last executing test programs: 23m12.070358016s ago: executing program 2 (id=55): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) recvfrom$inet(r0, &(0x7f0000000280)=""/205, 0xcd, 0x40002100, 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8, 0x0, 0x72ea4d80, 0xfffffffffffffffc, 0x108, 0x0, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000c80), 0x288400, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000037b000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) madvise(&(0x7f000011f000/0x1000)=nil, 0x1000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x9ffc) 23m9.832565291s ago: executing program 2 (id=66): r0 = creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x22c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x24000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb2c}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xea07}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4fdc}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6260341f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x30c00000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2c000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd70}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1a66}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}]}, @NL80211_ATTR_REG_RULES={0x6c, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1424}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffed5e}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x7a4fec870cbffb10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}]}, 0x22c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@x}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000200), &(0x7f00000003c0)=r3}, 0x20) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r5, @ANYBLOB="05002d000100000008000600", @ANYRES8=r4], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 23m7.923718109s ago: executing program 2 (id=75): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 23m6.562009973s ago: executing program 2 (id=77): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611266000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 23m2.072699914s ago: executing program 2 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 23m0.388270867s ago: executing program 2 (id=107): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) socket$can_j1939(0x1d, 0x2, 0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 23m0.27024958s ago: executing program 32 (id=107): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) socket$can_j1939(0x1d, 0x2, 0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 22m19.270893619s ago: executing program 3 (id=200): socket$inet6(0xa, 0x80003, 0x6) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001e0001012cbd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="100000001404000008000a00", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 22m10.157137286s ago: executing program 3 (id=217): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x1e, 0x80}, 0x2c) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 22m9.062672974s ago: executing program 3 (id=219): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/meminfo\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f0000000000)=""/4118, 0x1016) 22m6.454939098s ago: executing program 3 (id=226): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000001c40)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 22m0.025180669s ago: executing program 3 (id=240): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x400454a4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x82) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 21m57.344273375s ago: executing program 3 (id=244): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 21m41.778612793s ago: executing program 33 (id=244): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 10.456339691s ago: executing program 6 (id=5576): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x24044884) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 8.600223339s ago: executing program 6 (id=5581): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x8002, 0x8, {0x6, 0x9, 0x2, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x10, 0x0, 0x4000000000200}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x30, 0x0, 0x8, [{0x1, 0x0, 0x1, 0xfffffe01, '['}]}, 0x0, 0x0, 0x0, 0x0}) getdents(r4, 0x0, 0x0) 6.68594764s ago: executing program 4 (id=5585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) 6.556797694s ago: executing program 5 (id=5586): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000180), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 5.000603673s ago: executing program 5 (id=5587): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240001000d240f0100000000000000000006241200001009058103000404000009ea000000020d00000904010102020d0000090582020002000000090503020000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fsopen(&(0x7f00000001c0)='hostfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x71) 4.601389425s ago: executing program 6 (id=5588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendfile(r0, r0, 0x0, 0x7f03) 4.601191345s ago: executing program 4 (id=5589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0xa, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 4.564121736s ago: executing program 4 (id=5591): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) write$eventfd(r0, &(0x7f0000000640)=0x9, 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0xfffffdea}, 0x1, 0x0, 0x0, 0x801}, 0x4) close(r0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.369910992s ago: executing program 4 (id=5592): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x10000000, 0x0, 0x0}, 0x2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xfdef, 0x4) 4.294443585s ago: executing program 6 (id=5593): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) 4.044284583s ago: executing program 1 (id=5594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(0x3) 3.409211023s ago: executing program 5 (id=5595): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000180)='./file2/file0\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000080)={[{@norecovery}, {@bsdgroups}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@journal_checksum}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJffjUjW1d2EXBgl2IuGhokho6/UGTgq2FJuBCQUHEbZFu/Ae6l+5dCCKoO9dCFalY0NKR+2OayWQmM/k10+R+PjCZc+85N+d8c+fknjt3ztwAKms2+5FGvB/x+moSMd2SNxVF5mxZ7sW/Hl7LHkk0Gt/9ZxJJua5ZPimfT5UL4xHxxwsRn67trHft/oMbi/VG4VHEmfWbd86s3X/w0erNxevL15dvLZz92sefzH994eOFlobu36ny+eKl73z+Fz/54VdX/lT/KIlzcWX0x0vRFsdhmY3ZeF2G2Lp+JCI+yRId/i7HzQkIodJq5etxNCI+G9NRy5cK07H686E2DjhSjVpEY3dJrwLAcaV7Q1U1xwHNc/v+zoOvHPGoZHCeny9OgHbGP1K+5TCenxtNvkhazoyK9zZOH0L9WR2vHo4/fvVw5nFsex/i5Zu9M3II9XSzsRkRn+sUf5K37XQeaRZ/uu1cP4mI+YgYK9v3rQO0IWlJH8X7MLvpM/5aFn/rfkgj4lz5nK2/sM/629/WGnT8AFTTs/PlgXwjW9o6/mVjj+b4J7bGP4+a200d/JJMbtjHv+7jv+bxfjwf96Rt47BszHK5868cbV/xt59d/FW3+ovx38zj5iOrvzkWHITnmxEzbfH/NAu2HP9k8Scdxr9Zkavn+qvj23/+x8VuecOOv/Ek4oOO5z9bo9Istcv1yTMrq/Xl+eJnxzp+9/sf/LZb/Z3jf+cIIu0s2/+TXeJv2f9p+3bZ3+RO51+52b7i6eUnN7vVP9Vz/6d/H0uK882xcs2PNtfX7y5EjCWXyiLl+sX19btnd4+3KPOykT8vFPF/+KXO/X/b678tqonmv8w+3PnejRfd8vbz+m+5mPy60WcbusniX+q9/7f6/0QzN+KXfdbxn+/f+0K3vM7xJweMCgAAAAAAAKopza/BJuncm3Sazs0V82U/E5Np/fba+pdXbt+7tRTxYf55yNE00iT/yMh0sZysrNaXF8rPwzaXz7YtfyUi3ouIX9cm8uW5a7frS8MOHgAAAAAAAAAAAAAAAAAAAN4Sp8r5/837VP+7Vsz/Byqi9w3mdtz/ATghjvIGk8DbLe//ux3i3x1cW4DBcvyH6tL/obr0f6gu/R+qS/+H6tL/obr0f6gu/R8AAAAATqT3vvjsr0lEbHxjIn9kxso8k37hZBvdU+nakbUDGDw9GqrrzaV/g32onL7G//8tvxzw6JsDDEHSaWU+OGjs3vmfddxyy+bB2wYAAAAAAAAAAAAAFD54v/v8/73NDQaOG9P+oLoOMP/fVwfAMbfvr/4fO9x2AIPnHB/oMYs/xrtl9Jr/DwAAAAAAAAAAAAAcmqn8kaRz5VzgqUjTubmIT0XE6RhNVlbry/MR8W5E/KU2+k62vDDsRgMAAAAAAAAAAAAAAAAAAMAJs3b/wY3Fen35bmvifzvWnOxE8y6ovQs3+iiza+KbscetIhn8n2UiIoa+U7Ylnpa3m93z5n8oX+ctWSMtZZKIjSx76AEWiXg7mpEnhvUfCQAAAAAAAAAAAAAAAAAAqqtl7nFnM78ZcIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYPC27v/fI7E0WWzQV+HtiWHHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcT/8PAAD//4RxNqU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_LOCK(0x0, 0xb) 3.360246004s ago: executing program 0 (id=5596): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r0, r0, 0x0) 3.292540936s ago: executing program 1 (id=5597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xd}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) 3.290110296s ago: executing program 4 (id=5598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x2c020400) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x8}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x2c020400) 3.236410548s ago: executing program 6 (id=5599): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000100)={{0x8, 0x2}, {0x8, 0x1}, 0x7, 0x5}) 3.135005141s ago: executing program 5 (id=5600): bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000340)={0x8, 0x8, 0x4, 0x2, 0x7, 0xf7, 0x1, 0x1, 0x2, 0x9, 0x6, 0x7, 0xd5, 0x45}, 0xe) msgget$private(0x0, 0x3ac) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x3, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x5, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) open_by_handle_at(0xffffffffffffffff, 0x0, 0xc00) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xf) 2.669380636s ago: executing program 0 (id=5601): socket$inet_udp(0x2, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x800029, 0xb, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0x0, 0xff, 0x0, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0xa, 0x0, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) syz_open_dev$vcsu(&(0x7f0000000100), 0x80, 0x32e55632a4e5392) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.303467717s ago: executing program 0 (id=5602): r0 = socket$inet(0x2, 0x801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) fallocate(r2, 0x1, 0x2, 0x7) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x1c, 0x4) splice(r0, 0x0, r3, 0x0, 0x1, 0x3) 2.260338789s ago: executing program 1 (id=5612): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1004000, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.253180299s ago: executing program 6 (id=5603): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = eventfd2(0x1, 0x80001) ioctl$KVM_CREATE_VM(r1, 0x4020940d, 0x100000000000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2.242121979s ago: executing program 4 (id=5604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000002060500000000000000000000fffefc05000400000000000900020073797a310000000010000300686173683a69702c6d61630005000500020000000500010006"], 0x48}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x4}, 0xc) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="27d156241a05"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) socket$inet(0x10, 0x3, 0x0) syz_open_dev$loop(0x0, 0x9, 0x121080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000002aaaaaa"], 0x0) 2.169449341s ago: executing program 0 (id=5605): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240001000d240f0100000000000000000006241200001009058103000404000009ea000000020d00000904010102020d0000090582020002000000090503020000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fsopen(&(0x7f00000001c0)='hostfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x71) 2.168201191s ago: executing program 1 (id=5606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x2a}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.89642491s ago: executing program 5 (id=5607): r0 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100208b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) lseek(r0, 0x5, 0x2) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 855.549543ms ago: executing program 1 (id=5608): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x30, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) 855.312033ms ago: executing program 5 (id=5609): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x10000000, 0x0, 0x0}, 0x2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xfdef, 0x4) 796.091055ms ago: executing program 1 (id=5610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x200, 0x0, 0x4, 0x2, 0x3}, 0x20) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40890}, 0x10) close(r4) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) 588.793811ms ago: executing program 0 (id=5611): ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 0s ago: executing program 0 (id=5613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 81] XFS (loop5): Unmounting Filesystem [ 640.538725][T10562] ntfs: (device loop6): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 640.550451][T10562] ntfs: (device loop6): ntfs_fill_super(): Unsupported NTFS filesystem. [ 649.358601][T10626] loop5: detected capacity change from 0 to 1024 [ 652.365110][T10655] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1459'. [ 656.472779][T10674] loop5: detected capacity change from 0 to 8 [ 656.761367][T10671] loop6: detected capacity change from 0 to 512 [ 656.864215][T10673] SQUASHFS error: zlib decompression failed, data probably corrupt [ 656.873216][T10673] SQUASHFS error: Failed to read block 0x4de: -5 [ 656.880707][T10673] SQUASHFS error: Failed to read block 0x4e2: -5 [ 656.887354][T10673] SQUASHFS error: Failed to read block 0x9ca: -5 [ 656.893921][T10673] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 656.900467][T10673] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 656.907187][T10673] SQUASHFS error: Failed to read block 0x535f2: -5 [ 656.937471][ T26] audit: type=1800 audit(1779891337.067:26): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1464" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 658.716818][T10685] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 658.728118][T10685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.599248][T10699] autofs4:pid:10699:autofs_fill_super: called with bogus options [ 659.713410][T10701] loop6: detected capacity change from 0 to 1024 [ 660.521063][ T5785] hfsplus: bad catalog folder entry [ 660.584207][ T5785] hfsplus: bad catalog file entry [ 665.413260][T10738] loop6: detected capacity change from 0 to 128 [ 665.451879][T10738] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 665.477831][T10738] hpfs: filesystem error: improperly stopped [ 665.493620][T10738] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 665.502276][T10738] hpfs: You really don't want any checks? You are crazy... [ 665.586165][T10738] hpfs: hpfs_map_sector(): read error [ 665.662178][T10738] hpfs: code page support is disabled [ 665.771584][T10738] hpfs: hpfs_map_4sectors(): unaligned read [ 665.846456][T10738] hpfs: hpfs_map_4sectors(): unaligned read [ 665.924603][T10738] hpfs: filesystem error: unable to find root dir [ 666.345369][T10741] hpfs: hpfs_map_4sectors(): unaligned read [ 666.382355][T10741] hpfs: hpfs_map_4sectors(): unaligned read [ 666.391422][T10741] hpfs: hpfs_map_sector(): read error [ 666.985363][T10744] loop6: detected capacity change from 0 to 512 [ 667.428849][T10744] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1482: bg 0: block 473: padding at end of block bitmap is not set [ 667.683638][T10744] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 667.696203][T10744] EXT4-fs (loop6): 1 orphan inode deleted [ 667.702079][T10744] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 667.713599][T10744] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.086689][T10755] IPVS: dh: FWM 3 0x00000003 - no destination available [ 669.311447][T10762] netlink: 'syz.5.1488': attribute type 24 has an invalid length. [ 669.334462][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1488'. [ 669.364602][T10762] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 670.649554][T10779] loop5: detected capacity change from 0 to 128 [ 671.852207][T10779] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 671.907416][T10779] hpfs: filesystem error: improperly stopped [ 671.913496][T10779] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 671.921432][T10779] hpfs: You really don't want any checks? You are crazy... [ 671.929015][T10779] hpfs: hpfs_map_sector(): read error [ 671.934503][T10779] hpfs: code page support is disabled [ 671.940178][T10779] hpfs: hpfs_map_4sectors(): unaligned read [ 671.946128][T10779] hpfs: hpfs_map_4sectors(): unaligned read [ 671.952566][T10779] hpfs: filesystem error: unable to find root dir [ 672.380649][T10797] hpfs: hpfs_map_4sectors(): unaligned read [ 672.389031][T10797] hpfs: hpfs_map_4sectors(): unaligned read [ 672.395484][T10797] hpfs: hpfs_map_sector(): read error [ 676.414461][ T5918] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 676.424184][ T5918] Bluetooth: hci5: Injecting HCI hardware error event [ 676.431531][T10826] overlayfs: failed to clone upperpath [ 676.437958][T10329] Bluetooth: hci5: hardware error 0x00 [ 677.805091][T10851] loop6: detected capacity change from 0 to 32768 [ 678.829942][T10856] overlayfs: failed to clone upperpath [ 679.929068][T10851] XFS (loop6): Mounting V5 Filesystem [ 681.691724][T10851] XFS (loop6): Ending clean mount [ 681.715911][T10851] XFS (loop6): Quotacheck needed: Please wait. [ 681.921028][T10851] XFS (loop6): Quotacheck: Done. [ 681.981913][ T5522] XFS (loop6): Unmounting Filesystem [ 695.511910][T10987] Bluetooth: hci0: service_discovery: too big uuid_count value 63764 [ 697.040484][T11006] loop6: detected capacity change from 0 to 128 [ 697.052833][T11006] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 697.053147][T11003] loop5: detected capacity change from 0 to 512 [ 697.076330][T11006] hpfs: filesystem error: improperly stopped [ 697.094827][T11006] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 697.130640][T11006] hpfs: You really don't want any checks? You are crazy... [ 697.143139][T11006] hpfs: hpfs_map_sector(): read error [ 697.151300][T11006] hpfs: code page support is disabled [ 697.168515][T11006] hpfs: hpfs_map_4sectors(): unaligned read [ 697.186686][T11006] hpfs: hpfs_map_4sectors(): unaligned read [ 697.227163][T11006] hpfs: filesystem error: unable to find root dir [ 697.834534][T11013] overlayfs: failed to clone lowerpath [ 698.194426][T11015] hpfs: hpfs_map_4sectors(): unaligned read [ 698.215588][T11015] hpfs: hpfs_map_4sectors(): unaligned read [ 698.224326][T11015] hpfs: hpfs_map_sector(): read error [ 700.235418][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.252105][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 702.363679][T11041] siw: device registration error -23 [ 702.379786][T11041] smc: removing ib device syz2 [ 702.969820][T11043] loop6: detected capacity change from 0 to 4096 [ 703.389795][T11043] ntfs3: loop6: Failed to load $Extend. [ 704.303564][T11091] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 704.367701][T11091] ntfs3: loop6: ino=5, "/" directory corrupted [ 704.380061][T11091] ntfs3: loop6: ino=5, "/" directory corrupted [ 704.389714][T11091] ntfs3: loop6: ino=5, "/" directory corrupted [ 704.502870][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 704.627210][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 704.950186][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 705.013466][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 706.001367][ T21] libceph: connect (1)[c::]:6789 error -101 [ 706.018978][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 706.165541][T11098] ceph: No mds server is up or the cluster is laggy [ 707.350439][ T5918] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 708.663186][ T5918] Bluetooth: hci1: Injecting HCI hardware error event [ 709.168359][T10329] Bluetooth: hci1: hardware error 0x00 [ 713.293795][T11154] loop5: detected capacity change from 0 to 128 [ 713.385172][T11154] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 713.415345][T11154] hpfs: filesystem error: improperly stopped [ 713.596794][T11154] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 713.612730][T11164] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 713.624434][T11164] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 713.801122][T11154] hpfs: You really don't want any checks? You are crazy... [ 713.852712][T11164] loop6: detected capacity change from 0 to 1024 [ 714.070330][T11154] hpfs: hpfs_map_sector(): read error [ 714.082894][T11154] hpfs: code page support is disabled [ 714.088611][T11154] hpfs: hpfs_map_4sectors(): unaligned read [ 714.094952][T11154] hpfs: hpfs_map_4sectors(): unaligned read [ 714.104196][T11154] hpfs: filesystem error: unable to find root dir [ 715.130152][T11171] hpfs: hpfs_map_4sectors(): unaligned read [ 715.883725][T11171] hpfs: hpfs_map_4sectors(): unaligned read [ 715.889908][T11171] hpfs: hpfs_map_sector(): read error [ 716.290764][T11164] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 716.298200][T11164] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 716.307819][T11164] EXT4-fs (loop6): test_dummy_encryption requires encrypt feature [ 716.331453][T11176] netlink: 'syz.4.1590': attribute type 2 has an invalid length. [ 716.401179][ T4199] Bluetooth: hci0: unexpected event for opcode 0x4889 [ 718.903532][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1598'. [ 719.608570][T11222] loop5: detected capacity change from 0 to 1024 [ 720.207809][T11222] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 720.571502][T11222] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.686977][T11233] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 720.965202][T11239] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1601: bg 0: block 112: padding at end of block bitmap is not set [ 721.282530][T11239] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 721.295354][T11239] EXT4-fs (loop5): This should not happen!! Data will be lost [ 721.295354][T11239] [ 721.305117][T11239] EXT4-fs (loop5): Total free blocks count 0 [ 721.311357][T11239] EXT4-fs (loop5): Free/Dirty block details [ 721.317556][T11239] EXT4-fs (loop5): free_blocks=0 [ 721.323027][T11239] EXT4-fs (loop5): dirty_blocks=64 [ 721.328207][T11239] EXT4-fs (loop5): Block reservation details [ 721.334281][T11239] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 722.792748][T11251] overlayfs: failed to clone upperpath [ 723.625117][T11268] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 724.799903][T11283] lo speed is unknown, defaulting to 1000 [ 724.806404][T11283] lo speed is unknown, defaulting to 1000 [ 724.819859][T11283] lo speed is unknown, defaulting to 1000 [ 724.845967][T11283] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 724.896159][T11283] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 724.992832][T11283] lo speed is unknown, defaulting to 1000 [ 725.010945][T11283] lo speed is unknown, defaulting to 1000 [ 725.031156][T11283] lo speed is unknown, defaulting to 1000 [ 725.047557][T11283] lo speed is unknown, defaulting to 1000 [ 725.063950][T11283] lo speed is unknown, defaulting to 1000 [ 725.549691][ T4235] libceph: connect (1)[c::]:6789 error -13 [ 725.591593][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 725.708673][T11281] ceph: No mds server is up or the cluster is laggy [ 725.862765][T11289] loop6: detected capacity change from 0 to 128 [ 725.924541][T11293] loop5: detected capacity change from 0 to 2048 [ 728.761310][T11289] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 728.838401][ T5920] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 728.895981][ T5920] Bluetooth: hci2: Injecting HCI hardware error event [ 728.910632][T10329] Bluetooth: hci2: hardware error 0x00 [ 728.920810][T11308] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 728.920984][T11289] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 729.059380][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1621'. [ 736.000102][T11367] loop5: detected capacity change from 0 to 128 [ 736.443257][T11367] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 736.607105][T11367] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 737.699231][ T4231] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 738.124227][T11403] loop5: detected capacity change from 0 to 512 [ 738.166092][ T4231] usb 7-1: config 0 has no interfaces? [ 738.360785][ T4231] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 738.399445][T11403] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 738.413522][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.493352][ T4231] usb 7-1: Product: syz [ 738.888485][ T26] audit: type=1800 audit(1779891412.677:27): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1644" name="file1" dev="loop5" ino=1048633 res=0 errno=0 [ 738.910215][ T4231] usb 7-1: Manufacturer: syz [ 739.007616][ T4231] usb 7-1: SerialNumber: syz [ 739.127881][ T4231] usb 7-1: config 0 descriptor?? [ 739.575044][ T5919] usb 7-1: USB disconnect, device number 6 [ 741.085197][T11424] loop6: detected capacity change from 0 to 1024 [ 741.117955][T11426] SET target dimension over the limit! [ 743.082225][T11459] ufs: You didn't specify the type of your ufs filesystem [ 743.082225][T11459] [ 743.082225][T11459] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 743.082225][T11459] [ 743.082225][T11459] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 743.114411][T11459] ufs: ufstype=old is supported read-only [ 743.131563][T11459] blk_update_request: I/O error, dev loop11, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 743.779113][T11460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 743.787197][T11460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 743.794810][T11460] device bond0 left promiscuous mode [ 743.801068][T11460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.813463][T11460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 744.299656][T11468] loop5: detected capacity change from 0 to 128 [ 744.851841][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1661'. [ 745.326521][T11468] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 745.339934][T11468] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 745.415091][T11473] 9pnet: Unknown protocol version 9p200 [ 750.788636][T11542] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 754.075519][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 754.092172][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.099376][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.553176][T11598] loop5: detected capacity change from 0 to 1024 [ 757.640455][T11598] EXT4-fs (loop5): Ignoring removed orlov option [ 757.956101][T10329] Bluetooth: hci0: unexpected event for opcode 0x4889 [ 757.965695][T11598] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 760.155773][T11644] loop6: detected capacity change from 0 to 128 [ 760.372235][T11644] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 760.385197][T11644] hpfs: filesystem error: improperly stopped [ 760.391860][T11644] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 760.399684][T11644] hpfs: You really don't want any checks? You are crazy... [ 760.407239][T11644] hpfs: hpfs_map_sector(): read error [ 760.412613][T11644] hpfs: code page support is disabled [ 760.420868][T11644] hpfs: hpfs_map_4sectors(): unaligned read [ 760.427030][T11644] hpfs: hpfs_map_4sectors(): unaligned read [ 760.433153][T11644] hpfs: filesystem error: unable to find root dir [ 762.562897][T11674] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 763.662454][T11688] xt_CT: You must specify a L4 protocol and not use inversions on it [ 763.960162][T11688] loop6: detected capacity change from 0 to 1024 [ 764.043875][T11688] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 765.044905][T11702] capability: warning: `syz.0.1722' uses 32-bit capabilities (legacy support in use) [ 765.343274][T11699] loop6: detected capacity change from 0 to 1024 [ 767.243588][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 767.291436][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 771.445572][T11746] xt_CT: You must specify a L4 protocol and not use inversions on it [ 771.503478][T11746] loop5: detected capacity change from 0 to 1024 [ 772.705302][T11746] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 772.968771][T11720] syz.6.1727 (11720): drop_caches: 2 [ 773.049333][T11753] overlayfs: failed to clone upperpath [ 773.572765][T11757] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 776.748145][T11765] loop6: detected capacity change from 0 to 128 [ 776.756662][T11764] loop5: detected capacity change from 0 to 1024 [ 776.781196][T11765] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 776.792335][T11765] ext4 filesystem being mounted at /246/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 779.953835][T11793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 779.961427][T11793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 780.055108][T11793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 781.876776][T11812] loop6: detected capacity change from 0 to 4096 [ 782.418123][T11812] ntfs3: loop6: Failed