit: type=1326 audit(1785565453.898:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27379 comm="syz.9.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 1689.177428][T27385] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1689.187885][ T28] audit: type=1326 audit(1785565453.918:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27382 comm="syz.9.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f844bf5e84e code=0x7ffc0000 [ 1689.225032][ T28] audit: type=1326 audit(1785565453.928:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27379 comm="syz.9.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 1689.346804][ T28] audit: type=1326 audit(1785565453.928:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27379 comm="syz.9.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 1689.621979][T27390] 9pnet_virtio: no channels available for device syz [ 1695.137747][T27477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5093'. [ 1695.384772][T27477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5093'. [ 1697.212225][T27510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5103'. [ 1699.786117][T27523] blktrace: Concurrent blktraces are not allowed on loop12 [ 1702.634431][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5114'. [ 1702.948335][T27541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5107'. [ 1703.101292][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5114'. [ 1708.218102][T27580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5126'. [ 1709.839379][T27594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5128'. [ 1710.860152][T27604] loop3: detected capacity change from 0 to 4096 [ 1717.425383][T27653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5141'. [ 1718.565607][T27668] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5145'. [ 1719.099380][T27669] netlink: 'syz.6.5145': attribute type 5 has an invalid length. [ 1719.400200][T27673] infiniband syz0: set active [ 1719.410962][T27216] lo speed is unknown, defaulting to 1000 [ 1721.192555][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 1721.192573][ T28] audit: type=1800 audit(1785565486.348:1207): pid=27686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5147" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1723.377716][T27703] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5151'. [ 1725.841347][ T28] audit: type=1804 audit(1785565490.998:1208): pid=27720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5158" name="bus" dev="ramfs" ino=66374 res=1 errno=0 [ 1726.146492][ T28] audit: type=1804 audit(1785565491.038:1209): pid=27720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5158" name="bus" dev="ramfs" ino=66374 res=1 errno=0 [ 1728.895000][T27736] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5163'. [ 1729.116610][ T28] audit: type=1326 audit(1785565494.278:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d559e019 code=0x7ffc0000 [ 1729.212124][ T28] audit: type=1326 audit(1785565494.278:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d559e019 code=0x7ffc0000 [ 1729.369733][ T28] audit: type=1326 audit(1785565494.278:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d559e019 code=0x7ffc0000 [ 1729.452998][ T28] audit: type=1326 audit(1785565494.288:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d559e019 code=0x7ffc0000 [ 1729.541280][T27743] loop3: detected capacity change from 0 to 1024 [ 1729.571768][ T28] audit: type=1326 audit(1785565494.318:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb3d559e019 code=0x7ffc0000 [ 1729.727200][ T28] audit: type=1326 audit(1785565494.438:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d559e019 code=0x7ffc0000 [ 1729.851115][ T28] audit: type=1326 audit(1785565494.438:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d559e019 code=0x7ffc0000 [ 1729.902967][ T28] audit: type=1326 audit(1785565494.438:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb3d559dd82 code=0x7ffc0000 [ 1730.010216][T27753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5165'. [ 1730.379858][T27755] infiniband syz0: set active [ 1730.388844][ T28] audit: type=1326 audit(1785565494.438:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d559e019 code=0x7ffc0000 [ 1730.437242][T27216] lo speed is unknown, defaulting to 1000 [ 1730.490687][ T28] audit: type=1326 audit(1785565494.438:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb3d559de17 code=0x7ffc0000 [ 1730.491794][T27753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5165'. [ 1731.686590][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.694324][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.708426][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1732.118000][T27765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5167'. [ 1736.886033][T27791] infiniband syz0: set active [ 1736.892567][T20751] lo speed is unknown, defaulting to 1000 [ 1738.309317][T27803] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5179'. [ 1738.842448][T27806] "syz.3.5180" (27806) uses obsolete ecb(arc4) skcipher [ 1740.599069][T27823] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5184'. [ 1745.179047][T27849] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5190'. [ 1745.610645][T27865] loop3: detected capacity change from 0 to 512 [ 1745.618396][T27865] EXT4-fs: Ignoring removed mblk_io_submit option [ 1745.636912][T27865] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1746.130193][T27865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002] [ 1746.359365][T27865] System zones: 1-12 [ 1746.401985][T27865] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1746.448892][T27865] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.5181: bg 0: block 361: padding at end of block bitmap is not set [ 1746.535878][T27865] EXT4-fs (loop3): Remounting filesystem read-only [ 1746.568757][T27865] EXT4-fs (loop3): 1 truncate cleaned up [ 1746.586622][T27865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1747.600735][T27878] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.5181: error -117 reading directory block [ 1748.207041][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1751.562086][T27914] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5201'. [ 1751.652505][T27914] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5201'. [ 1754.657111][T27951] infiniband syz0: set active [ 1754.672517][T20751] lo speed is unknown, defaulting to 1000 [ 1754.967449][T27958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5211'. [ 1755.000310][T27958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5211'. [ 1755.666028][T27965] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5212'. [ 1756.176269][T27978] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 1759.133306][T28000] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5220'. [ 1759.153029][T28000] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5220'. [ 1760.103085][T28014] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5224'. [ 1761.687717][T28021] tc action pedit 'at' offset 2 out of bounds [ 1761.694743][T28021] tc action pedit 'at' offset 2 out of bounds [ 1761.700948][T28021] tc action pedit 'at' offset 2 out of bounds [ 1761.707138][T28021] tc action pedit 'at' offset 2 out of bounds [ 1761.713256][T28021] tc action pedit 'at' offset 2 out of bounds [ 1761.719404][T28021] tc action pedit 'at' offset 2 out of bounds [ 1761.725540][T28021] tc action pedit 'at' offset 2 out of bounds [ 1761.731649][T28021] tc action pedit 'at' offset 2 out of bounds [ 1761.737808][T28021] tc action pedit 'at' offset 2 out of bounds [ 1761.743921][T28021] tc action pedit 'at' offset 2 out of bounds [ 1761.750240][T28021] TC_ACT_REPEAT abuse ? [ 1762.775476][T28032] loop3: detected capacity change from 0 to 512 [ 1762.787695][T28032] FAT-fs (loop3): bogus number of FAT sectors [ 1762.808669][T28032] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1763.973108][T28039] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5232'. [ 1763.988571][T28039] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5232'. [ 1764.892232][T28047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5233'. [ 1766.190024][T28059] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5235'. [ 1766.199371][T28059] sch_tbf: peakrate 2 is lower than or equals to rate 50420 ! [ 1769.390894][T28085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5243'. [ 1769.436136][T28082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5243'. [ 1771.479533][T28094] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5247'. [ 1771.699795][T28098] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5245'. [ 1775.073235][T28120] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5254'. [ 1775.129669][T28120] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5254'. [ 1775.658664][T28130] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5257'. [ 1775.750857][T28130] infiniband syz0: set active [ 1775.830745][T27216] lo speed is unknown, defaulting to 1000 [ 1776.772536][T28142] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5258'. [ 1778.451084][T28152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5260'. [ 1778.516929][T28154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5264'. [ 1778.555947][T28154] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5264'. [ 1778.607440][T28156] netlink: 'syz.3.5260': attribute type 5 has an invalid length. [ 1781.512336][T28182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5269'. [ 1781.869982][T28184] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5270'. [ 1781.983143][T28184] infiniband syz0: set active [ 1782.015734][T27794] lo speed is unknown, defaulting to 1000 [ 1783.164970][T28201] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5273'. [ 1783.180348][T28201] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5273'. [ 1785.191773][T28211] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5276'. [ 1785.602473][T28211] netlink: 'syz.6.5276': attribute type 5 has an invalid length. [ 1785.810318][T28217] loop3: detected capacity change from 0 to 164 [ 1785.865723][T28217] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1787.182883][T28238] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5281'. [ 1787.361657][T28243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5283'. [ 1787.404897][T28243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5283'. [ 1789.808576][T28268] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5288'. [ 1792.106074][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.112415][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.130280][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1792.199681][T28284] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5292'. [ 1792.359477][T28274] "syz.2.5289" (28274) uses obsolete ecb(arc4) skcipher [ 1792.373615][T28284] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5292'. [ 1799.161815][T28312] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5302'. [ 1799.207946][T28312] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5302'. [ 1801.533921][T28322] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5296'. [ 1804.638050][T28347] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5310'. [ 1804.736463][T28350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5311'. [ 1804.767012][T28350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5311'. [ 1804.783021][T28348] netlink: 'syz.6.5310': attribute type 5 has an invalid length. [ 1805.659475][T28377] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5316'. [ 1805.752040][T28382] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5317'. [ 1807.560037][T28390] netlink: 'syz.6.5321': attribute type 1 has an invalid length. [ 1808.235974][T28394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5321'. [ 1808.302229][T28394] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1809.852451][T28406] netlink: 'syz.6.5323': attribute type 5 has an invalid length. [ 1812.966062][T28434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1813.268161][T28441] netlink: 'syz.6.5331': attribute type 1 has an invalid length. [ 1813.489810][T28441] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5331'. [ 1813.509413][T28450] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5332'. [ 1813.537747][T28441] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1816.051619][T28469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5340'. [ 1817.351539][T28475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5349'. [ 1819.964716][T28500] netlink: 'syz.2.5344': attribute type 1 has an invalid length. [ 1820.580871][T28504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5344'. [ 1820.820509][T28504] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1821.720384][T28519] loop3: detected capacity change from 0 to 512 [ 1821.745339][T28519] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1822.298647][T28481] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1823.723196][T28530] loop3: detected capacity change from 0 to 1024 [ 1823.901559][T28540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5353'. [ 1824.810621][T28545] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5351'. [ 1827.548636][T28558] netlink: 'syz.3.5356': attribute type 1 has an invalid length. [ 1827.735851][T28564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5356'. [ 1827.764801][T28564] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1829.377589][T28567] syzkaller0: entered promiscuous mode [ 1829.383252][T28567] syzkaller0: entered allmulticast mode [ 1830.046008][T28577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5363'. [ 1830.271798][T28584] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5364'. [ 1832.227465][T28601] netlink: 'syz.2.5367': attribute type 1 has an invalid length. [ 1832.331150][T28601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5367'. [ 1832.342195][T28601] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1832.748926][T28616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5369'. [ 1832.874940][T28616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5369'. [ 1832.983740][T28622] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5370'. [ 1835.506578][T28636] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5373'. [ 1837.445387][T28649] ptrace attach of ""[28652] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[28649] [ 1839.385117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1841.212643][T28676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5384'. [ 1841.282079][T28679] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5385'. [ 1841.477871][T28685] loop3: detected capacity change from 0 to 128 [ 1841.510365][T28676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5384'. [ 1841.846878][T28689] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 1841.855559][T28689] FAT-fs (loop3): Filesystem has been set read-only [ 1842.806482][T28690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1843.230009][T28695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5389'. [ 1843.280770][T28695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5389'. [ 1843.373474][T28699] infiniband syz0: set active [ 1843.492520][T27216] lo speed is unknown, defaulting to 1000 [ 1843.501571][T28697] netlink: 'syz.9.5382': attribute type 5 has an invalid length. [ 1847.021633][T28732] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5396'. [ 1848.165535][T28745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5406'. [ 1849.197689][T28760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5399'. [ 1849.456142][T28758] netlink: 'syz.3.5402': attribute type 5 has an invalid length. [ 1851.218470][T28787] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5409'. [ 1851.379636][T28791] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5411'. [ 1852.276980][T28797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 1852.400226][T28800] netlink: 'syz.2.5413': attribute type 1 has an invalid length. [ 1852.568922][T28804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5413'. [ 1852.636691][T28804] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1853.815755][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.822225][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.841560][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1854.963383][T28816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5416'. [ 1856.307646][T28835] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5422'. [ 1856.537379][T28840] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5423'. [ 1858.219118][T28849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5433'. [ 1858.602406][T28858] netlink: 'syz.6.5428': attribute type 5 has an invalid length. [ 1860.104418][T28878] C: renamed from team_slave_0 [ 1860.112599][T28878] netlink: 'syz.6.5432': attribute type 1 has an invalid length. [ 1860.120929][T28878] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5432'. [ 1860.130164][T28878] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1862.667838][T28889] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5435'. [ 1863.475921][T28898] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5438'. [ 1864.093585][T28902] infiniband syz0: set active [ 1864.284594][T12555] lo speed is unknown, defaulting to 1000 [ 1864.363407][T28902] netlink: 'syz.9.5440': attribute type 5 has an invalid length. [ 1865.473018][T28920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5441'. [ 1865.581399][T28920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5441'. [ 1867.484918][T28929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5445'. [ 1868.762030][T28941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5449'. [ 1871.336196][T28952] netlink: 'syz.6.5451': attribute type 4 has an invalid length. [ 1873.006719][T28969] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5447'. [ 1876.112737][T28987] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5458'. [ 1877.852800][T29001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5461'. [ 1878.022421][T29004] infiniband syz0: set active [ 1878.049488][T12555] lo speed is unknown, defaulting to 1000 [ 1878.070683][T23263] bond2: (slave ip6gretap1): link status up again after 0 ms [ 1878.126041][T29006] netlink: 'syz.9.5464': attribute type 5 has an invalid length. [ 1878.176747][T23263] bond2: (slave ip6gretap1): link status up again after 0 ms [ 1878.202705][T23263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1879.280814][T23263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1879.568875][T29016] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5465'. [ 1879.600654][T23248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1880.294550][T23248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1880.410790][T23263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1880.632842][T23263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1880.707377][T29032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5469'. [ 1880.999294][T23263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1881.957002][T23248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1882.395257][T23263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1882.568019][ T1090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1883.903495][T23248] net_ratelimit: 1 callbacks suppressed [ 1883.903514][T23248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1884.165446][T23248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1884.306886][ T1090] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1884.509148][T23248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1884.702056][T23248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1886.927991][T23248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1887.155183][T23248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1887.292930][T23248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1887.451880][T18995] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1887.588264][ T4815] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1888.923083][T23263] net_ratelimit: 7 callbacks suppressed [ 1888.923105][T23263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1889.117868][T23248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1890.626809][T29096] erspan0: left allmulticast mode [ 1890.862680][T29096] erspan0: left promiscuous mode [ 1890.884206][T29096] bridge1: port 1(erspan0) entered disabled state [ 1890.948445][T29096] bridge_slave_0: left allmulticast mode [ 1890.995313][T29096] bridge_slave_0: left promiscuous mode [ 1891.011833][T29096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.054954][T29096] bridge_slave_1: left allmulticast mode [ 1891.076039][T29096] bridge_slave_1: left promiscuous mode [ 1891.102998][T29096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.134451][T29096] bond0: (slave bond_slave_0): Releasing backup interface [ 1891.158255][T29096] bond_slave_0: left allmulticast mode [ 1891.198140][T29096] bond0: (slave bond_slave_1): Releasing backup interface [ 1891.206840][T29096] bond_slave_1: left allmulticast mode [ 1891.263896][T29096] team0: Port device team_slave_0 removed [ 1891.296978][T29096] team0: Port device team_slave_1 removed [ 1891.306067][T29096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1891.320076][T29096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1891.340201][T29096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1891.375155][T29096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1891.409318][T29096] bond0: (slave netdevsim0): Releasing backup interface [ 1891.427791][T29096] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1891.473165][T29096] bond1: (slave macvlan2): Removing an active aggregator [ 1891.494753][T29096] bond1: (slave macvlan2): Releasing backup interface [ 1891.565152][T29096] bond2: (slave ip6gretap1): Removing an active aggregator [ 1891.583651][T29096] bond2: (slave ip6gretap1): Releasing backup interface [ 1891.686003][T29096] bond4: left allmulticast mode [ 1891.690989][T29096] ip6gretap2: left allmulticast mode [ 1891.698626][T29096] bond4: left promiscuous mode [ 1891.704279][T29096] ip6gretap2: left promiscuous mode [ 1891.723774][T29096] team0: Port device macvlan3 removed [ 1891.731251][T29096] bond4: (slave ip6gretap2): Releasing active interface [ 1892.146470][T29100] geneve2: entered promiscuous mode [ 1892.151763][T29100] geneve2: entered allmulticast mode [ 1906.465367][T29215] loop3: detected capacity change from 0 to 1024 [ 1908.134491][T29234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5512'. [ 1908.318657][T29234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5512'. [ 1910.925568][T29270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5521'. [ 1911.001165][T29270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5521'. [ 1913.713103][T29295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5525'. [ 1914.663644][T29307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5528'. [ 1914.955203][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.961852][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.974387][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1917.432473][T29335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1918.372455][T29340] syzkaller0: entered promiscuous mode [ 1918.405164][T29340] syzkaller0: entered allmulticast mode [ 1919.435337][T29347] blktrace: Concurrent blktraces are not allowed on loop4 [ 1921.158990][T29372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1921.233896][T29372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1923.838413][T29397] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5549'. [ 1923.952959][T29393] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5549'. [ 1927.777992][T29418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5557'. [ 1929.094263][T29425] loop3: detected capacity change from 0 to 32768 [ 1929.139906][T29425] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1929.284156][T29425] XFS (loop3): Ending clean mount [ 1929.323773][T29425] XFS (loop3): Quotacheck needed: Please wait. [ 1929.532306][T29425] XFS (loop3): Quotacheck: Done. [ 1930.462618][T20656] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1932.854358][T29464] loop3: detected capacity change from 0 to 512 [ 1932.894329][T29464] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1933.068855][T29464] EXT4-fs (loop3): 1 truncate cleaned up [ 1933.099610][T29464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1935.833528][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1936.122071][T29497] syzkaller0: entered promiscuous mode [ 1936.140313][T29497] syzkaller0: entered allmulticast mode [ 1936.156463][T29499] overlayfs: missing 'lowerdir' [ 1937.987714][T29516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5575'. [ 1942.338135][T29541] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5581'. [ 1942.438063][T29542] netlink: 'syz.6.5581': attribute type 5 has an invalid length. [ 1943.592367][T29553] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5586'. [ 1943.604674][T29553] infiniband syz0: set active [ 1943.619747][ T789] lo speed is unknown, defaulting to 1000 [ 1944.355273][T29559] overlayfs: failed to clone upperpath [ 1948.835346][T29597] xt_CONNSECMARK: invalid mode: 254 [ 1949.360594][T29617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5594'. [ 1949.446548][T29618] netlink: 'syz.2.5594': attribute type 5 has an invalid length. [ 1949.790813][T29625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1953.958411][T29672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5606'. [ 1954.792613][T29678] netlink: 'syz.3.5606': attribute type 5 has an invalid length. [ 1955.267846][T29694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1958.048144][T29708] loop3: detected capacity change from 0 to 1024 [ 1958.056359][T29708] EXT4-fs: Ignoring removed bh option [ 1958.089974][T29708] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1958.329940][T29708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 1958.698630][T29708] System zones: 0-1, 3-12 [ 1958.761708][T29708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1960.137442][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1960.295305][T29729] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5622'. [ 1961.523645][T29748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1962.142611][T29750] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5634'. [ 