to load $Extend. [ 783.342228][T11832] loop5: detected capacity change from 0 to 40427 [ 783.411882][T11835] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 783.536141][T11835] ntfs3: loop6: ino=5, "/" directory corrupted [ 783.564975][T11835] ntfs3: loop6: ino=5, "/" directory corrupted [ 783.593920][T11835] ntfs3: loop6: ino=5, "/" directory corrupted [ 783.688243][T11832] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 783.696320][T11832] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 783.824003][T11832] F2FS-fs (loop5): invalid crc value [ 783.833362][T11832] F2FS-fs (loop5): Found nat_bits in checkpoint [ 783.875592][T11832] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 783.882888][T11832] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 784.789874][ T26] audit: type=1800 audit(1779891454.849:28): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1760" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 786.990838][T11872] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 791.837958][T11906] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 792.903966][T11915] loop6: detected capacity change from 0 to 32768 [ 793.731471][T11915] XFS (loop6): Mounting V5 Filesystem [ 793.879696][T11915] XFS (loop6): Ending clean mount [ 793.896776][T11915] XFS (loop6): Quotacheck needed: Please wait. [ 794.021141][T11942] loop5: detected capacity change from 0 to 128 [ 794.100462][T11915] XFS (loop6): Quotacheck: Done. [ 794.144799][T11942] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 794.194764][T11942] ext4 filesystem being mounted at /286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 796.254744][ T5522] XFS (loop6): Unmounting Filesystem [ 797.366891][T11970] loop5: detected capacity change from 0 to 4096 [ 797.467345][T11970] ntfs3: loop5: Failed to load $Extend. [ 797.758322][T11973] loop6: detected capacity change from 0 to 4096 [ 797.840103][T11978] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 797.956910][T11973] ntfs: (device loop6): parse_options(): Unrecognized mount option . [ 798.546806][T11978] ntfs3: loop5: ino=5, "/" directory corrupted [ 798.587313][T11975] ntfs3: loop5: ino=5, "/" directory corrupted [ 798.595725][T11975] ntfs3: loop5: ino=5, "/" directory corrupted [ 802.293978][T12024] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1806'. [ 804.926724][T12044] loop5: detected capacity change from 0 to 128 [ 805.675856][T12044] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 805.740913][T12044] hpfs: filesystem error: improperly stopped [ 805.937703][T12044] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 805.949043][T12043] loop6: detected capacity change from 0 to 128 [ 805.957340][T12044] hpfs: You really don't want any checks? You are crazy... [ 805.985199][T12044] hpfs: hpfs_map_sector(): read error [ 805.990620][T12044] hpfs: code page support is disabled [ 805.996514][T12044] hpfs: hpfs_map_4sectors(): unaligned read [ 806.002792][T12044] hpfs: hpfs_map_4sectors(): unaligned read [ 806.009075][T12044] hpfs: filesystem error: unable to find root dir [ 806.013377][T12043] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 806.041527][T12043] ext4 filesystem being mounted at /254/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 806.338327][T12060] hpfs: hpfs_map_4sectors(): unaligned read [ 806.345501][T12060] hpfs: hpfs_map_4sectors(): unaligned read [ 806.351940][T12060] hpfs: hpfs_map_sector(): read error [ 808.264742][T12081] loop6: detected capacity change from 0 to 1024 [ 809.130335][T12081] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 810.027919][T12081] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.378137][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'. [ 810.404629][T12098] device erspan1 entered promiscuous mode [ 811.444476][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 811.456106][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 812.521235][T12122] loop5: detected capacity change from 0 to 1024 [ 812.797785][T12122] EXT4-fs (loop5): Ignoring removed oldalloc option [ 813.202485][T12122] EXT4-fs (loop5): Unrecognized mount option "fsmagic=0x0000000000000005" or missing value [ 815.049303][T12155] loop5: detected capacity change from 0 to 128 [ 816.788818][T12160] loop6: detected capacity change from 0 to 1024 [ 817.552253][T12155] EXT4-fs: error -4 creating inode table initialization thread [ 817.560644][T12155] EXT4-fs (loop5): mount failed [ 817.941024][T12160] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 818.003222][T12160] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.142641][ T5920] Bluetooth: hci0: command 0x0405 tx timeout [ 818.916502][T12179] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 819.315870][T12188] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 820.850943][T12204] loop5: detected capacity change from 0 to 1024 [ 821.755536][T12218] loop6: detected capacity change from 0 to 128 [ 821.828321][T12218] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 821.850633][T12218] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 823.021281][T12233] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1859'. [ 825.447250][T12254] loop5: detected capacity change from 0 to 128 [ 825.493112][T12254] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 825.522063][T12254] ext4 filesystem being mounted at /299/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 827.873047][T12289] loop5: detected capacity change from 0 to 128 [ 828.528674][T12289] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 828.910471][T12289] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 831.563428][T12328] loop6: detected capacity change from 0 to 512 [ 832.810893][T12328] EXT4-fs (loop6): 1 truncate cleaned up [ 832.816726][T12328] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 833.203552][T12334] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 833.262418][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.268899][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 835.768075][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1895'. [ 836.393190][T12382] lo speed is unknown, defaulting to 1000 [ 838.031544][T12395] loop6: detected capacity change from 0 to 512 [ 838.251420][T12395] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1904: inode has both inline data and extents flags [ 838.976613][T12395] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1904: couldn't read orphan inode 15 (err -117) [ 838.998168][T12395] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 842.852447][T12424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.288033][T12444] loop6: detected capacity change from 0 to 1024 [ 852.637988][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1935'. [ 853.757818][T12540] loop6: detected capacity change from 0 to 128 [ 853.824097][T12540] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 853.867852][T12540] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 856.598444][T12570] IPVS: dh: FWM 3 0x00000003 - no destination available [ 857.061984][T12570] loop6: detected capacity change from 0 to 8192 [ 859.657141][T12575] netlink: 'syz.0.1952': attribute type 29 has an invalid length. [ 859.665703][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'. [ 859.675274][T12575] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 861.750853][T12592] loop6: detected capacity change from 0 to 128 [ 862.538517][ T26] audit: type=1326 audit(1779891526.868:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.5.1958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 862.594505][ T26] audit: type=1326 audit(1779891526.868:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.5.1958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 862.671274][ T26] audit: type=1326 audit(1779891526.868:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.5.1958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2efebe068e code=0x7ffc0000 [ 862.987420][ T26] audit: type=1326 audit(1779891526.868:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.5.1958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 863.033671][ T26] audit: type=1326 audit(1779891526.868:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.5.1958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 863.069005][ T26] audit: type=1326 audit(1779891526.868:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.5.1958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 863.095951][ T26] audit: type=1326 audit(1779891526.868:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.5.1958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 863.120184][T12592] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 863.120291][T12592] ext4 filesystem being mounted at /277/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 863.343106][ T26] audit: type=1326 audit(1779891526.868:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.5.1958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 863.368129][ T26] audit: type=1326 audit(1779891526.868:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.5.1958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 863.750010][T12613] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1960'. [ 863.842908][ T26] audit: type=1326 audit(1779891526.868:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.5.1958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 869.385182][T12665] loop6: detected capacity change from 0 to 1024 [ 869.630337][T12670] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 869.981647][T12675] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1977'. [ 870.087328][T12675] bond0: (slave bond_slave_0): Releasing backup interface [ 870.109238][T12675] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 874.701011][T12697] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1985'. [ 876.113417][T12712] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 877.219424][T12735] UBIFS error (pid: 12735): cannot open "./file0", error -22 [ 877.223374][T12735] loop6: detected capacity change from 0 to 256 [ 880.977835][T12767] loop6: detected capacity change from 0 to 128 [ 881.449294][T12768] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 881.715278][T12767] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 881.732503][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 881.752473][T12767] ext4 filesystem being mounted at /284/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 883.383562][T12795] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2007'. [ 883.513277][T12796] overlayfs: failed to clone upperpath [ 889.047540][T12820] loop6: detected capacity change from 0 to 128 [ 889.749873][T12820] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 890.500494][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2023'. [ 891.826278][T12869] IPv6: syztnl0: Disabled Multicast RS [ 892.425539][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2031'. [ 892.834245][T12887] block nbd6: NBD_DISCONNECT [ 892.848477][T12887] block nbd6: Disconnected due to user request. [ 892.855441][T12887] block nbd6: shutting down sockets [ 893.363082][T12896] loop6: detected capacity change from 0 to 1024 [ 893.435802][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2036'. [ 894.206721][T12913] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2038'. [ 896.318774][T12923] 9pnet: Insufficient options for proto=fd [ 900.254750][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.261098][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 902.854978][T12968] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 905.111476][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2054'. [ 905.122600][T12988] netlink: 'syz.0.2054': attribute type 2 has an invalid length. [ 905.130656][T12988] netlink: 'syz.0.2054': attribute type 1 has an invalid length. [ 905.909990][T12994] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 905.925416][T12989] xt_TCPMSS: Only works on TCP SYN packets [ 908.973295][ T3853] device veth0_macvtap left promiscuous mode [ 908.999063][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 915.943859][T13074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2070'. [ 915.953132][T13074] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2070'. [ 915.962248][T13074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2070'. [ 915.976330][T13074] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2070'. [ 916.181591][T13076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 916.190600][T13076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 916.200637][T13076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 916.209956][T13076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 916.219496][T13076] device geneve2 entered promiscuous mode [ 917.990331][T13092] loop6: detected capacity change from 0 to 32768 [ 918.619141][T13092] XFS (loop6): Mounting V5 Filesystem [ 920.127121][T13092] XFS (loop6): Ending clean mount [ 920.195116][T13092] XFS (loop6): Quotacheck needed: Please wait. [ 920.673036][T13092] XFS (loop6): Quotacheck: Done. [ 921.833692][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 921.833709][ T26] audit: type=1800 audit(1779891581.207:64): pid=13134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2076" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0 [ 921.918980][ T5522] XFS (loop6): Unmounting Filesystem [ 922.765960][T13145] overlayfs: failed to clone upperpath [ 923.165484][T13150] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2084'. [ 923.174769][T13150] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2084'. [ 923.183800][T13150] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2084'. [ 923.193321][T13150] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2084'. [ 927.399004][T13183] netlink: 'syz.1.2095': attribute type 10 has an invalid length. [ 927.406947][T13183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2095'. [ 927.415977][T13183] device batadv0 entered promiscuous mode [ 927.422426][T13183] bridge0: port 1(batadv0) entered blocking state [ 927.428901][T13183] bridge0: port 1(batadv0) entered disabled state [ 927.437179][T13183] bridge0: port 1(batadv0) entered blocking state [ 927.443688][T13183] bridge0: port 1(batadv0) entered forwarding state [ 927.977342][ T4319] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 927.987504][ T4319] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 928.006851][T13192] tipc: Started in network mode [ 928.037559][T13192] tipc: Node identity ac14142f, cluster identity 4711 [ 928.046362][T13192] tipc: Enabled bearer , priority 10 [ 928.085942][T13194] netlink: 'syz.0.2099': attribute type 30 has an invalid length. [ 928.098345][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'. [ 928.150199][T13194] bond0: option arp_missed_max: invalid value (0) [ 928.209663][T13194] bond0: option arp_missed_max: allowed values 1 - 255 [ 928.428761][T13192] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 928.720494][T13206] loop6: detected capacity change from 0 to 16 [ 928.819591][T13206] erofs: (device loop6): mounted with root inode @ nid 36. [ 928.866614][T13206] SET target dimension over the limit! [ 929.250274][ T4177] tipc: Node number set to 2886997039 [ 938.959299][T13292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2116'. [ 938.968463][T13292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2116'. [ 938.977704][T13292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2116'. [ 938.987756][T13292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2116'. [ 947.468121][T13341] input: syz0 as /devices/virtual/input/input8 [ 947.523862][T13344] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2128'. [ 961.330032][ T26] audit: type=1326 audit(1779891618.034:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.4.2162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea87040e59 code=0x7ffc0000 [ 961.379357][ T26] audit: type=1326 audit(1779891618.043:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.4.2162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea87040e59 code=0x7ffc0000 [ 961.411005][ T26] audit: type=1326 audit(1779891618.043:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.4.2162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fea87040e59 code=0x7ffc0000 [ 961.508988][ T26] audit: type=1326 audit(1779891618.043:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.4.2162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea87040e59 code=0x7ffc0000 [ 961.548382][ T26] audit: type=1326 audit(1779891618.043:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.4.2162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea87040e59 code=0x7ffc0000 [ 962.052918][ T26] audit: type=1326 audit(1779891618.043:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.4.2162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fea87040e59 code=0x7ffc0000 [ 962.078816][ T26] audit: type=1326 audit(1779891618.043:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.4.2162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea87040e59 code=0x7ffc0000 [ 962.185491][ T26] audit: type=1326 audit(1779891618.043:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.4.2162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea87040e59 code=0x7ffc0000 [ 962.244048][ T26] audit: type=1326 audit(1779891618.043:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.4.2162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea87040e59 code=0x7ffc0000 [ 962.270209][ T26] audit: type=1326 audit(1779891618.043:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.4.2162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea87040e59 code=0x7ffc0000 [ 962.323236][T13484] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 962.971228][T13494] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2166'. [ 965.105036][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 965.149061][T13520] netlink: zone id is out of range [ 965.154232][T13520] netlink: del zone limit has 4 unknown bytes [ 969.932328][T13532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2174'. [ 970.151782][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 970.189679][T13532] syz.0.2174 (13532) used greatest stack depth: 17232 bytes left [ 970.227395][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 971.463662][T13542] overlayfs: failed to clone lowerpath [ 979.478878][T13613] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 982.726809][T13643] netlink: 'syz.4.2199': attribute type 10 has an invalid length. [ 982.734854][T13643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2199'. [ 983.400247][T13637] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2200'. [ 983.787075][T13648] : renamed from bond_slave_0 [ 984.577558][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'. [ 985.419557][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2206'. [ 989.745878][T13712] smc: net device vcan0 applied user defined pnetid SYZ1 [ 991.579664][T13743] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2223'. [ 994.608727][T13763] netlink: 'syz.4.2227': attribute type 10 has an invalid length. [ 994.616826][T13763] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2227'. [ 994.625900][T13763] device batadv0 entered promiscuous mode [ 994.632916][T13763] bridge0: port 2(batadv0) entered blocking state [ 994.639647][T13763] bridge0: port 2(batadv0) entered disabled state [ 995.274242][ T144] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 995.283800][ T144] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 996.793039][T13782] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2231'. [ 1001.174321][T13813] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2240'. [ 1001.714361][T13813] bond0: (slave bond_slave_0): Releasing backup interface [ 1001.994693][T13813] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1003.075630][T13839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2246'. [ 1005.609183][T13851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2248'. [ 1005.632068][T13851] fuse: Bad value for 'fd' [ 1011.905914][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1011.905937][ T26] audit: type=1326 audit(1779891663.237:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.1.2260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cca699e59 code=0x7ffc0000 [ 1012.974237][ T26] audit: type=1326 audit(1779891663.246:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.1.2260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1cca699e59 code=0x7ffc0000 [ 1013.254567][ T26] audit: type=1326 audit(1779891663.246:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.1.2260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cca699e59 code=0x7ffc0000 [ 1013.374328][ T26] audit: type=1326 audit(1779891663.246:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.1.2260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1cca699e59 code=0x7ffc0000 [ 1014.301745][ T26] audit: type=1326 audit(1779891663.246:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.1.2260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cca699e59 code=0x7ffc0000 [ 1014.326337][ T26] audit: type=1326 audit(1779891663.246:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.1.2260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1cca699e59 code=0x7ffc0000 [ 1014.351231][ T26] audit: type=1326 audit(1779891663.246:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.1.2260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cca699e59 code=0x7ffc0000 [ 1014.392598][ T26] audit: type=1326 audit(1779891663.246:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.1.2260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1cca699e59 code=0x7ffc0000 [ 1014.448925][ T26] audit: type=1326 audit(1779891663.246:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.1.2260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cca699e59 code=0x7ffc0000 [ 1014.515255][ T26] audit: type=1326 audit(1779891663.246:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.1.2260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cca699e59 code=0x7ffc0000 [ 1020.925442][T13974] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2274'. [ 1031.190717][T14035] : renamed from bond_slave_0 [ 1031.451447][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2294'. [ 1037.234103][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'. [ 1037.587435][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1037.594166][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1037.712352][T14113] overlayfs: failed to clone upperpath [ 1038.113559][T14108] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2312'. [ 1038.253101][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2312'. [ 1039.587602][T14125] ipt_CLUSTERIP: no such interface bond_slave_0 [ 1040.646639][T14138] tipc: Cannot configure node identity twice [ 1050.402791][T14212] block device autoloading is deprecated and will be removed. [ 1057.687826][ T4233] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1059.373493][ T4233] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1059.833891][ T4233] usb 7-1: config 3 has an invalid interface number: 86 but max is 0 [ 1059.865332][ T4233] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.227155][ T4233] usb 7-1: config 3 has no interface number 0 [ 1060.282966][ T4233] usb 7-1: config 3 interface 86 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1060.409968][ T4233] usb 7-1: config 3 interface 86 has no altsetting 0 [ 1060.591408][ T4233] usb 7-1: New USB device found, idVendor=e4b7, idProduct=cda2, bcdDevice= 0.01 [ 1060.640240][ T4233] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1060.825352][ T4233] usb 7-1: SerialNumber: syz [ 1060.869627][ T4233] usb 7-1: can't set config #3, error -71 [ 1061.599243][ T4233] usb 7-1: USB disconnect, device number 7 [ 1068.843866][ T21] Bluetooth: hci0: command 0x0405 tx timeout [ 1074.531982][T14468] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1075.778794][T14493] tipc: Cannot configure node identity twice [ 1077.999552][T14513] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1080.716929][T14548] CIFS mount error: No usable UNC path provided in device string! [ 1080.716929][T14548] [ 1080.775337][T14548] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1081.918073][T14560] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1085.131490][T14636] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2475'. [ 1085.146218][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2475'. [ 1088.583909][T14708] netlink: 'syz.4.2501': attribute type 3 has an invalid length. [ 1088.828719][T14704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2498'. [ 1088.845387][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2498'. [ 1093.395315][T10329] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1098.898161][T14888] lo speed is unknown, defaulting to 1000 [ 1101.500589][T14933] netlink: 'syz.1.2582': attribute type 10 has an invalid length. [ 1101.567890][T14933] team0: Port device xfrm0 added [ 1101.942119][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1101.950294][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1113.423606][T15120] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2656'. [ 1116.270700][T15201] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 1116.372551][T15204] binder: 15202:15204 ioctl c0306201 200000000680 returned -14 [ 1116.446659][T15204] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1117.075228][T15235] device bridge_slave_1 left promiscuous mode [ 1117.093677][T15235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.108895][T15235] device bridge_slave_0 left promiscuous mode [ 1117.126872][T15235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.734833][T15258] ./file0: Can't open blockdev [ 1123.864570][T15373] netlink: 'syz.5.2761': attribute type 13 has an invalid length. [ 1124.887215][T15418] netlink: 'syz.4.2782': attribute type 4 has an invalid length. [ 1127.826211][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2808'. [ 1129.487101][ T21] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1129.893535][T15518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2821'. [ 1129.982153][T15523] No such timeout policy "syz0" [ 1130.055184][ T21] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1130.152667][ T21] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.171102][ T21] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1130.369338][ T21] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1130.383578][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.403558][ T21] usb 7-1: Product: syz [ 1130.412507][ T21] usb 7-1: Manufacturer: syz [ 1130.423103][ T21] usb 7-1: SerialNumber: syz [ 1130.498428][ T21] usb 7-1: selecting invalid altsetting 1 [ 1130.517234][ T21] usb 7-1: unit 6 not found! [ 1131.148419][ T21] usb 7-1: cannot get ctl value: req = 0x82, wValue = 0x100, wIndex = 0x200, type = 3 [ 1131.172651][ T21] usb 7-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1131.236230][ T21] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 1131.686694][ T21] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1131.702590][ T21] usb 7-1: USB disconnect, device number 8 [ 1131.932388][T15293] udevd[15293]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.044374][T15563] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 1132.213433][T15573] raw_sendmsg: syz.5.2852 forgot to set AF_INET. Fix it! [ 1134.158418][T15617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2859'. [ 1134.518030][ T4233] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1134.952415][ T4233] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1134.972661][ T4233] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.003275][ T4233] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.034526][ T4233] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1135.322631][ T4233] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1135.342502][ T4233] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1135.350824][ T4233] usb 7-1: Manufacturer: syz [ 1135.360376][ T4233] usb 7-1: config 0 descriptor?? [ 1136.958946][ T4233] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 1137.106913][T15667] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1137.114673][ T4233] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1137.332118][ T4233] usb 7-1: USB disconnect, device number 9 [ 1138.368241][T15682] fido_id[15682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1141.938368][T15779] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1142.776108][T15802] netlink: 'syz.4.2932': attribute type 29 has an invalid length. [ 1142.784558][T15802] netlink: 'syz.4.2932': attribute type 29 has an invalid length. [ 1142.796145][T15802] netlink: 'syz.4.2932': attribute type 29 has an invalid length. [ 