1962.338955][T29755] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5629'. [ 1966.358452][T29783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1968.152431][T29803] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5640'. [ 1975.536646][T29852] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5653'. [ 1976.391496][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.405204][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.422478][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1977.621993][T29865] netlink: 'syz.3.5657': attribute type 1 has an invalid length. [ 1977.730478][T29867] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5657'. [ 1977.764404][T29865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5657'. [ 1978.951599][T29865] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1981.345105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1985.815401][T12555] libceph: connect (1)[c::]:6789 error -101 [ 1985.824824][T12555] libceph: mon0 (1)[c::]:6789 connect error [ 1985.833113][T29908] ceph: No mds server is up or the cluster is laggy [ 1986.179184][T29921] syzkaller0: entered promiscuous mode [ 1986.215067][T29921] syzkaller0: entered allmulticast mode [ 1986.726880][T29926] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5673'. [ 1986.935762][T29932] netlink: 'syz.9.5673': attribute type 5 has an invalid length. [ 1992.541879][T29980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5685'. [ 1992.592508][T29980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1993.575598][T29988] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5686'. [ 1993.762483][T29995] netlink: 'syz.6.5686': attribute type 5 has an invalid length. [ 1996.368790][T30010] loop3: detected capacity change from 0 to 32768 [ 1996.690256][T30010] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1996.699128][T30010] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1996.758701][T30010] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 1996.775854][T29841] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1996.785373][T29841] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1996.854218][T30015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5683'. [ 1996.910458][T29841] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 1996.958827][T29841] gfs2: fsid=syz:syz.0: jid=0: Done [ 1996.970757][T30010] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1997.148324][T30025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5692'. [ 1998.973207][T30045] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5696'. [ 1999.257829][T30049] netlink: 'syz.6.5696': attribute type 5 has an invalid length. [ 2000.687332][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 2000.687348][ T28] audit: type=1326 audit(1785565765.848:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30060 comm="syz.9.5701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2000.973824][ T28] audit: type=1326 audit(1785565765.848:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30060 comm="syz.9.5701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2001.008495][ T28] audit: type=1326 audit(1785565765.888:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30060 comm="syz.9.5701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2001.599633][ T28] audit: type=1326 audit(1785565765.888:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30060 comm="syz.9.5701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2001.735319][ T28] audit: type=1326 audit(1785565765.888:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30060 comm="syz.9.5701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2002.954045][T30075] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5704'. [ 2002.955357][ T28] audit: type=1326 audit(1785565765.888:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30060 comm="syz.9.5701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2003.016023][T30075] infiniband syz0: set active [ 2003.038132][T20751] lo speed is unknown, defaulting to 1000 [ 2003.065839][ T28] audit: type=1326 audit(1785565765.888:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30060 comm="syz.9.5701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2003.165554][ T28] audit: type=1326 audit(1785565765.888:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30060 comm="syz.9.5701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2003.225889][ T28] audit: type=1326 audit(1785565765.888:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30060 comm="syz.9.5701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2003.285861][ T28] audit: type=1326 audit(1785565765.888:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30060 comm="syz.9.5701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2006.026048][T30106] tipc: Enabled bearer , priority 0 [ 2006.036345][T30106] syzkaller0: entered promiscuous mode [ 2006.041907][T30106] syzkaller0: entered allmulticast mode [ 2006.071647][T30106] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2006.475946][T30113] overlayfs: failed to resolve './cgroup': -2 [ 2006.563093][T30106] tipc: Resetting bearer [ 2007.039002][T30105] tipc: Resetting bearer [ 2007.276003][T30105] tipc: Disabling bearer [ 2007.314695][T12555] tipc: Node number set to 3492036876 [ 2008.345049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 2008.610997][T30123] tipc: Enabling of bearer rejected, failed to enable media [ 2009.443008][T30141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5717'. [ 2009.586363][T30141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5717'. [ 2010.250968][T30155] netlink: 'syz.3.5719': attribute type 1 has an invalid length. [ 2010.481587][T30159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5719'. [ 2010.964704][T30155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5719'. [ 2011.278219][T30155] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2014.273571][T30203] xt_CONNSECMARK: invalid mode: 254 [ 2014.414866][T30200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5725'. [ 2014.689286][T30200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5725'. [ 2016.770801][T30220] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5730'. [ 2020.589618][T30249] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5737'. [ 2021.234109][T30262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5736'. [ 2023.920575][T30279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5738'. [ 2025.505389][T30288] tipc: Enabling of bearer rejected, failed to enable media [ 2027.881619][T30312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5753'. [ 2028.012912][T30313] netlink: 'syz.3.5753': attribute type 5 has an invalid length. [ 2028.058058][T30316] autofs4:pid:30316:autofs_fill_super: called with bogus options [ 2029.907064][T30327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5756'. [ 2030.709579][T30330] 9pnet_fd: Insufficient options for proto=fd [ 2032.104472][T30334] batman_adv: batadv0: Adding interface: dummy0 [ 2032.118887][T30334] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2032.179777][T30334] batman_adv: batadv0: Interface activated: dummy0 [ 2032.234531][T30334] batadv0: mtu less than device minimum [ 2032.252971][T30334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2032.266731][T30334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2032.279348][T30334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2032.291929][T30334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2032.304509][T30334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2032.317149][T30334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2032.329742][T30334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2032.342444][T30334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2032.355106][T30334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2034.014404][T30354] autofs4:pid:30354:autofs_fill_super: called with bogus options [ 2034.464798][T30363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5757'. [ 2034.693722][T30364] tipc: Enabling of bearer rejected, failed to enable media [ 2036.488272][T30386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5768'. [ 2036.810921][T30387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5770'. [ 2036.977132][T30387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5770'. [ 2037.368037][T30396] autofs4:pid:30396:autofs_fill_super: called with bogus options [ 2037.833948][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.875443][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.513149][ T1286] net_ratelimit: 10 callbacks suppressed [ 2038.513169][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2039.099068][T30407] loop3: detected capacity change from 0 to 8192 [ 2039.192153][T30407] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2039.240323][T30407] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 2039.291891][T30407] REISERFS (device loop3): using ordered data mode [ 2039.321835][T30407] reiserfs: using flush barriers [ 2039.415170][T30407] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 2039.497197][T30407] REISERFS (device loop3): checking transaction log (loop3) [ 2039.582654][T30407] REISERFS (device loop3): Using r5 hash to sort names [ 2039.671604][T30407] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 2042.338223][T30434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5782'. [ 2042.727680][T30434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5782'. [ 2042.742792][T30438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5781'. [ 2042.822000][T30438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5781'. [ 2043.098282][T30438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5781'. [ 2043.442203][T30456] loop3: detected capacity change from 0 to 512 [ 2043.449739][T30456] EXT4-fs: Ignoring removed nobh option [ 2043.476514][T30456] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 2043.485922][T30456] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 2043.500281][T30456] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.5789: inode has both inline data and extents flags [ 2043.525134][T30456] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.5789: couldn't read orphan inode 13 (err -117) [ 2043.539726][T30456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2043.935124][T30460] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 2043.985681][T30460] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 2044.325838][T30465] netlink: 'syz.9.5791': attribute type 1 has an invalid length. [ 2044.388200][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2044.419301][T30468] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5790'. [ 2044.478661][T30467] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5791'. [ 2044.512757][T30465] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5791'. [ 2044.539821][T30465] 8021q: adding VLAN 0 to HW filter on device bond26 [ 2045.029478][T30479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5792'. [ 2045.322810][T30479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5792'. [ 2048.514912][T30500] __nla_validate_parse: 1 callbacks suppressed [ 2048.521228][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5803'. [ 2048.674555][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5803'. [ 2049.975908][T30516] netlink: 'syz.6.5802': attribute type 1 has an invalid length. [ 2050.039719][T30519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5802'. [ 2050.102417][T30516] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5802'. [ 2050.133645][T30516] 8021q: adding VLAN 0 to HW filter on device bond21 [ 2050.699758][T30526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5807'. [ 2050.761320][T30526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5807'. [ 2050.889416][T30528] kvm: kvm [30527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000ee71 [ 2050.916507][T30528] kvm: kvm [30527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x79bf [ 2050.926882][T30528] kvm: kvm [30527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3732 [ 2050.938389][T30528] kvm_intel: kvm [30527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xac61 [ 2050.957356][T30528] kvm: kvm [30527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xac23 [ 2050.981627][T30528] kvm: kvm [30527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2517 [ 2050.983462][T30526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5807'. [ 2051.003123][T30528] kvm: kvm [30527]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2051.039696][T30528] kvm: kvm [30527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xfdc1 [ 2051.056232][T30528] kvm_intel: kvm [30527]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xc6d3 [ 2051.860216][T30544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5813'. [ 2052.352121][T30544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5813'. [ 2052.823204][T30558] netlink: 'syz.3.5816': attribute type 1 has an invalid length. [ 2052.866800][T30558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5816'. [ 2052.917188][T30562] overlayfs: failed to clone upperpath [ 2054.296292][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5815'. [ 