1142.931435][T15813] netlink: 'syz.5.2938': attribute type 29 has an invalid length. [ 1142.940175][T15813] netlink: 'syz.5.2938': attribute type 29 has an invalid length. [ 1143.026860][T15814] netlink: 'syz.5.2938': attribute type 29 has an invalid length. [ 1143.087122][T15818] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2939'. [ 1147.358500][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 1147.358516][ T26] audit: type=1326 audit(1779891793.369:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.5.2963" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 1147.737636][ T26] audit: type=1326 audit(1779891793.768:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.5.2963" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 1148.049669][ T26] audit: type=1326 audit(1779891793.768:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.5.2963" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efec1fe59 code=0x7ffc0000 [ 1148.096709][ T26] audit: type=1326 audit(1779891793.831:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.5.2963" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2efebe068e code=0x7ffc0000 [ 1148.142513][ T26] audit: type=1326 audit(1779891793.831:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.5.2963" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2efebe068e code=0x7ffc0000 [ 1148.354461][ T26] audit: type=1326 audit(1779891793.841:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.5.2963" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2efebe068e code=0x7ffc0000 [ 1148.389519][ T26] audit: type=1326 audit(1779891793.841:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.5.2963" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2efebe068e code=0x7ffc0000 [ 1148.442597][ T26] audit: type=1326 audit(1779891793.841:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.5.2963" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2efebe068e code=0x7ffc0000 [ 1148.695599][ T26] audit: type=1326 audit(1779891793.841:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.5.2963" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2efebe068e code=0x7ffc0000 [ 1149.884690][ T26] audit: type=1326 audit(1779891793.852:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.5.2963" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2efebe068e code=0x7ffc0000 [ 1149.939855][T15906] netlink: 'syz.5.2973': attribute type 29 has an invalid length. [ 1149.959396][T15906] netlink: 'syz.5.2973': attribute type 29 has an invalid length. [ 1149.973154][T15906] netlink: 'syz.5.2973': attribute type 29 has an invalid length. [ 1150.245768][ T5918] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1150.431295][T15933] overlayfs: './file0' not a directory [ 1150.531031][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 1150.729386][ T5918] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1150.836371][ T5918] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.846702][ T5918] usb 7-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1150.859767][ T5918] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1151.047209][ T5918] usb 7-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 1151.060209][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=131 [ 1151.182280][ T5918] usb 7-1: Product: syz [ 1151.186593][ T5918] usb 7-1: Manufacturer: syz [ 1151.196542][ T5918] usb 7-1: SerialNumber: syz [ 1151.936471][ T5918] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input9 [ 1152.060292][ T3545] bcm5974 7-1:1.0: could not read from device [ 1152.122746][ T3545] bcm5974 7-1:1.0: could not read from device [ 1152.146967][ T5918] usb 7-1: USB disconnect, device number 10 [ 1152.206497][T15293] bcm5974 7-1:1.0: could not read from device [ 1154.047449][ T5918] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1154.458053][T16014] netlink: 'syz.5.3015': attribute type 1 has an invalid length. [ 1154.496625][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1154.564002][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.854686][ T5918] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1156.357785][ T5918] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1156.431404][ T5918] usb 7-1: Manufacturer: syz [ 1156.503957][ T5918] usb 7-1: config 0 descriptor?? [ 1157.017794][ T5918] usbhid 7-1:0.0: can't add hid device: -71 [ 1157.024482][ T5918] usbhid: probe of 7-1:0.0 failed with error -71 [ 1157.039669][ T5918] usb 7-1: USB disconnect, device number 11 [ 1160.361373][T16094] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3047'. [ 1163.676276][T16167] IPv6: NLM_F_CREATE should be specified when creating new route [ 1166.107760][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1166.116786][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1166.498350][ T21] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1166.746495][ T21] usb 7-1: Using ep0 maxpacket: 8 [ 1166.871277][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.901888][ T21] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1166.925524][ T21] usb 7-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 1166.964576][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.997167][ T21] usb 7-1: config 0 descriptor?? [ 1167.765949][ T21] wacom 0003:056A:0028.0003: unknown main item tag 0x2 [ 1167.773790][ T21] wacom 0003:056A:0028.0003: unknown main item tag 0x0 [ 1167.780794][ T21] wacom 0003:056A:0028.0003: unknown main item tag 0x0 [ 1167.788424][ T21] wacom 0003:056A:0028.0003: unknown main item tag 0x0 [ 1167.796044][ T21] wacom 0003:056A:0028.0003: unknown main item tag 0x0 [ 1167.803040][ T21] wacom 0003:056A:0028.0003: unknown main item tag 0x0 [ 1167.810930][ T21] wacom 0003:056A:0028.0003: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 1167.898707][ T21] wacom 0003:056A:0028.0003: hidraw0: USB HID v0.04 Device [HID 056a:0028] on usb-dummy_hcd.6-1/input0 [ 1168.008943][ T21] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0028.0003/input/input10 [ 1168.449469][ T21] usb 7-1: USB disconnect, device number 12 [ 1168.719723][T16254] fido_id[16254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1170.830404][ T4231] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1171.225834][ T4231] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.256268][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1171.297393][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1171.343504][ T4231] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1171.568784][ T4231] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1171.577886][ T4231] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1171.647614][ T4231] usb 7-1: Manufacturer: syz [ 1171.719439][ T4231] usb 7-1: config 0 descriptor?? [ 1172.538436][ T4231] rc_core: IR keymap rc-hauppauge not found [ 1172.545203][ T4231] Registered IR keymap rc-empty [ 1172.567034][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1172.580956][T16308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3135'. [ 1172.697542][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1172.741557][ T4231] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1172.809322][ T4231] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input13 [ 1173.251284][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1173.310109][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1173.372608][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1173.428157][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1173.489048][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1173.939386][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1173.998813][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1174.062073][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1174.842681][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1174.901798][ T4231] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1174.967384][ T4231] mceusb 7-1:0.0: Registered ࠌ with mce emulator interface version 1 [ 1175.006269][ T4231] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1176.905615][ T4231] usb 7-1: USB disconnect, device number 13 [ 1177.367759][ T4231] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1177.630182][ T4231] usb 7-1: Using ep0 maxpacket: 8 [ 1177.798301][ T4231] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1177.892599][ T4231] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1178.071083][ T4231] usb 7-1: New USB device found, idVendor=0a4e, idProduct=2040, bcdDevice= 0.40 [ 1178.091224][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.131213][ T4231] usb 7-1: Product: syz [ 1178.154896][ T4231] usb 7-1: Manufacturer: syz [ 1178.171445][ T4231] usb 7-1: SerialNumber: syz [ 1178.622779][ T4231] usb 7-1: 1:1 : bogus bTerminalLink 8 [ 1179.044916][ T4231] usb 7-1: USB disconnect, device number 14 [ 1179.292729][T16441] overlayfs: './file0' not a directory [ 1179.518530][ T4231] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1179.912457][ T4231] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 1179.928644][ T4231] usb 7-1: config 0 has no interface number 0 [ 1180.125429][ T4231] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1180.146297][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.154349][ T4231] usb 7-1: Product: syz [ 1180.161633][ T4231] usb 7-1: Manufacturer: syz [ 1180.166363][ T4231] usb 7-1: SerialNumber: syz [ 1180.187035][ T4231] usb 7-1: config 0 descriptor?? [ 1180.556592][ T4231] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 1180.646752][ T4231] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 1180.720071][ T4231] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 1180.805251][ T4231] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 1180.831573][ T4231] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1180.857871][T15679] udevd[15679]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1181.134884][ T4231] usb 7-1: USB disconnect, device number 15 [ 1181.163077][ T4231] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1181.203563][ T4231] keyspan 7-1:0.133: device disconnected [ 1183.331273][T16524] binder: 16522:16524 ioctl c0306201 200000000680 returned -14 [ 1183.407517][T16524] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1187.323248][T16609] netlink: 'syz.1.3253': attribute type 1 has an invalid length. [ 1187.367239][T16609] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3253'. [ 1190.670638][T16686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3278'. [ 1192.752659][T16712] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3286'. [ 1194.622310][T16751] program syz.6.3300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1195.464004][T16758] program syz.6.3302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1196.793904][T16801] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3319'. [ 1196.808388][T16801] netlink: zone id is out of range [ 1196.813885][T16801] netlink: zone id is out of range [ 1197.024136][T16801] netlink: zone id is out of range [ 1197.117464][T16801] netlink: zone id is out of range [ 1197.216444][T16801] netlink: zone id is out of range [ 1197.355379][T16801] netlink: zone id is out of range [ 1197.496681][T16801] netlink: zone id is out of range [ 1197.672362][T16801] netlink: zone id is out of range [ 1197.683109][T16801] netlink: zone id is out of range [ 1197.689032][T16801] netlink: zone id is out of range [ 1197.707457][T16810] overlayfs: failed to clone lowerpath [ 1199.798827][ T4233] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1200.489901][ T4233] usb 7-1: Using ep0 maxpacket: 32 [ 1200.630924][ T4233] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1200.643151][ T4233] usb 7-1: config 0 has no interface number 0 [ 1200.665245][ T4233] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1201.478632][ T4233] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1201.496812][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.546628][ T4233] usb 7-1: Product: syz [ 1201.579241][ T4233] usb 7-1: Manufacturer: syz [ 1201.601016][ T4233] usb 7-1: SerialNumber: syz [ 1201.634867][ T4233] usb 7-1: config 0 descriptor?? [ 1201.660671][T16845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1201.906662][T16845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1202.461238][ T4233] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1202.522403][ T4233] asix: probe of 7-1:0.188 failed with error -71 [ 1202.687372][ T4233] usb 7-1: USB disconnect, device number 16 [ 1211.319402][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'. [ 1211.545421][T17014] device batadv0 entered promiscuous mode [ 1211.553077][T17014] device bond0 entered promiscuous mode [ 1211.559746][T17014] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 1211.571622][T17014] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1211.583268][T17014] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1211.594184][T17014] device batadv0 left promiscuous mode [ 1211.600964][T17014] device bond0 left promiscuous mode [ 1212.360331][T11796] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1213.735527][T11796] usb 7-1: Using ep0 maxpacket: 16 [ 1214.328289][T11796] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1214.350265][T11796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.364234][T11796] usb 7-1: Product: syz [ 1214.369913][T11796] usb 7-1: Manufacturer: syz [ 1214.375278][T11796] usb 7-1: SerialNumber: syz [ 1214.403302][T11796] usb 7-1: config 0 descriptor?? [ 1214.458658][T11796] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 1214.906991][T11796] usb 7-1: clie_3_5_startup: get interface number bad return length: 0 [ 1214.924031][T11796] visor: probe of 7-1:0.0 failed with error -5 [ 1216.055631][ T4231] usb 7-1: USB disconnect, device number 17 [ 1216.135867][T17084] lo speed is unknown, defaulting to 1000 [ 1217.520495][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3436'. [ 1223.882423][T17212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3466'. [ 1223.899063][T17214] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3465'. [ 1223.924696][T17212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3466'. [ 1226.416736][T17248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3479'. [ 1226.436827][T17248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 1227.197875][T17262] binder: 17260:17262 ioctl c0306201 0 returned -14 [ 1230.301170][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1230.307626][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1231.291452][T17327] Illegal XDP return value 4294967274, expect packet loss! [ 1231.481339][T17339] tipc: Enabled bearer , priority 10 [ 1234.492837][T17396] netlink: 'syz.5.3532': attribute type 15 has an invalid length. [ 1234.509398][T17396] netlink: 'syz.5.3532': attribute type 15 has an invalid length. [ 1236.709468][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 1236.709481][ T26] audit: type=1326 audit(1779891880.075:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.6.3541" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2310b91e59 code=0x0 [ 1238.525346][T17470] overlayfs: failed to clone upperpath [ 1238.597159][T17472] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3559'. [ 1238.809170][T17486] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1240.884285][T17526] overlayfs: failed to resolve './file0': -2 [ 1244.901844][ T4177] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1246.170961][ T4177] usb 7-1: Using ep0 maxpacket: 16 [ 1246.331675][ T4177] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.385974][ T4177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1246.437789][ T4177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1246.448542][ T4177] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1246.463468][ T4177] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.559099][ T4177] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1246.579460][ T4177] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1246.590234][ T4177] usb 7-1: Manufacturer: syz [ 1246.646670][ T4177] usb 7-1: config 0 descriptor?? [ 1246.671098][T17624] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3612'. [ 1247.815804][ T4177] rc_core: IR keymap rc-hauppauge not found [ 1247.822086][ T4177] Registered IR keymap rc-empty [ 1247.827843][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1247.858541][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1247.893092][ T4177] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1247.911262][ T4177] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 1247.932615][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1247.969285][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1248.010752][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1248.050233][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1248.110858][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1248.194559][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1248.253475][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1248.336616][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1248.454612][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1248.554125][ T4177] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1248.715128][ T4177] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1248.725743][ T4177] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1248.742090][ T4177] usb 7-1: USB disconnect, device number 18 [ 1249.282510][T17700] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3640'. [ 1249.341805][T17700] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3640'. [ 1249.605210][T17709] overlayfs: failed to clone upperpath [ 1250.606635][T17687] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1250.880374][T11796] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1251.194660][T11796] usb 7-1: Using ep0 maxpacket: 8 [ 1251.416522][T11796] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1251.428544][T11796] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1251.486624][T11796] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1251.508388][T11796] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1251.540540][T11796] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1251.573549][T11796] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.468046][T11796] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1252.510707][T11796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.969453][T11796] usb 7-1: usb_control_msg returned -32 [ 1253.477507][T11796] usbtmc 7-1:16.0: can't read capabilities [ 1253.494557][T17760] lo speed is unknown, defaulting to 1000 [ 1254.974531][T11796] usb 7-1: USB disconnect, device number 19 [ 1258.668094][T12333] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1259.536488][T17890] netlink: 'syz.5.3705': attribute type 1 has an invalid length. [ 1259.594191][T17890] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3705'. [ 1260.122595][T12333] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1260.170358][T12333] usb 7-1: not running at top speed; connect to a high speed hub [ 1260.265386][T12333] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 1260.350765][T12333] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 1261.392667][T12333] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1261.401759][T12333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.422063][T12333] usb 7-1: Product: syz [ 1261.461629][T12333] usb 7-1: can't set config #1, error -71 [ 1261.482106][T12333] usb 7-1: USB disconnect, device number 20 [ 1261.529123][T17919] lo speed is unknown, defaulting to 1000 [ 1263.972045][T17919] netlink: 'syz.1.3715': attribute type 15 has an invalid length. [ 1263.980200][T17919] netlink: 'syz.1.3715': attribute type 7 has an invalid length. [ 1263.995803][T17919] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3715'. [ 1265.139899][T17986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1265.149967][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1265.164805][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1265.174269][T17986] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1265.309966][ T5918] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1266.438698][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 1267.158752][T18002] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3741'. [ 1267.192457][ T5918] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1267.422141][ T5918] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1267.440290][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1267.472660][ T5918] usb 7-1: Product: syz [ 1267.501789][ T5918] usb 7-1: Manufacturer: syz [ 1267.532609][ T5918] usb 7-1: SerialNumber: syz [ 1267.573793][ T5918] usb 7-1: config 0 descriptor?? [ 1267.603000][T18017] netlink: 18 bytes leftover after parsing attributes in process `syz.1.3747'. [ 1267.656352][T17980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1267.727383][ T5918] hub 7-1:0.0: bad descriptor, ignoring hub [ 1267.734817][ T5918] hub: probe of 7-1:0.0 failed with error -5 [ 1267.999383][ T5918] usb 7-1: USB disconnect, device number 21 [ 1269.152963][T18042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3754'. [ 1270.297962][T18065] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.3763'. [ 1270.307811][T18065] net_ratelimit: 110 callbacks suppressed [ 1270.307822][T18065] netlink: zone id is out of range [ 1270.326699][T18065] netlink: zone id is out of range [ 1270.331929][T18065] netlink: zone id is out of range [ 1270.338058][T18065] netlink: zone id is out of range [ 1270.352385][T18065] netlink: zone id is out of range [ 1270.364614][T18065] netlink: zone id is out of range [ 1270.377127][T18065] netlink: zone id is out of range [ 1270.395385][T18065] netlink: zone id is out of range [ 1270.408686][T18065] netlink: zone id is out of range [ 1270.419712][T18065] netlink: zone id is out of range [ 1272.096722][T18108] lo speed is unknown, defaulting to 1000 [ 1274.062712][T18163] lo speed is unknown, defaulting to 1000 [ 1276.802619][T18199] wlan0 speed is unknown, defaulting to 1000 [ 1276.823150][T18199] wlan0 speed is unknown, defaulting to 1000 [ 1276.854086][T18199] wlan0 speed is unknown, defaulting to 1000 [ 1277.596989][T18199] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1277.764301][T18199] wlan0 speed is unknown, defaulting to 1000 [ 1277.788890][T18199] wlan0 speed is unknown, defaulting to 1000 [ 1277.822751][T18199] wlan0 speed is unknown, defaulting to 1000 [ 1277.858497][T18199] wlan0 speed is unknown, defaulting to 1000 [ 1277.882670][T18199] wlan0 speed is unknown, defaulting to 1000 [ 1277.915100][T18199] wlan0 speed is unknown, defaulting to 1000 [ 1278.007823][T18220] netlink: 'syz.4.3825': attribute type 11 has an invalid length. [ 1279.769609][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3847'. [ 1280.000079][T18291] lo speed is unknown, defaulting to 1000 [ 1280.006643][T18291] wlan0 speed is unknown, defaulting to 1000 [ 1280.041944][T18299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3857'. [ 1280.994196][T18305] device wlan1 entered promiscuous mode [ 1281.163253][T18317] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3862'. [ 1282.435002][T18354] net_ratelimit: 110 callbacks suppressed [ 1282.435019][T18354] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1282.603830][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1283.800392][T18390] binder: 18389:18390 ioctl c0306201 200000000680 returned -14 [ 1288.633565][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3925'. [ 1288.784832][ T23] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1289.077287][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 1289.218734][ T23] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1289.427335][ T23] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1289.445337][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.453605][ T23] usb 7-1: Product: syz [ 1289.459522][ T23] usb 7-1: Manufacturer: syz [ 1289.464817][ T23] usb 7-1: SerialNumber: syz [ 1289.480653][ T23] usb 7-1: config 0 descriptor?? [ 1289.537455][ T23] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1290.712975][ T23] gspca_zc3xx: reg_w_i err -71 [ 1291.383953][ T23] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1291.395698][ T23] gspca_zc3xx: probe of 7-1:0.0 failed with error -71 [ 1291.405129][ T23] usb 7-1: USB disconnect, device number 22 [ 1292.759508][ T23] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1293.398539][ T23] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1293.408365][ T23] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1293.434619][ T23] usb 7-1: Product: syz [ 1293.438859][ T23] usb 7-1: Manufacturer: syz [ 1293.478491][ T23] usb 7-1: SerialNumber: syz [ 1293.502334][ T23] usb 7-1: config 0 descriptor?? [ 1293.562043][ T23] ch341 7-1:0.0: ch341-uart converter detected [ 1294.376645][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.383789][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1295.078387][ T23] usb 7-1: ch341-uart converter now attached to ttyUSB0 [ 1295.307980][ T23] usb 7-1: USB disconnect, device number 23 [ 1295.327963][ T23] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1295.347045][ T23] ch341 7-1:0.0: device disconnected [ 1296.833072][T18670] overlayfs: failed to clone upperpath [ 1298.952181][T18720] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.4010'. [ 1299.885905][T16510] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1300.720731][T16510] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.783520][T16510] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1300.806642][T16510] usb 7-1: config 1 has no interface number 0 [ 1300.813553][T16510] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1300.838342][T16510] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1300.883411][T16510] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1300.893296][T16510] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 149, setting to 64 [ 1300.933181][T16510] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1301.121526][T16510] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1301.141985][T16510] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.152812][T16510] usb 7-1: Product: syz [ 1301.163723][T16510] usb 7-1: Manufacturer: syz [ 1301.174659][T16510] usb 7-1: SerialNumber: syz [ 1301.213458][T18726] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1301.685538][T18726] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1301.838321][T18794] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.4036'. [ 1302.903630][T16510] cdc_ncm 7-1:1.1: bind() failure [ 1303.105557][T16510] usb 7-1: USB disconnect, device number 24 [ 1305.450539][T18864] "syz.6.4063" (18864) uses obsolete ecb(arc4) skcipher [ 1305.537901][T18868] netlink: 'syz.4.4065': attribute type 15 has an invalid length. [ 1305.564264][T18868] netlink: 'syz.4.4065': attribute type 15 has an invalid length. [ 1306.768661][T18877] binder: 18876:18877 ioctl c0306201 200000000680 returned -14 [ 1308.238732][T18921] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4087'. [ 1308.505174][T18942] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4096'. [ 1310.056946][T18974] overlayfs: failed to clone lowerpath [ 1312.252712][T19027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4126'. [ 1314.903579][T19091] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 1314.916489][T19095] device sit0 entered promiscuous mode [ 1314.952476][T19095] netlink: 'syz.6.4150': attribute type 1 has an invalid length. [ 1314.980434][T19095] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4150'. [ 1315.091443][T19110] netlink: 428 bytes leftover after parsing attributes in process `syz.0.4156'. [ 1315.091822][T19111] input: syz1 as /devices/virtual/input/input15 [ 1315.119233][T19110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4156'. [ 1316.689332][T19161] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 1316.735798][T19163] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 1319.658642][T19257] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4213'. [ 1319.882953][ T26] audit: type=1326 audit(1779891958.602:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19270 comm="syz.6.4221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2310b91e59 code=0x0 [ 1320.073600][T19283] tipc: Enabling of bearer rejected, failed to enable media [ 1320.962528][T19314] lo speed is unknown, defaulting to 1000 [ 1321.005134][T19314] wlan0 speed is unknown, defaulting to 1000 [ 1322.930444][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4269'. [ 1322.991941][T19401] lo speed is unknown, defaulting to 1000 [ 1323.012870][T19401] wlan0 speed is unknown, defaulting to 1000 [ 1323.554087][ T23] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1323.824925][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 