2054.382662][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5815'. [ 2055.173113][T30579] netlink: 'syz.3.5828': attribute type 1 has an invalid length. [ 2055.347883][T30578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5828'. [ 2055.436785][T30578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5828'. [ 2055.527386][T30578] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2056.515802][T30592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5821'. [ 2058.209528][T30605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5825'. [ 2061.949753][T30630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5834'. [ 2062.036833][T30631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5829'. [ 2062.112630][T30630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5834'. [ 2063.688404][T30646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5838'. [ 2066.333908][T30675] syzkaller0: entered promiscuous mode [ 2066.345661][T30675] syzkaller0: entered allmulticast mode [ 2066.396623][T30675] TC_ACT_REPEAT abuse ? [ 2067.260777][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 2067.260794][ T28] audit: type=1326 audit(1785565832.108:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30669 comm="syz.9.5844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2067.367756][ T28] audit: type=1326 audit(1785565832.108:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30669 comm="syz.9.5844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2067.885173][ T28] audit: type=1326 audit(1785565832.108:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30669 comm="syz.9.5844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2067.966013][ T28] audit: type=1326 audit(1785565832.108:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30669 comm="syz.9.5844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2067.993937][ T28] audit: type=1326 audit(1785565832.208:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30669 comm="syz.9.5844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2068.096197][ T28] audit: type=1326 audit(1785565832.208:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30669 comm="syz.9.5844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2068.148248][ T28] audit: type=1326 audit(1785565832.208:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30669 comm="syz.9.5844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2068.185278][ T28] audit: type=1326 audit(1785565832.208:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30669 comm="syz.9.5844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2068.210753][ T28] audit: type=1326 audit(1785565832.208:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30669 comm="syz.9.5844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2068.486700][T30695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5848'. [ 2068.499370][ T28] audit: type=1326 audit(1785565832.308:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30669 comm="syz.9.5844" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f844bf9e019 code=0x7ffc0000 [ 2068.542920][T30694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5847'. [ 2068.709949][T30694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5847'. [ 2068.744450][T30695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5848'. [ 2069.498334][T30712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5851'. [ 2069.520712][T30707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5849'. [ 2072.044472][T30724] netlink: 'syz.3.5855': attribute type 1 has an invalid length. [ 2072.141392][T30724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5855'. [ 2072.163793][T30724] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2072.328996][T30730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5852'. [ 2072.446181][T30730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5852'. [ 2075.328639][T30754] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5859'. [ 2075.340833][T30754] infiniband syz0: set active [ 2075.392254][T20751] lo speed is unknown, defaulting to 1000 [ 2075.415687][T30754] netlink: 'syz.9.5859': attribute type 5 has an invalid length. [ 2075.728686][T30760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5860'. [ 2078.886516][T30779] netlink: 'syz.3.5866': attribute type 1 has an invalid length. [ 2079.196271][T30788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5866'. [ 2079.207172][T30788] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2080.762821][T30801] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5870'. [ 2080.803960][T30803] netlink: 'syz.6.5870': attribute type 5 has an invalid length. [ 2085.017072][T30840] netlink: 'syz.3.5877': attribute type 1 has an invalid length. [ 2086.575454][T30841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5877'. [ 2086.694711][T30840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5877'. [ 2086.956432][T30852] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5880'. [ 2086.999257][T30852] infiniband syz0: set active [ 2087.009106][T30852] netlink: 'syz.9.5880': attribute type 5 has an invalid length. [ 2087.025664][T12555] lo speed is unknown, defaulting to 1000 [ 2090.175883][T30872] 9pnet_fd: Insufficient options for proto=fd [ 2092.142146][T30884] netlink: 'syz.3.5890': attribute type 1 has an invalid length. [ 2092.256396][T30890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5890'. [ 2092.331754][T30884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5890'. [ 2092.366778][T30884] 8021q: adding VLAN 0 to HW filter on device bond17 [ 2092.542170][T30893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5891'. [ 2097.103228][T30924] netlink: 'syz.6.5901': attribute type 1 has an invalid length. [ 2097.195354][T30927] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 2097.217539][T30929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5901'. [ 2097.260527][T30930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5900'. [ 2097.282602][T30924] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5901'. [ 2097.308852][T30924] 8021q: adding VLAN 0 to HW filter on device bond22 [ 2097.399910][T30930] netlink: 'syz.3.5900': attribute type 5 has an invalid length. [ 2099.316701][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.323111][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.334688][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2099.763901][T30951] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5907'. [ 2100.672742][T30950] tty tty4: ldisc open failed (-12), clearing slot 3 [ 2100.817614][T30944] syz.2.5906(30944): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 2102.101225][T30959] syzkaller0: entered promiscuous mode [ 2102.115405][T30959] syzkaller0: entered allmulticast mode [ 2102.167615][T30964] xt_CONNSECMARK: invalid mode: 254 [ 2102.282656][T30965] netlink: 'syz.6.5912': attribute type 1 has an invalid length. [ 2102.356351][T30965] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5912'. [ 2102.394511][T30965] 8021q: adding VLAN 0 to HW filter on device bond23 [ 2103.285047][T30981] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5916'. [ 2103.302697][T30981] infiniband syz0: set active [ 2103.316809][T30509] lo speed is unknown, defaulting to 1000 [ 2103.407213][T30984] netlink: 'syz.9.5916': attribute type 5 has an invalid length. [ 2103.564661][T30990] nfs: Deprecated parameter 'nointr' [ 2106.205061][T31013] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5924'. [ 2107.143493][T31018] syzkaller1: entered promiscuous mode [ 2107.162697][T31018] syzkaller1: entered allmulticast mode [ 2107.173355][T31022] veth1_to_bond: entered allmulticast mode [ 2107.180664][T31018] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 2107.203728][T31022] veth1_to_bond: entered promiscuous mode [ 2107.248332][T31018] xt_CONNSECMARK: invalid mode: 254 [ 2107.254514][T31022] veth1_to_bond: left promiscuous mode [ 2107.266364][T31022] veth1_to_bond: left allmulticast mode [ 2108.548873][T31036] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5933'. [ 2108.809856][T31036] infiniband syz0: set active [ 2108.816761][T30509] lo speed is unknown, defaulting to 1000 [ 2109.307363][T31039] netlink: 'syz.9.5933': attribute type 5 has an invalid length. [ 2109.611711][T31047] overlayfs: failed to clone upperpath [ 2109.631537][T31048] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 2111.243801][T31061] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5945'. [ 2113.612046][T31075] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5943'. [ 2113.638674][T31075] infiniband syz0: set active [ 2113.662135][T30509] lo speed is unknown, defaulting to 1000 [ 2113.669072][T31076] syzkaller1: entered promiscuous mode [ 2113.674595][T31076] syzkaller1: entered allmulticast mode [ 2113.697937][T31078] xt_CONNSECMARK: invalid mode: 254 [ 2115.839105][T31094] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5948'. [ 2122.328402][T31131] xt_CONNSECMARK: invalid mode: 254 [ 2122.493685][T31139] loop3: detected capacity change from 0 to 1024 [ 2122.503180][T31139] EXT4-fs: Ignoring removed bh option [ 2122.511638][T31139] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 2123.347507][T31139] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 2123.448209][T31139] System zones: 0-1, 3-12 [ 2123.481547][T31139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2123.513474][T31150] xt_CONNSECMARK: invalid mode: 254 [ 2124.556873][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2128.439674][T31195] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5974'. [ 2130.698193][T31226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5979'. [ 2131.688562][T31226] netlink: 'syz.3.5979': attribute type 5 has an invalid length. [ 2133.235217][T31241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5983'. [ 2140.785521][T31292] netlink: 'syz.6.5985': attribute type 1 has an invalid length. [ 2140.862490][T31294] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5985'. [ 2140.929139][T31292] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5985'. [ 2141.050846][T31292] 8021q: adding VLAN 0 to HW filter on device bond24 [ 2145.030949][T31333] loop3: detected capacity change from 0 to 512 [ 2145.123976][T31333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2145.148837][T31333] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2146.000527][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2150.211332][T31388] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6016'. [ 2153.118933][T31416] infiniband syz0: set active [ 2153.166750][T12499] lo speed is unknown, defaulting to 1000 [ 2153.302771][T31413] netlink: 'syz.9.6023': attribute type 5 has an invalid length. [ 2155.810889][T31433] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6028'. [ 2156.099379][T31442] netlink: 'syz.2.6032': attribute type 1 has an invalid length. [ 2156.359194][T31442] 8021q: adding VLAN 0 to HW filter on device bond25 [ 2156.589553][T31446] gretap5: entered promiscuous mode [ 2156.788809][T31446] bond25: (slave gretap5): making interface the new active one [ 2156.829924][T31446] bond25: (slave gretap5): Enslaving as an active interface with an up link [ 2157.551290][T31442] macvlan4: entered promiscuous mode [ 2157.605358][T31442] macvlan4: entered allmulticast mode [ 2157.626002][T31442] bond25: entered promiscuous mode [ 2157.649340][T31442] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 2157.670043][T31442] bond25: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2157.694617][T31442] bond25: left promiscuous mode [ 2158.644827][T31459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6037'. [ 2158.892858][T31461] netlink: 'syz.3.6037': attribute type 5 has an invalid length. [ 2160.605213][T31493] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6043'. [ 2161.399053][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.405933][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.668507][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2162.284334][T31507] syzkaller1: entered promiscuous mode [ 2162.311706][T31507] syzkaller1: entered allmulticast mode [ 2163.434848][T31521] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6056'. [ 2167.475890][T25930] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2168.551558][T31551] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6065'. [ 2169.287038][T31555] netlink: 'syz.6.6066': attribute type 1 has an invalid length. [ 2169.571783][T31560] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6066'. [ 2169.629324][T31562] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6066'. [ 2169.687328][T31562] 8021q: adding VLAN 0 to HW filter on device bond25 [ 2170.449698][T31571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6070'. [ 2170.511029][T31571] lo speed is unknown, defaulting to 1000 [ 2170.544098][T31571] lo speed is unknown, defaulting to 1000 [ 2170.575568][T31571] lo speed is unknown, defaulting to 1000 [ 2170.592904][T31571] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2170.650002][T31571] lo speed is unknown, defaulting to 1000 [ 2170.673331][T31571] lo speed is unknown, defaulting to 1000 [ 2170.693881][T31571] lo speed is unknown, defaulting to 1000 [ 