1323.965856][ T23] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 1323.992512][ T23] usb 7-1: config 0 has no interface number 0 [ 1324.030682][ T23] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1324.093119][ T23] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1324.135700][T19444] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1324.323424][ T23] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1324.344367][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.397314][ T23] usb 7-1: Product: syz [ 1324.412974][ T23] usb 7-1: Manufacturer: syz [ 1324.417792][ T23] usb 7-1: SerialNumber: syz [ 1324.462927][ T23] usb 7-1: config 0 descriptor?? [ 1324.487915][ T26] audit: type=1326 audit(1779891962.857:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19472 comm="syz.5.4300" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2efec1fe59 code=0x0 [ 1324.507560][T19412] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1324.610663][T19412] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1324.945168][T19481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4302'. [ 1324.954607][T19412] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1324.970015][T19412] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1325.254846][ T23] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1325.951078][T19520] device netdevsim0 entered promiscuous mode [ 1325.971247][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4316'. [ 1326.186286][ T23] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1326.202336][ T23] asix: probe of 7-1:0.34 failed with error -71 [ 1326.220438][ T23] usb 7-1: USB disconnect, device number 25 [ 1326.510376][T19541] lo speed is unknown, defaulting to 1000 [ 1326.526102][T19541] wlan0 speed is unknown, defaulting to 1000 [ 1328.907390][T19614] lo speed is unknown, defaulting to 1000 [ 1328.914533][T19614] wlan0 speed is unknown, defaulting to 1000 [ 1329.016648][T19614] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4342'. [ 1329.040256][T19614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1329.330292][T19621] lo speed is unknown, defaulting to 1000 [ 1329.344202][T19621] wlan0 speed is unknown, defaulting to 1000 [ 1329.947368][T19621] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1330.004660][T19635] lo speed is unknown, defaulting to 1000 [ 1330.025321][T19635] wlan0 speed is unknown, defaulting to 1000 [ 1332.309816][T19692] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4371'. [ 1332.365182][T19692] device bond0 entered promiscuous mode [ 1332.408338][T19692] device bond_slave_1 entered promiscuous mode [ 1332.433960][T19692] device bond0 left promiscuous mode [ 1332.449559][T19692] device bond_slave_1 left promiscuous mode [ 1334.527200][T19651] Set syz1 is full, maxelem 65536 reached [ 1334.600652][T19768] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4395'. [ 1334.783273][T19777] Set syz1 is full, maxelem 65536 reached [ 1334.848647][T19779] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4399'. [ 1335.016706][T19786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4404'. [ 1335.039439][T19786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4404'. [ 1335.237788][T19802] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1336.418223][T19849] lo speed is unknown, defaulting to 1000 [ 1336.425002][T19849] wlan0 speed is unknown, defaulting to 1000 [ 1338.251518][T19929] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4456'. [ 1340.015625][T20015] device batadv_slave_1 entered promiscuous mode [ 1340.024171][T20014] device batadv_slave_1 left promiscuous mode [ 1340.991439][T20045] lo speed is unknown, defaulting to 1000 [ 1341.118783][T20045] wlan0 speed is unknown, defaulting to 1000 [ 1341.269656][T20057] lo speed is unknown, defaulting to 1000 [ 1341.323850][T20057] wlan0 speed is unknown, defaulting to 1000 [ 1341.722932][T20045] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4500'. [ 1341.756564][T20045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1342.709482][T20102] only policy match revision 0 supported [ 1342.709500][T20102] unable to load match [ 1342.917277][T20114] lo speed is unknown, defaulting to 1000 [ 1342.924536][T20114] wlan0 speed is unknown, defaulting to 1000 [ 1343.258640][T20114] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4527'. [ 1343.320620][T20114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1343.769288][T20133] overlayfs: failed to clone upperpath [ 1344.059854][T20145] device gre1 entered promiscuous mode [ 1344.976284][T20180] overlayfs: failed to clone upperpath [ 1346.408032][T20246] lo speed is unknown, defaulting to 1000 [ 1346.425783][T20246] wlan0 speed is unknown, defaulting to 1000 [ 1347.241163][T20277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4595'. [ 1350.347875][T20332] lo speed is unknown, defaulting to 1000 [ 1350.382706][T20332] wlan0 speed is unknown, defaulting to 1000 [ 1350.726058][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4617'. [ 1352.846638][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4641'. [ 1352.950415][T20403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1353.752438][T20419] device syzkaller0 left promiscuous mode [ 1353.914365][T20421] lo speed is unknown, defaulting to 1000 [ 1353.921191][T20421] wlan0 speed is unknown, defaulting to 1000 [ 1354.103542][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1354.125086][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1354.147943][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1354.176193][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1354.195266][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1354.219226][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1354.259006][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1354.278860][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1354.299799][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1354.322115][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1354.351698][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1354.376400][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1354.394095][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1354.407957][T20430] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1355.751252][T20491] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4676'. [ 1356.100808][T20510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4684'. [ 1356.244634][T20513] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1356.338274][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4689'. [ 1356.355665][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4689'. [ 1356.652353][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4698'. [ 1356.677410][T20539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4698'. [ 1358.709278][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806145b000: rx timeout, send abort [ 1358.922743][T20611] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1359.140544][T20611] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1359.164994][T20611] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1359.182324][T20611] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1359.198973][T20611] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1359.212356][T20611] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1359.227427][T20611] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1359.241833][T20611] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1359.254529][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888061944800: rx timeout, send abort [ 1359.268649][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806145b000: abort rx timeout. Force session deactivation [ 1359.285250][T20611] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1359.795744][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888061946000: rx timeout, send abort [ 1359.805261][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888061944800: abort rx timeout. Force session deactivation [ 1360.346026][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888061946000: abort rx timeout. Force session deactivation [ 1360.810468][T20672] netlink: 'syz.1.4746': attribute type 1 has an invalid length. [ 1360.896523][T20675] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1360.907908][T20675] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1360.924598][T20675] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1360.934360][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.945661][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.955980][T20675] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1360.977338][T20675] bond2: (slave geneve3): making interface the new active one [ 1360.988262][T20675] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1361.015483][T20679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4747'. [ 1361.363386][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4754'. [ 1361.381617][T20695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4754'. [ 1361.465476][T20697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1362.828414][T20724] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4766'. [ 1363.248979][T20734] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1363.276040][T20734] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1363.284320][T20734] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1363.313383][T20734] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1363.344262][T20734] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1363.379092][T20734] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1363.421271][T20734] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1363.457980][T20734] bridge0: port 1(batadv0) entered disabled state [ 1363.487721][T20734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1363.512622][T20734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1363.579403][T20734] team0: Port device xfrm0 removed [ 1363.620971][T20734] bond2: (slave geneve3): Releasing active interface [ 1363.645733][T20734] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1363.666014][T20734] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1363.687434][T20734] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1363.706476][T20734] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1365.144775][T20788] overlayfs: failed to clone upperpath [ 1365.283412][T20797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.316801][T20797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.673087][T20825] qfq: no options [ 1366.931882][T20840] overlayfs: failed to clone upperpath [ 1368.188532][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4810'. [ 1368.198836][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4810'. [ 1368.320593][T20867] lo speed is unknown, defaulting to 1000 [ 1368.331474][T20867] wlan0 speed is unknown, defaulting to 1000 [ 1368.386261][T20869] overlayfs: failed to clone upperpath [ 1368.736813][T12333] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1368.909284][T20900] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4821'. [ 1369.139077][T12333] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1369.148698][T12333] usb 7-1: config 0 has no interface number 0 [ 1369.164615][T12333] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1369.176711][T12333] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1369.362331][T12333] usb 7-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1369.384495][T12333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.412417][T20923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4829'. [ 1369.413502][T12333] usb 7-1: Product: syz [ 1369.444524][T12333] usb 7-1: Manufacturer: syz [ 1369.461958][T12333] usb 7-1: SerialNumber: syz [ 1369.485184][T12333] usb 7-1: config 0 descriptor?? [ 1369.503438][T20923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4829'. [ 1369.525969][T12333] cypress_m8 7-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1369.772060][T12333] usb 7-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1370.084965][T16510] usb 7-1: USB disconnect, device number 26 [ 1370.112413][T16510] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1370.143853][T16510] cypress_m8 7-1:0.35: device disconnected [ 1370.274891][T20958] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1370.345064][T20964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1370.397967][T20964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1370.539772][T20973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4843'. [ 1372.147189][T21037] netlink: 1588 bytes leftover after parsing attributes in process `syz.0.4867'. [ 1372.178498][T21037] netlink: 5096 bytes leftover after parsing attributes in process `syz.0.4867'. [ 1372.789144][T21054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4871'. [ 1373.336866][T21083] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1373.386226][T21083] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1373.406927][T21083] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1373.424414][T21083] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1373.441774][T21083] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1373.516509][T21083] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1373.542299][T21083] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1373.567229][T21083] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1373.580384][T21083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1373.825192][T21108] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1373.850602][T21108] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1373.876560][T21108] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1373.899830][T21108] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1373.929772][T21108] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1373.954219][T21108] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1373.975346][T21108] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1374.445851][T21119] SET target dimension over the limit! [ 1374.453158][T21119] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4892'. [ 1375.637189][T21152] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4903'. [ 1376.233905][T21178] overlayfs: failed to clone upperpath [ 1378.937234][T21239] lo speed is unknown, defaulting to 1000 [ 1378.972140][T21239] wlan0 speed is unknown, defaulting to 