2170.711808][T31571] lo speed is unknown, defaulting to 1000 [ 2170.728157][T31571] lo speed is unknown, defaulting to 1000 [ 2171.152436][T31582] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6072'. [ 2171.258649][T31581] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6072'. [ 2174.966760][T31599] netlink: 'syz.2.6078': attribute type 1 has an invalid length. [ 2175.019380][T31599] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6078'. [ 2175.040695][T31599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6078'. [ 2175.051701][T31599] 8021q: adding VLAN 0 to HW filter on device bond26 [ 2176.796016][T31618] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6083'. [ 2178.805062][T31631] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6077'. [ 2179.386871][T31631] netlink: 'syz.6.6077': attribute type 5 has an invalid length. [ 2180.099064][T31646] netlink: 'syz.3.6088': attribute type 1 has an invalid length. [ 2180.229216][T31646] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6088'. [ 2180.267688][T31646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6088'. [ 2180.506423][T31646] 8021q: adding VLAN 0 to HW filter on device bond18 [ 2180.607530][T31655] overlayfs: failed to clone upperpath [ 2183.502474][T23260] xs_tcp_setup_socket: connect returned unhandled error -17 [ 2183.655880][T31681] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6099'. [ 2183.809833][T31689] netlink: 'syz.6.6099': attribute type 5 has an invalid length. [ 2185.887931][T31706] xt_CONNSECMARK: invalid mode: 254 [ 2186.086789][T31710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6104'. [ 2190.891756][T30509] Process accounting resumed [ 2190.910964][T31732] Process accounting resumed [ 2191.494073][T31743] xt_CONNSECMARK: invalid mode: 254 [ 2194.637494][T31765] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6120'. [ 2198.797625][T31781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2199.323821][T31798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6134'. [ 2200.238889][T31810] xt_CONNSECMARK: invalid mode: 254 [ 2200.389882][T31814] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6129'. [ 2206.569804][T31854] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6139'. [ 2207.705820][T31863] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6142'. [ 2208.951464][T31870] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6143'. [ 2208.985908][T31869] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6143'. [ 2209.340403][T31872] netlink: 'syz.9.6144': attribute type 1 has an invalid length. [ 2209.697080][T31874] bond27: (slave bridge7): making interface the new active one [ 2209.733027][T31874] bond27: (slave bridge7): Enslaving as an active interface with an up link [ 2209.850160][T31872] bond27: (slave gretap3): Enslaving as an active interface with an up link [ 2209.949957][T31872] gretap4: entered promiscuous mode [ 2209.988366][T31872] gretap4: entered allmulticast mode [ 2210.939852][T31872] bond27: (slave gretap4): Enslaving as an active interface with an up link [ 2210.995930][T31882] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6136'. [ 2212.966257][T31896] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6149'. [ 2214.058606][T31901] loop3: detected capacity change from 0 to 4096 [ 2214.073240][T31901] EXT4-fs: Ignoring removed oldalloc option [ 2214.181855][T31901] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2214.301102][T31901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2215.723140][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2219.963399][T31934] IPVS: Unknown mcast interface: vcan0 [ 2221.812254][T31949] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6163'. [ 2222.206217][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.213140][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.234496][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2223.501871][T31959] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6158'. [ 2223.893871][T31967] syzkaller0: entered promiscuous mode [ 2223.902382][T31967] syzkaller0: entered allmulticast mode [ 2227.369900][T31989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6173'. [ 2231.441048][T32038] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6180'. [ 2232.985900][T32040] overlayfs: failed to clone lowerpath [ 2234.082080][T32050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6183'. [ 2235.304596][T32055] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6176'. [ 2238.934413][T32090] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6194'. [ 2241.251681][T32101] loop3: detected capacity change from 0 to 512 [ 2241.295563][T32103] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 2241.312564][T32101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2241.398045][T32101] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.6199: corrupted xattr entries [ 2241.434924][T32101] EXT4-fs (loop3): Remounting filesystem read-only [ 2241.452051][T32101] EXT4-fs (loop3): 1 truncate cleaned up [ 2241.463517][T32101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2242.369999][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2244.459594][T32128] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6205'. [ 2244.475915][T32128] infiniband syz0: set active [ 2244.492886][T12555] lo speed is unknown, defaulting to 1000 [ 2244.900746][T12555] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 2245.229793][T32142] syzkaller0: entered promiscuous mode [ 2245.236035][T32142] syzkaller0: entered allmulticast mode [ 2245.254529][T32142] simple: basic_1 [ 2245.259275][T32142] simple: basic_2 [ 2245.262968][T32142] simple: basic_3 [ 2245.267236][T32142] simple: basic_4 [ 2245.270942][T32142] simple: basic_5 [ 2245.274745][T32142] simple: basic_6 [ 2245.278490][T32142] simple: basic_7 [ 2245.282243][T32142] simple: basic_8 [ 2245.285933][T32142] simple: basic_9 [ 2245.289616][T32142] simple: basic_10 [ 2245.293394][T32142] simple: basic_11 [ 2245.297395][T32142] simple: basic_12 [ 2245.301354][T32142] simple: basic_13 [ 2245.305160][T32142] simple: basic_14 [ 2245.309217][T32142] simple: basic_15 [ 2245.313049][T32142] simple: basic_16 [ 2245.316850][T32142] simple: basic_17 [ 2245.320835][T32142] 0: reclassify loop, rule prio 0, protocol 800 [ 2246.751397][T32156] syzkaller1: entered promiscuous mode [ 2246.757391][T32156] syzkaller1: entered allmulticast mode [ 2246.766269][T32156] xt_CONNSECMARK: invalid mode: 254 [ 2249.433221][T32172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6219'. [ 2252.428618][T32201] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2252.435945][T32201] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2252.478198][T32201] vhci_hcd vhci_hcd.0: Device attached [ 2252.665144][T12499] vhci_hcd: vhci_device speed not set [ 2252.680111][T32215] vhci_hcd: connection closed [ 2252.728694][T31193] vhci_hcd: stop threads [ 2252.745230][T12499] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 2252.775880][T31193] vhci_hcd: release socket [ 2252.810775][T31193] vhci_hcd: disconnect device [ 2254.896162][T32232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6230'. [ 2256.789792][T32255] ubi0: attaching mtd0 [ 2256.822450][T32255] ubi0: scanning is finished [ 2256.827251][T32255] ubi0: empty MTD device detected [ 2257.358247][T32255] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 2257.583236][T32261] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6238'. [ 2257.981192][T12499] vhci_hcd: vhci_device speed not set [ 2258.646823][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 2258.646882][ T28] audit: type=1804 audit(1785566022.888:1418): pid=32264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6247" name="bus" dev="ramfs" ino=77357 res=1 errno=0 [ 2258.825504][ T28] audit: type=1804 audit(1785566022.888:1419): pid=32264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6247" name="bus" dev="ramfs" ino=77357 res=1 errno=0 [ 2259.122568][T32279] futex_wake_op: syz.2.6240 tries to shift op by 144; fix this program [ 2259.914038][T32282] loop3: detected capacity change from 0 to 512 [ 2259.942969][T32282] EXT4-fs: Ignoring removed i_version option [ 2259.949495][T32282] EXT4-fs: Ignoring removed nobh option [ 2259.998198][T32282] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2260.086037][T32282] EXT4-fs (loop3): 1 truncate cleaned up [ 2260.258391][T32282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2261.989824][T32296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6245'. [ 2262.027682][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2262.197852][T32303] xt_CONNSECMARK: invalid mode: 254 [ 2264.140763][T32317] loop3: detected capacity change from 0 to 1764 [ 2264.270610][T32317] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 2264.538016][T12499] libceph: connect (1)[c::]:6789 error -101 [ 2264.571933][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2264.841295][T32329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2264.877683][T12499] libceph: connect (1)[c::]:6789 error -101 [ 2264.884015][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2265.426351][T12499] libceph: connect (1)[c::]:6789 error -101 [ 2265.630314][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2265.649080][T32321] ceph: No mds server is up or the cluster is laggy [ 2266.177163][T32343] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6258'. [ 2266.439848][T32348] infiniband syz0: set active [ 2266.747837][T12499] lo speed is unknown, defaulting to 1000 [ 2266.922439][T32350] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6259'. [ 2267.085004][T32353] loop3: detected capacity change from 0 to 128 [ 2267.230230][T32353] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2267.305307][T32353] ext4 filesystem being mounted at /593/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2267.388402][T32353] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 2267.423609][T32353] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 2267.489568][T20656] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2267.667498][T32371] xt_CONNSECMARK: invalid mode: 254 [ 2267.697233][T32373] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6270'. [ 2269.633759][T32395] loop3: detected capacity change from 0 to 32768 [ 2269.650746][T32399] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6266'. [ 2269.966455][T32395] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2270.230714][T32414] netlink: 'syz.9.6271': attribute type 1 has an invalid length. [ 2270.281255][T32395] XFS (loop3): Ending clean mount [ 2270.530926][T32395] XFS (loop3): Quotacheck needed: Please wait. [ 2271.186102][T32395] XFS (loop3): Quotacheck: Done. [ 2271.275543][T32423] autofs4:pid:32423:autofs_fill_super: called with bogus options [ 2271.757647][ T28] audit: type=1800 audit(1785566036.778:1420): pid=32427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6265" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 2272.203114][T20656] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2273.161736][T32441] pimreg: entered allmulticast mode [ 2273.182946][T32441] pimreg: left allmulticast mode [ 2273.202748][T32448] xt_CONNSECMARK: invalid mode: 254 [ 2273.616258][T32456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6279'. [ 2274.575277][T32461] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6281'. [ 2274.907412][T32464] netlink: 'syz.9.6282': attribute type 1 has an invalid length. [ 2275.240266][T32473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6283'. [ 2276.014002][T32476] autofs4:pid:32476:autofs_fill_super: called with bogus options [ 2276.877235][T32485] tipc: Enabling of bearer rejected, failed to enable media [ 2278.483844][T32501] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6289'. [ 2279.423171][T32506] netlink: 'syz.6.6292': attribute type 1 has an invalid length. [ 2280.896799][T32517] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6295'. [ 2283.224428][T32533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6299'. [ 2283.592378][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.599209][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.615452][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2284.326187][T32540] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6301'. [ 2285.706246][T32550] netlink: 'syz.2.6304': attribute type 1 has an invalid length. [ 2286.070756][T32558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6306'. [ 2287.149381][T32563] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6307'. [ 2289.482677][T32570] netlink: 'syz.2.6308': attribute type 3 has an invalid length. [ 2290.225481][T32574] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6311'. [ 2290.311666][T32570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6308'. [ 2290.678824][T32579] netlink: 'syz.6.6313': attribute type 1 has an invalid length. [ 2293.448027][T32579] 8021q: adding VLAN 0 to HW filter on device bond27 [ 2293.641831][T32583] bond27: (slave veth11): Enslaving as an active interface with a down link [ 2294.116049][T32597] nfs: Deprecated parameter 'nointr' [ 2294.153007][T32601] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6312'. [ 2294.203866][T32596] IPVS: Unknown mcast interface: vcan0 [ 2294.247010][T32605] netlink: 'syz.6.6318': attribute type 1 has an invalid length. [ 2296.123467][T32622] xt_l2tp: unknown flags: 17 [ 2296.542496][T32626] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6322'. [ 2298.706023][T32640] netlink: 'syz.2.6328': attribute type 1 has an invalid length. [ 2300.565149][T32666] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6332'. [ 2303.493390][T32668] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.559133][T32682] batman_adv: batadv0: Adding interface: dummy0 [ 2303.587172][T32682] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2303.756750][T32682] batman_adv: batadv0: Interface activated: dummy0 [ 2303.820515][T32689] batadv0: mtu less than device minimum [ 2303.829989][T32689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2303.842047][T32689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2303.853772][T32689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2303.865635][T32689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2303.877329][T32689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2303.889012][T32689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2303.900689][T32689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2303.912371][T32689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2303.924056][T32689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2304.012027][T32693] netlink: 'syz.6.6340': attribute type 1 has an invalid length. [ 2305.575290][T32720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6344'. [ 2306.952119][T32735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6349'. [ 2308.127269][T32749] netlink: 'syz.2.6353': attribute type 1 has an invalid length. [ 2310.084366][T32762] xt_CONNSECMARK: invalid mode: 254 [ 2311.155909][ T304] batman_adv: batadv0: Adding interface: dummy0 [ 2311.243629][ T304] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2311.425379][ T304] batman_adv: batadv0: Interface activated: dummy0 [ 2311.508918][ T305] net_ratelimit: 10 callbacks suppressed [ 2311.508938][ T305] batadv0: mtu less than device minimum [ 2311.551298][ T305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2311.563045][ T305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2311.574736][ T305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2311.586498][ T305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2311.598178][ T305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2311.609938][ T305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2311.621620][ T305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2311.633291][ T305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2311.645053][ T305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2311.771596][ T313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6361'. [ 2312.245816][ T315] lo speed is unknown, defaulting to 1000 [ 2312.360915][ T315] lo speed is unknown, defaulting to 1000 [ 2313.502225][ T322] netlink: 'syz.3.6363': attribute type 1 has an invalid length. [ 2313.910298][ T331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6364'. [ 2317.010141][ T340] xt_CONNSECMARK: invalid mode: 254 [ 2318.529163][ T361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6372'. [ 2320.667941][ T378] netlink: 'syz.6.6375': attribute type 1 has an invalid length. [ 2321.512810][ T386] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6375'. [ 2321.615634][ T389] loop3: detected capacity change from 0 to 64 [ 2322.014646][ T393] syz.3.6378: attempt to access beyond end of device [ 2322.014646][ T393] loop3: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 2322.029350][ T393] Buffer I/O error on dev loop3, logical block 8388608, lost async page write [ 2325.391771][ T408] xt_CONNSECMARK: invalid mode: 254 [ 2329.700218][ T438] netlink: 'syz.3.6388': attribute type 1 has an invalid length. [ 2329.817925][ T441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6386'. [ 2330.536445][ T444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6388'. [ 2331.762425][ T457] autofs4:pid:457:autofs_fill_super: called with bogus options [ 2331.806342][ T464] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6394'. [ 2333.135191][ T473] netlink: 'syz.3.6403': attribute type 1 has an invalid length. [ 2334.016005][ T485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6403'. [ 2337.584384][ T526] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6405'. [ 2337.655701][ T525] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6405'. [ 2338.109565][ T523] loop2: detected capacity change from 0 to 7 [ 2338.136528][ T523] loop2: [ 2338.139566][ T523] loop2: partition table partially beyond EOD, truncated [ 2338.232676][ T530] autofs4:pid:530:autofs_fill_super: called with bogus options [ 2339.175652][ T539] netlink: 'syz.6.6411': attribute type 1 has an invalid length. [ 2339.483038][ T546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6412'. [ 2342.468965][ T569] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6418'. [ 2342.504471][ T568] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6418'. [ 2344.524778][ T586] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6423'. [ 2345.095239][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.101620][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.199959][ T1286] net_ratelimit: 10 callbacks suppressed [ 2345.199978][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2346.640469][ T597] netlink: 'syz.6.6428': attribute type 1 has an invalid length. [ 2348.467510][ T612] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6431'. [ 2349.556890][ T618] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6433'. [ 2351.968558][ T637] ceph: No mds server is up or the cluster is laggy [ 2351.976391][T12555] libceph: connect (1)[c::]:6789 error -101 [ 2352.015278][T12555] libceph: mon0 (1)[c::]:6789 connect error [ 2352.102932][ T646] netlink: 'syz.9.6438': attribute type 1 has an invalid length. [ 2353.284305][ T665] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6443'. [ 2357.357794][ T690] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6450'. [ 2362.279080][ T728] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6462'. [ 2363.582523][ T734] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6463'. [ 2363.605341][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 2366.006092][ T764] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 2366.847765][ T773] bridge_slave_0: entered promiscuous mode [ 2368.929819][ T778] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6471'. [ 2370.293151][ T784] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6474'. [ 2374.801335][ T828] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6483'. [ 2382.892598][ T898] overlayfs: invalid redirect (./bus) [ 2384.978294][ T908] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6499'. [ 2385.210800][ T908] infiniband syz0: set active [ 2385.280042][ T920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6508'. [ 2385.886935][T12555] lo speed is unknown, defaulting to 1000 [ 2389.356116][ T979] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6512'. [ 2393.170860][ T1019] loop3: detected capacity change from 0 to 512 [ 2393.213695][ T1019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2393.358113][ T1019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2393.418024][ T1019] ext4 filesystem being mounted at /646/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2394.357788][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2403.054401][ T1105] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6538'. [ 2406.561816][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.568411][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.588664][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2417.937835][ T1203] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 2429.048829][ T1289] loop3: detected capacity change from 0 to 128 [ 2429.145446][ T1289] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 2429.265283][ T1289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2430.915363][ T1305] batman_adv: batadv0: Interface deactivated: dummy0 [ 2430.922174][ T1305] batman_adv: batadv0: Removing interface: dummy0 [ 2431.675564][ T1317] netlink: 277 bytes leftover after parsing attributes in process `syz.6.6589'. [ 2439.521937][ T1366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6605'. [ 2439.699174][ T1369] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6603'. [ 2445.454381][ T1405] loop3: detected capacity change from 0 to 512 [ 2445.502962][ T1405] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2445.616787][ T1405] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 2445.653440][ T1405] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.6614: Invalid inode table block 1 in block_group 0 [ 2445.690778][ T1405] EXT4-fs (loop3): get root inode failed [ 2445.700736][ T1405] EXT4-fs (loop3): mount failed [ 2447.008149][ T1431] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6619'. [ 2450.393060][ T1453] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6623'. [ 2451.274687][ T1465] loop3: detected capacity change from 0 to 1024 [ 2451.309492][ T1465] EXT4-fs: Ignoring removed bh option [ 2451.594406][ T1465] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 2451.639477][ T1465] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 2451.716927][ T1465] System zones: 0-1, 3-12 [ 2451.791264][ T1465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2453.646861][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2455.883865][ T1514] loop3: detected capacity change from 0 to 1024 [ 2456.182286][ T1519] netlink: 'syz.6.6642': attribute type 3 has an invalid length. [ 2456.420344][ T1519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6642'. [ 2457.055015][ T1522] 9pnet_virtio: no channels available for device syz [ 2458.586414][ T1526] xt_l2tp: unknown flags: 17 [ 2459.220507][T12499] libceph: connect (1)[c::]:6789 error -22 [ 2459.236749][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2459.290633][ T1536] ceph: No mds server is up or the cluster is laggy [ 2460.474094][T12499] libceph: connect (1)[c::]:6789 error -22 [ 2460.485910][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2463.962065][ T28] audit: type=1804 audit(1785566227.238:1421): pid=1566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6651" name="bus" dev="ramfs" ino=81197 res=1 errno=0 [ 2465.027745][ T28] audit: type=1804 audit(1785566227.248:1422): pid=1566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6651" name="bus" dev="ramfs" ino=81197 res=1 errno=0 [ 2465.093991][ T1573] loop3: detected capacity change from 0 to 1024 [ 2465.598998][ T1579] 9pnet_virtio: no channels available for device syz [ 2466.765132][ T1593] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6656'. [ 2468.156230][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.176349][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.236383][ T1602] xt_l2tp: unknown flags: 17 [ 2470.497521][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2473.386570][ T1625] lo speed is unknown, defaulting to 1000 [ 2473.555587][ T1625] lo speed is unknown, defaulting to 1000 [ 2477.671927][ T1657] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6676'. [ 2477.702030][ T1657] infiniband syz0: set active [ 2477.723004][T12555] lo speed is unknown, defaulting to 1000 [ 2477.799829][ T1658] netlink: 'syz.9.6676': attribute type 5 has an invalid length. [ 2478.003316][ T1663] xt_l2tp: unknown flags: 17 [ 2481.142317][T12499] libceph: connect (1)[c::]:6789 error -22 [ 2481.153051][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2481.425468][ T1681] ceph: No mds server is up or the cluster is laggy [ 2481.435719][T12499] libceph: connect (1)[c::]:6789 error -22 [ 2481.442026][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2481.588145][ T1688] lo speed is unknown, defaulting to 1000 [ 2481.703239][ T1688] lo speed is unknown, defaulting to 1000 [ 2496.848802][ T1813] C: renamed from team_slave_0 [ 2496.896590][ T1813] netlink: 'syz.3.6711': attribute type 1 has an invalid length. [ 2496.904403][ T1813] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6711'. [ 2496.913619][ T1813] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2497.556036][ T1821] Device name cannot be null; rc = [-22] [ 2499.413076][ T1837] syzkaller0: entered promiscuous mode [ 2499.423451][ T1837] syzkaller0: entered allmulticast mode [ 2499.608846][T12499] libceph: connect (1)[c::]:6789 error -22 [ 2499.631218][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2499.755338][ T1842] ceph: No mds server is up or the cluster is laggy [ 2501.445674][ T1857] loop3: detected capacity change from 0 to 512 [ 2501.510296][ T1857] EXT4-fs: Ignoring removed i_version option [ 2501.526448][ T1857] EXT4-fs: Ignoring removed nobh option [ 2501.702904][ T1857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2502.687970][ T1857] EXT4-fs (loop3): 1 truncate cleaned up [ 2502.708113][ T1857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2505.140884][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2513.985232][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2518.404378][ T1984] infiniband syz0: set down [ 2519.665833][ T1984] tipc: Resetting bearer [ 2519.686348][ T1984] batman_adv: batadv0: Interface deactivated: dummy0 [ 2519.762851][ T1984] wg1: left promiscuous mode [ 2519.790637][ T1984] wg1: left allmulticast mode [ 2519.812472][ T1984] xfrm0: left allmulticast mode [ 2519.825615][ T1984] veth0_vlan: left allmulticast mode [ 2520.713568][ T1984] mac80211_hwsim hwsim21 wlan0: left allmulticast mode [ 2520.730399][ T1984] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2520.739631][ T1984] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2520.748993][ T1984] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2520.758165][ T1984] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2522.133898][ T1984] bond5: left promiscuous mode [ 2522.144823][ T1984] bond5: left allmulticast mode [ 2522.150141][ T1984] bond8: left allmulticast mode [ 2522.164841][ T1984] ip6gretap1: left allmulticast mode [ 2522.193399][ T1984] bond9: left promiscuous mode [ 2522.208206][ T1984] bond9: left allmulticast mode [ 2522.310043][ T1984] veth5: left allmulticast mode [ 2522.447764][ T1984] veth9: left allmulticast mode [ 2522.537821][ T1984] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2522.548688][ T1984] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2522.557915][ T1984] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2522.567162][ T1984] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2522.911667][ T1984] bridge4: left promiscuous mode [ 2523.169840][ T1984] bridge5: left promiscuous mode [ 2523.578292][ T1984] gretap4: left promiscuous mode [ 2523.583304][ T1984] gretap4: left allmulticast mode [ 2523.601700][T12499] lo speed is unknown, defaulting to 1000 [ 2523.612421][T12499] lo speed is unknown, defaulting to 1000 [ 2523.636474][ T2029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6768'. [ 2523.667513][ T2036] netlink: 'syz.6.6768': attribute type 5 has an invalid length. [ 2523.777252][ T2049] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6762'. [ 2528.099294][ T2095] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6774'. [ 2528.137552][ T2087] tipc: Enabling of bearer rejected, failed to enable media [ 2528.229635][ T2103] netlink: 'syz.9.6774': attribute type 5 has an invalid length. [ 2529.350353][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.357118][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.418428][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2531.359772][ T2122] loop3: detected capacity change from 0 to 256 [ 2531.514941][ T2122] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 2532.701072][ T2134] overlayfs: failed to clone upperpath [ 2533.526287][ T2140] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6785'. [ 2533.660842][ T2141] netlink: 'syz.9.6785': attribute type 5 has an invalid length. [ 2536.472589][ T2175] loop3: detected capacity change from 0 to 16 [ 2537.525695][ T2175] erofs: (device loop3): mounted with root inode @ nid 36. [ 2542.338742][ T2216] xt_CONNSECMARK: invalid mode: 254 [ 2544.195172][ T2044] libceph: connect (1)[c::]:6789 error -22 [ 2544.209921][ T2044] libceph: mon0 (1)[c::]:6789 connect error [ 2544.524795][ T2234] ceph: No mds server is up or the cluster is laggy [ 2544.809389][ T2042] libceph: connect (1)[c::]:6789 error -22 [ 2544.824401][ T2042] libceph: mon0 (1)[c::]:6789 connect error [ 2546.736051][ T2270] syzkaller1: entered promiscuous mode [ 2546.741608][ T2270] syzkaller1: entered allmulticast mode [ 2546.798986][ T2263] xt_CONNSECMARK: invalid mode: 254 [ 2552.346143][ T2324] xt_CONNSECMARK: invalid mode: 254 [ 2555.870478][ T2362] loop3: detected capacity change from 0 to 64 [ 2555.878373][ T2362] hfs: unable to parse mount options [ 2556.575939][ T2118] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2556.597982][ T2369] tipc: Enabling of bearer rejected, failed to enable media [ 2558.041911][ T2388] futex_wake_op: syz.6.6853 tries to shift op by 32; fix this program [ 2558.106174][ T2386] vlan0: entered promiscuous mode [ 2558.111253][ T2386] team0: entered promiscuous mode [ 2558.164878][ T2386] bridge0: entered promiscuous mode [ 2563.279617][ T2433] tipc: Enabling of bearer rejected, failed to enable media [ 2572.783970][ T2518] tipc: Enabling of bearer rejected, failed to enable media [ 2577.864738][ C1] hrtimer: interrupt took 50204 ns [ 2579.060052][ T2612] NILFS (nullb0): couldn't find nilfs on the device [ 2581.164541][T12499] libceph: connect (1)[c::]:6789 error -101 [ 2581.179225][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2581.445149][T12499] libceph: connect (1)[c::]:6789 error -101 [ 2581.451276][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2582.190470][ T2636] ceph: No mds server is up or the cluster is laggy [ 2586.504910][ T2689] program syz.3.6914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2591.188415][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2591.195076][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.216634][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2593.926049][ T2784] vlan0: entered promiscuous mode [ 2596.400727][ T2809] overlayfs: failed to clone upperpath [ 2597.434481][ T5778] Bluetooth: hci2: Malformed LE Event: 0x1b [ 2599.676838][T12499] libceph: connect (1)[c::]:6789 error -22 [ 2599.684909][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2599.914225][ T2838] ceph: No mds server is up or the cluster is laggy [ 2601.934886][ T2861] lo speed is unknown, defaulting to 1000 [ 2602.100587][ T2861] lo speed is unknown, defaulting to 1000 [ 2607.227025][ T2897] loop3: detected capacity change from 0 to 512 [ 2607.611063][ T2897] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 2611.879177][ T2927] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6966'. [ 2616.919337][ T2964] futex_wake_op: syz.9.6976 tries to shift op by 32; fix this program [ 2618.288156][ T2985] futex_wake_op: syz.3.6980 tries to shift op by 144; fix this program [ 2618.358841][ T2987] loop3: detected capacity change from 0 to 256 [ 2618.778998][ T2989] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6981'. [ 2619.998547][ T2987] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 2620.046202][ T28] audit: type=1800 audit(1785566385.188:1423): pid=2985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6980" name="file1" dev="loop3" ino=1048820 res=0 errno=0 [ 2621.022983][ T3002] overlayfs: failed to clone upperpath [ 2624.016429][ T3016] overlayfs: failed to clone lowerpath [ 2624.040210][ T3017] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 2630.667608][ T3085] netlink: 'syz.3.7003': attribute type 10 has an invalid length. [ 2638.752922][ T3140] overlayfs: failed to clone lowerpath [ 2641.079430][ T3163] create_pit_timer: 4 callbacks suppressed [ 2641.079446][ T3163] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2646.108036][ T3192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7032'. [ 2652.365374][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.371762][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.385070][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2660.780270][ T3304] loop3: detected capacity change from 0 to 256 [ 2660.790705][ T3304] exfat: Deprecated parameter 'namecase' [ 2660.797592][ T3304] exfat: Deprecated parameter 'namecase' [ 2660.803582][ T3304] exfat: Unknown parameter 'zero_size_dir' [ 2666.581490][ T5778] Bluetooth: hci2: Malformed LE Event: 0x1b [ 2671.909513][ T3379] tipc: Enabling of bearer rejected, failed to enable media [ 2673.251920][ T3399] loop3: detected capacity change from 0 to 64 [ 2683.758695][ T3445] overlayfs: failed to clone upperpath [ 2691.544558][ T3514] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 2694.135781][T12499] libceph: connect (1)[c::]:6789 error -22 [ 2694.174997][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2695.336480][ T3530] netlink: 'syz.2.7118': attribute type 4 has an invalid length. [ 2695.347260][ T3514] ceph: No mds server is up or the cluster is laggy [ 2695.363484][T12499] libceph: connect (1)[c::]:6789 error -22 [ 2695.386633][T12499] libceph: mon0 (1)[c::]:6789 connect error [ 2695.726786][ T3538] syzkaller0: entered promiscuous mode [ 2695.732510][ T3538] syzkaller0: entered allmulticast mode [ 2695.749747][ T3538] tipc: Enabled bearer , priority 0 [ 2695.762594][ T3538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7122'. [ 2695.794096][ T3538] tipc: Resetting bearer [ 2695.823139][ T3537] tipc: Resetting bearer [ 2695.868551][ T3537] tipc: Disabling bearer [ 2711.048025][ T3639] tipc: Enabling of bearer rejected, failed to enable media [ 2713.345365][ T3656] SET target dimension over the limit! [ 2715.508348][ T3670] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2715.522729][ T3670] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2715.544796][ T3670] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2715.553819][ T3670] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2715.580888][ T3670] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2715.588310][ T3670] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2715.894824][ T3666] lo speed is unknown, defaulting to 1000 [ 2716.009244][ T3680] xt_hashlimit: max too large, truncated to 1048576 [ 2717.465739][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2717.472169][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2717.489629][ T1286] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2717.548113][ T3412] bond0: (slave syz_tun): Releasing backup interface [ 2717.554970][ T3412] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2717.583934][ T3412] syz_tun (unregistering): left allmulticast mode [ 2717.911561][ T5778] Bluetooth: hci4: command tx timeout [ 2718.111408][ T3693] loop3: detected capacity change from 0 to 256 [ 2718.123640][ T3693] exfat: Deprecated parameter 'utf8' [ 2718.194044][ T3693] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 2719.018581][T31193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2720.680584][ T5778] Bluetooth: hci4: command tx timeout [ 2720.902400][ T3666] lo speed is unknown, defaulting to 1000 [ 2721.825675][T31193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2722.143729][T31193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2723.737279][ T5778] Bluetooth: hci4: command tx timeout [ 2725.124937][ T3747] bond0: left allmulticast mode [ 2726.154288][ T3747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2726.249512][ T3670] Bluetooth: hci4: command tx timeout [ 2726.289613][ T3666] chnl_net:caif_netlink_parms(): no params data found [ 2726.470952][T31193] tipc: Left network mode [ 2727.578100][ T3753] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2727.587749][ T3753] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2727.597668][ T3753] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2730.363873][T31193] bond13: (slave ip6gretap3): Releasing active interface [ 2730.390951][T31193] ip6gretap3 (unregistering): left allmulticast mode [ 2730.703228][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 2730.738433][ T3666] bridge0: port 1(bridge_slave_0) entered disabled state [ 2730.745788][ T3666] bridge_slave_0: entered allmulticast mode [ 2730.802506][ T3666] bridge_slave_0: entered promiscuous mode [ 2730.823797][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 2730.834025][ T3666] bridge0: port 2(bridge_slave_1) entered disabled state [ 2730.841356][ T3666] bridge_slave_1: entered allmulticast mode [ 2730.872380][ T3666] bridge_slave_1: entered promiscuous mode [ 2731.290579][ T3800] blktrace: Concurrent blktraces are not allowed on loop12 [ 2731.712328][ T3800] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 2732.098953][ T3805] loop3: detected capacity change from 0 to 256 [ 2732.308923][ T3805] FAT-fs (loop3): Directory bread(block 64) failed [ 2732.321992][ T3805] FAT-fs (loop3): Directory bread(block 65) failed [ 2732.335685][ T3805] FAT-fs (loop3): Directory bread(block 66) failed [ 2732.369451][ T3805] FAT-fs (loop3): Directory bread(block 67) failed [ 2732.393557][ T3805] FAT-fs (loop3): Directory bread(block 68) failed [ 2732.400730][ T3805] FAT-fs (loop3): Directory bread(block 69) failed [ 2732.498853][ T3805] FAT-fs (loop3): Directory bread(block 70) failed [ 2732.514270][ T3805] FAT-fs (loop3): Directory bread(block 71) failed [ 2732.560377][ T3805] FAT-fs (loop3): Directory bread(block 72) failed [ 2732.599802][ T3805] FAT-fs (loop3): Directory bread(block 73) failed [ 2732.947011][ T3805] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2733.481786][ T3666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2733.672856][ T3666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2733.799033][ T3666] team0: Port device team_slave_0 added [ 2733.873042][ T3666] team0: Port device team_slave_1 added [ 2734.054393][ T3666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2734.204230][ T3666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2734.273631][ T3666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2734.297251][ T3666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2734.304279][ T3666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2735.821424][ T3666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2738.766429][T31193] batman_adv: batadv0: Removing interface: gretap3 [ 2738.858945][T31193] bond11: (slave gretap4): Releasing active interface [ 2738.910262][ C0] vkms_vblank_simulate: vblank timer overrun [ 2738.977111][T31193] bond25: (slave gretap5): Releasing active interface [ 2739.612295][ T3666] hsr_slave_0: entered promiscuous mode [ 2739.634032][ T3666] hsr_slave_1: entered promiscuous mode [ 2740.263731][ T28] audit: type=1800 audit(1785566500.157:1424): pid=3857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7194" name="file0" dev="overlay" ino=4324 res=0 errno=0 [ 2743.461698][T31193] hsr_slave_0: left promiscuous mode [ 2743.504369][T31193] batman_adv: batadv0: Interface deactivated: dummy0 [ 2743.553886][T31193] batman_adv: batadv0: Removing interface: dummy0 [ 2743.920367][T31193] bond29 (unregistering): Released all slaves [ 2743.949690][T31193] bond28 (unregistering): Released all slaves [ 2743.977531][T31193] bond27 (unregistering): Released all slaves [ 2745.809490][T31193] bond26 (unregistering): Released all slaves [ 2746.538677][T31193] bond25 (unregistering): Released all slaves [ 2747.316388][T31193] bond24 (unregistering): Released all slaves [ 2747.627473][T31193] bond23 (unregistering): Released all slaves [ 2747.959153][T31193] bond22 (unregistering): Released all slaves [ 2747.976875][T31193] bond21 (unregistering): Released all slaves [ 2748.312827][T31193] bond20 (unregistering): Released all slaves [ 2748.620609][T31193] bond19 (unregistering): Released all slaves [ 2748.636640][T31193] bond18 (unregistering): Released all slaves [ 2748.652496][T31193] bond17 (unregistering): Released all slaves [ 2748.676001][T31193] bond16 (unregistering): Released all slaves [ 2748.713053][T31193] bond0 (unregistering): (slave vxlan2): Releasing backup interface [ 2748.722899][T31193] vxlan2 (unregistering): left allmulticast mode [ 2749.131412][T31193] bond15 (unregistering): Released all slaves [ 2749.156635][T31193] bond14 (unregistering): Released all slaves [ 2749.509434][T31193] bond13 (unregistering): Released all slaves [ 2749.549798][T31193] bond12 (unregistering): (slave bridge4): Releasing backup interface [ 2749.613394][T31193] bond12 (unregistering): Released all slaves [ 2749.999618][T31193] bond11 (unregistering): Released all slaves [ 2750.019935][T31193] bond9 (unregistering): Released all slaves [ 2750.104641][T31193] bond2 (unregistering): (slave macvlan3): Releasing active interface [ 2750.381957][T31193] bond10 (unregistering): Released all slaves [ 2750.400204][T31193] bond8 (unregistering): Released all slaves [ 2750.764365][T31193] bond7 (unregistering): Released all slaves [ 2751.058399][T31193] bond6 (unregistering): Released all slaves [ 2751.073678][T31193] bond5 (unregistering): Released all slaves [ 2751.956907][T31193] bond4 (unregistering): Released all slaves [ 2751.974685][T31193] bond3 (unregistering): Released all slaves [ 2752.357238][T31193] bond2 (unregistering): Released all slaves [ 2752.718291][T31193] bond1 (unregistering): Released all slaves [ 2754.754354][T31193] bond0 (unregistering): Released all slaves [ 2755.043691][ T3892] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR [ 2755.122059][ T3914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7202'. [ 2755.139524][ T3914] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7202'. [ 2755.961631][ T3670] Bluetooth: hci2: Malformed LE Event: 0x1b [ 2758.148094][ T3944] wg1: entered promiscuous mode [ 2758.153078][ T3944] wg1: entered allmulticast mode [ 2758.278056][T31193] IPVS: stop unused estimator thread 0... [ 2759.687195][ T3666] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2759.804795][ T3666] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2760.216568][ T3964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2761.424057][ T3666] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2761.495090][ T3666] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2761.667180][ T3972] netlink: 'syz.6.7215': attribute type 2 has an invalid length. [ 2762.079253][ T3666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2762.139683][ T3666] 8021q: adding VLAN 0 to HW filter on device team0 [ 2762.173866][T32021] bridge0: port 1(bridge_slave_0) entered blocking state [ 2762.181177][T32021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2762.279659][T31372] bridge0: port 2(bridge_slave_1) entered blocking state [ 2762.286940][T31372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2765.175748][ T3666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2768.825636][ T4030] netlink: 'syz.3.7224': attribute type 10 has an invalid length. [ 2768.835475][ T4030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7224'. [ 2770.054854][ T4030] team0: Port device geneve0 added [ 2770.483008][ T4047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7226'. [ 2770.592921][ T4047] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7226'. [ 2770.800754][ T3666] veth0_vlan: entered promiscuous mode [ 2770.885735][ T3666] veth1_vlan: entered promiscuous mode [ 2771.231190][ T3666] veth0_macvtap: entered promiscuous mode [ 2771.288835][ T3666] veth1_macvtap: entered promiscuous mode [ 2772.878193][ T3666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2772.908813][ T3666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2772.940473][ T3666] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2772.987010][ T3666] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2773.021781][ T4066] [ 2773.024232][ T4066] ====================================================== [ 2773.031304][ T4066] WARNING: possible circular locking dependency detected [ 2773.031303][ T3666] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2773.038360][ T4066] syzkaller #0 Not tainted [ 2773.038374][ T4066] ------------------------------------------------------ [ 2773.038383][ T4066] syz.3.7229/4066 is trying to acquire lock: [ 2773.038398][ T4066] ffff888148c70b80 [ 2773.063801][ T3666] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2773.064611][ T4066] (&sb->s_type->i_mutex_key#24){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 2773.087313][ T4066] [ 2773.087313][ T4066] but task is already holding lock: [ 2773.094755][ T4066] ffff88801bf35d20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 2773.103883][ T4066] [ 2773.103883][ T4066] which lock already depends on the new lock. [ 2773.103883][ T4066] [ 2773.114336][ T4066] [ 2773.114336][ T4066] the existing dependency chain (in reverse order) is: [ 2773.123438][ T4066] [ 2773.123438][ T4066] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 2773.131175][ T4066] __mutex_lock+0x135/0xc80 [ 2773.136371][ T4066] tcm_set_name+0x2a/0x90 [ 2773.141281][ T4066] function_make+0x199/0x350 [ 2773.146452][ T4066] configfs_mkdir+0x515/0x9e0 [ 2773.151693][ T4066] vfs_mkdir+0x2a5/0x470 [ 2773.156491][ T4066] do_mkdirat+0x1dc/0x450 [ 2773.161375][ T4066] __x64_sys_mkdir+0x6e/0x80 [ 2773.166515][ T4066] do_syscall_64+0x55/0xb0 [ 2773.171481][ T4066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2773.177928][ T4066] [ 2773.177928][ T4066] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 2773.186216][ T4066] __mutex_lock+0x135/0xc80 [ 2773.191274][ T4066] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 2773.197982][ T4066] configfs_symlink+0x5a5/0xfe0 [ 2773.203385][ T4066] vfs_symlink+0x138/0x2b0 [ 2773.208344][ T4066] do_symlinkat+0x1ba/0x400 [ 2773.213388][ T4066] __x64_sys_symlink+0x7e/0x90 [ 2773.218721][ T4066] do_syscall_64+0x55/0xb0 [ 2773.223691][ T4066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2773.230126][ T4066] [ 2773.230126][ T4066] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{3:3}: [ 2773.238883][ T4066] __lock_acquire+0x37ef/0x7d80 [ 2773.244287][ T4066] lock_acquire+0x19e/0x420 [ 2773.249341][ T4066] down_write+0x97/0x200 [ 2773.254138][ T4066] configfs_depend_item_unlocked+0x157/0x430 [ 2773.260664][ T4066] usbg_make_tpg+0x1f7/0x580 [ 2773.265807][ T4066] target_fabric_make_tpg+0xa4/0x6d0 [ 2773.271686][ T4066] configfs_mkdir+0x515/0x9e0 [ 2773.276908][ T4066] vfs_mkdir+0x2a5/0x470 [ 2773.281698][ T4066] do_mkdirat+0x1dc/0x450 [ 2773.286575][ T4066] __x64_sys_mkdir+0x6e/0x80 [ 2773.291717][ T4066] do_syscall_64+0x55/0xb0 [ 2773.296680][ T4066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2773.303128][ T4066] [ 2773.303128][ T4066] other info that might help us debug this: [ 2773.303128][ T4066] [ 2773.313401][ T4066] Chain exists of: [ 2773.313401][ T4066] &sb->s_type->i_mutex_key#24 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 2773.313401][ T4066] [ 2773.328144][ T4066] Possible unsafe locking scenario: [ 2773.328144][ T4066] [ 2773.335635][ T4066] CPU0 CPU1 [ 2773.341030][ T4066] ---- ---- [ 2773.346419][ T4066] lock(&opts->dep_lock); [ 2773.350866][ T4066] lock(gadget_subsys.su_mutex); [ 2773.358439][ T4066] lock(&opts->dep_lock); [ 2773.365403][ T4066] lock(&sb->s_type->i_mutex_key#24); [ 2773.370930][ T4066] [ 2773.370930][ T4066] *** DEADLOCK *** [ 2773.370930][ T4066] [ 2773.379104][ T4066] 5 locks held by syz.3.7229/4066: [ 2773.384261][ T4066] #0: ffff8881432cc418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2773.393584][ T4066] #1: ffff88805a9d0670 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 2773.404541][ T4066] #2: ffffffff8db2b450 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 2773.414346][ T4066] #3: ffffffff8de58aa8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 2773.424137][ T4066] #4: ffff88801bf35d20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 2773.433843][ T4066] [ 2773.433843][ T4066] stack backtrace: [ 2773.439754][ T4066] CPU: 0 PID: 4066 Comm: syz.3.7229 Not tainted syzkaller #0 [ 2773.447149][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2773.457226][ T4066] Call Trace: [ 2773.460533][ T4066] [ 2773.463492][ T4066] dump_stack_lvl+0x18c/0x250 [ 2773.468218][ T4066] ? load_image+0x420/0x420 [ 2773.472871][ T4066] ? show_regs_print_info+0x20/0x20 [ 2773.478107][ T4066] ? print_circular_bug+0x12b/0x1a0 [ 2773.483345][ T4066] check_noncircular+0x2fc/0x400 [ 2773.488317][ T4066] ? print_deadlock_bug+0x5d0/0x5d0 [ 2773.493553][ T4066] ? lockdep_lock+0xf5/0x230 [ 2773.498173][ T4066] ? __lock_acquire+0x357f/0x7d80 [ 2773.503228][ T4066] ? _find_first_zero_bit+0xd6/0x100 [ 2773.508549][ T4066] __lock_acquire+0x37ef/0x7d80 [ 2773.513469][ T4066] ? is_bpf_text_address+0x28f/0x2a0 [ 2773.518793][ T4066] ? verify_lock_unused+0x140/0x140 [ 2773.524028][ T4066] lock_acquire+0x19e/0x420 [ 2773.528558][ T4066] ? configfs_depend_item_unlocked+0x157/0x430 [ 2773.534765][ T4066] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2773.540977][ T4066] ? __might_sleep+0xe0/0xe0 [ 2773.546155][ T4066] ? rcu_is_watching+0x15/0xb0 [ 2773.550967][ T4066] ? read_lock_is_recursive+0x20/0x20 [ 2773.556372][ T4066] ? trace_contention_end+0x39/0xe0 [ 2773.561601][ T4066] ? __mutex_lock+0x30d/0xc80 [ 2773.566313][ T4066] ? do_syscall_64+0x55/0xb0 [ 2773.571043][ T4066] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2773.577168][ T4066] down_write+0x97/0x200 [ 2773.581456][ T4066] ? configfs_depend_item_unlocked+0x157/0x430 [ 2773.587638][ T4066] ? down_read_killable+0x340/0x340 [ 2773.592878][ T4066] configfs_depend_item_unlocked+0x157/0x430 [ 2773.598890][ T4066] usbg_make_tpg+0x1f7/0x580 [ 2773.603515][ T4066] ? usbg_drop_tport+0x20/0x20 [ 2773.608312][ T4066] ? vscnprintf+0x80/0x80 [ 2773.612678][ T4066] target_fabric_make_tpg+0xa4/0x6d0 [ 2773.618280][ T4066] ? target_fabric_release_wwn+0xb0/0xb0 [ 2773.623976][ T4066] configfs_mkdir+0x515/0x9e0 [ 2773.628697][ T4066] vfs_mkdir+0x2a5/0x470 [ 2773.632974][ T4066] do_mkdirat+0x1dc/0x450 [ 2773.637338][ T4066] ? vfs_mkdir+0x470/0x470 [ 2773.641816][ T4066] ? getname_flags+0x20a/0x500 [ 2773.646626][ T4066] __x64_sys_mkdir+0x6e/0x80 [ 2773.651243][ T4066] do_syscall_64+0x55/0xb0 [ 2773.655692][ T4066] ? clear_bhb_loop+0x40/0x90 [ 2773.660394][ T4066] ? clear_bhb_loop+0x40/0x90 [ 2773.665095][ T4066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2773.671050][ T4066] RIP: 0033:0x7fb3d559e019 [ 2773.675631][ T4066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2773.695287][ T4066] RSP: 002b:00007fb3d638d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2773.703745][ T4066] RAX: ffffffffffffffda RBX: 00007fb3d5825fa0 RCX: 00007fb3d559e019 [ 2773.711742][ T4066] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 2773.719740][ T4066] RBP: 00007fb3d563500c R08: 0000000000000000 R09: 0000000000000000 [ 2773.727734][ T4066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2773.735727][ T4066] R13: 00007fb3d5826038 R14: 00007fb3d5825fa0 R15: 00007ffc7c6b62e8 [ 2773.743733][ T4066] [ 2773.798679][ T3666] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 2773.927383][T32021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2773.937170][T32021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2773.945692][ T3666] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 2774.040624][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2774.048823][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2774.468021][ T3670] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 2774.474420][ T3670] Bluetooth: hci2: command 0x206a tx timeout