1000 [ 1379.534215][T21259] ceph: No mds server is up or the cluster is laggy [ 1380.955547][T21268] netlink: 'syz.0.4944': attribute type 4 has an invalid length. [ 1382.001683][T21288] netlink: 'syz.1.4949': attribute type 12 has an invalid length. [ 1382.261816][T21305] overlayfs: failed to clone upperpath [ 1382.293213][T21306] overlayfs: failed to clone upperpath [ 1383.299215][T21360] lo: Caught tx_queue_len zero misconfig [ 1383.340109][T21360] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1384.510488][T21397] netlink: 'syz.4.4992': attribute type 1 has an invalid length. [ 1384.554114][T21397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1384.677477][T21404] bond1: (slave veth7): Enslaving as an active interface with a down link [ 1384.693436][T21409] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4992'. [ 1385.983331][T21436] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1386.070667][T21436] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1386.147020][T21436] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1386.192028][T21436] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1386.304827][T21436] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1386.387788][T21436] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1386.444526][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5007'. [ 1386.615485][T21458] lo speed is unknown, defaulting to 1000 [ 1386.667799][T21465] netlink: 'syz.4.5011': attribute type 4 has an invalid length. [ 1386.698581][T21458] wlan0 speed is unknown, defaulting to 1000 [ 1386.701545][T21465] netlink: 'syz.4.5011': attribute type 4 has an invalid length. [ 1386.973068][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 1387.556988][T21505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5026'. [ 1388.706285][T21524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5036'. [ 1388.727340][T21524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1389.023856][T20623] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1389.445006][T20623] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1389.477304][T20623] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1389.626627][T20623] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1389.749010][T20623] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1389.878411][T20623] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1390.182313][T20623] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1390.210527][T20623] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1390.235146][T20623] usb 7-1: Product: syz [ 1390.239367][T20623] usb 7-1: Manufacturer: syz [ 1390.312851][T20623] cdc_wdm 7-1:1.0: skipping garbage [ 1390.320705][T20623] cdc_wdm 7-1:1.0: skipping garbage [ 1390.336725][T20623] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1390.352211][T20623] cdc_wdm 7-1:1.0: Unknown control protocol [ 1390.830535][T16510] usb 7-1: USB disconnect, device number 27 [ 1390.836675][ C1] cdc_wdm 7-1:1.0: Unexpected error -71 [ 1390.838381][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1390.838674][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1390.838693][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1391.082167][T21559] overlayfs: failed to clone upperpath [ 1391.174721][T21586] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5059'. [ 1391.374498][T21591] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5059'. [ 1391.460749][T21591] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5059'. [ 1393.843679][T21636] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5073'. [ 1395.101396][T21636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.108712][T21636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.134259][T21638] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5073'. [ 1395.164808][T21638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.173137][T21638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.180800][T21638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.188089][T21638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.311447][T21638] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5073'. [ 1395.345514][T21638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.352777][T21638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.756822][T21662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5084'. [ 1395.821283][T21662] netlink: 'syz.6.5084': attribute type 1 has an invalid length. [ 1395.864440][T21662] netlink: 'syz.6.5084': attribute type 1 has an invalid length. [ 1396.514779][T21679] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5090'. [ 1398.609310][T21757] overlayfs: failed to clone upperpath [ 1398.726148][T21767] overlayfs: unrecognized mount option "verity=on" or missing value [ 1401.285025][T21837] netlink: 'syz.1.5148': attribute type 3 has an invalid length. [ 1401.297924][T21837] netlink: 'syz.1.5148': attribute type 3 has an invalid length. [ 1402.749114][ T4391] batman_adv: batadv0: IGMP Querier appeared [ 1402.755444][ T4391] batman_adv: batadv0: MLD Querier appeared [ 1406.826704][T21962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1407.249458][T21981] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1408.426388][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5208'. [ 1408.696638][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888070f23400: rx timeout, send abort [ 1409.229681][T22014] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5211'. [ 1410.448055][T22049] trusted_key: encrypted_key: insufficient parameters specified [ 1410.554772][T22054] overlayfs: failed to clone upperpath [ 1412.003509][T22087] netem: change failed [ 1412.709311][T22110] netlink: 'syz.1.5248': attribute type 1 has an invalid length. [ 1412.774397][T22110] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1412.786037][T22110] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1412.802611][T22110] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 1413.740705][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5251'. [ 1414.838529][T22162] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5264'. [ 1414.887762][T22162] 0X: renamed from caif0 [ 1414.946010][T22162] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1414.963825][T22164] tipc: Enabled bearer , priority 0 [ 1417.379480][T22205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5282'. [ 1417.473925][T22200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.936242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.945419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.738813][T19336] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1419.063395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.071837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.216219][T19336] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1419.260357][T19336] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1419.351253][T19336] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1419.361926][T19336] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1419.372222][T19336] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1419.384596][T19336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.396142][T19336] usb 7-1: config 0 descriptor?? [ 1419.931311][T19336] hdpvr 7-1:0.0: firmware version 0x0 dated [ 1419.948252][T19336] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 1420.201328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.209719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.398577][T22216] udc-core: couldn't find an available UDC or it's busy [ 1420.405798][T22216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1421.117081][T19336] hdpvr 7-1:0.0: Could not setup controls [ 1421.123338][T19336] hdpvr 7-1:0.0: registering videodev failed [ 1421.150985][T19336] hdpvr: probe of 7-1:0.0 failed with error -71 [ 1421.175173][T19336] usb 7-1: USB disconnect, device number 28 [ 1421.317651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.326094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.444731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.453238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.958148][T22289] overlayfs: failed to clone upperpath [ 1423.582728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.591250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.117145][T22308] tipc: Enabled bearer , priority 0 [ 1424.161800][T22308] device syzkaller0 entered promiscuous mode [ 1424.175891][T22311] netlink: 'syz.0.5315': attribute type 10 has an invalid length. [ 1424.214021][T22311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.240938][T22311] bond0: (slave team0): Enslaving as an active interface with an up link [ 1424.253186][T22306] tipc: Resetting bearer [ 1424.295356][T22306] tipc: Disabling bearer [ 1428.727805][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.734200][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.889601][T22360] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5330'. [ 1431.091893][T22387] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1431.099857][T22387] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1431.108588][T22387] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1431.116418][T22387] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1431.124023][T22387] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1431.131941][T22387] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1431.140540][T22387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1431.159382][T22387] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1434.995670][T22483] netlink: 'syz.4.5374': attribute type 4 has an invalid length. [ 1435.027820][T22483] netlink: 'syz.4.5374': attribute type 4 has an invalid length. [ 1437.220698][T22519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5385'. [ 1438.123648][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5389'. [ 1438.137298][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5389'. [ 1438.147307][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5389'. [ 1438.157829][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5389'. [ 1438.740624][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5389'. [ 1442.194183][T22590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5403'. [ 1443.038017][T22629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5418'. [ 1445.108597][T22677] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1445.121911][T22677] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1445.194502][T22683] netlink: 'syz.5.5436': attribute type 10 has an invalid length. [ 1445.202503][T22683] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5436'. [ 1445.211699][T22683] device team0 entered promiscuous mode [ 1445.218206][T22683] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.226330][T22683] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1445.993278][T22687] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5438'. [ 1448.713435][T22755] binder_alloc: 22752: binder_alloc_buf, no vma [ 1448.947104][T22769] bridge0: port 3(vlan1) entered blocking state [ 1448.976118][T22769] bridge0: port 3(vlan1) entered disabled state [ 1448.988164][T22769] device vlan1 entered promiscuous mode [ 1449.029397][T22769] device bridge_slave_0 entered promiscuous mode [ 1449.041068][T22772] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1449.056385][T22772] bridge0: port 2(batadv0) entered disabled state [ 1449.089504][T22772] device hsr0 left promiscuous mode [ 1449.100025][T22772] bridge0: port 1(hsr0) entered disabled state [ 1449.124055][T22772] device vlan1 left promiscuous mode [ 1449.134440][T22772] device bridge_slave_0 left promiscuous mode [ 1449.181014][T22772] bond1: (slave veth7): Releasing active interface [ 1449.226511][T22772] bridge0: port 3(vlan1) entered disabled state [ 1451.521127][T20624] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1451.955981][T20624] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1452.042700][T20624] usb 7-1: no configurations [ 1452.047590][T20624] usb 7-1: can't read configurations, error -22 [ 1452.887399][T22832] batman_adv: batadv0: Adding interface: dummy0 [ 1452.897817][T22832] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.967850][T22832] batman_adv: batadv0: Interface activated: dummy0 [ 1452.986203][T22836] batadv0: mtu less than device minimum [ 1453.006408][T22836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1453.020018][T22836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1453.032549][T22836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1453.044958][T22836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1453.057289][T22836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1453.069681][T22836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1453.082131][T22836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1453.094587][T22836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1453.107055][T22836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1453.379715][T22839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5492'. [ 1454.095933][T22877] device bond0 entered promiscuous mode [ 1454.107676][T22877] device bond_slave_1 entered promiscuous mode [ 1454.114480][T22877] device team0 entered promiscuous mode [ 1454.120334][T22877] device team_slave_0 entered promiscuous mode [ 1454.127401][T22877] device team_slave_1 entered promiscuous mode [ 1454.222326][T22884] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "$x`vOxH`CBn܀y>bwx\x1bL5? Cݭ8`dJg39T&tWCm<\x1bRby Vq/\x5cDw,XT,W[es\x0d1\x07^|;dg8 ꥛~u}Gg6W]MþlxM=Mh\x095$ZEO1Jc&OP5y9\x0dNiI<5Ўd\x22T*˘sx)ʯ\x22v:|M\x0a)\x0bꋻwRI ;HP?LtM[w̲S7&Q瑃Y=Nݝ\x22߆FSBҘRx9ʼnR_4~}e}xbH\x0d%DŽޑR]cÂx8m5'yZx^My=::UVvҼb8s\x0d0cAL=;k[iqKg@8Z\x22&iy?m9d<5]p2wA1Ȧ4qLctG9N_f2sop)^FISn08aS*ĒrX\x1b/\x22`Wrwr\x22!7X~ӰDEp7ehNk2Is,>r_<-!}jnW8-leÚQŒ6DgfrZ!V\x0b*>ħk?p>nU`IW \x1bD6\x5cjv(=}txp:Ԑގ_ս<‹('(tc(#2oڏ0xY4W.voDS\x0cX濩V,5a#zkPd0a. [ 1454.497308][T22891] netlink: 'syz.4.5509': attribute type 10 has an invalid length. [ 1454.593124][T22891] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5509'. [ 1455.265206][T22899] netlink: 'syz.4.5513': attribute type 11 has an invalid length. [ 1455.363440][T22902] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1455.397806][T22911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5517'. [ 1455.406980][T22911] batman_adv: batadv0: Interface deactivated: dummy0 [ 1455.414154][T22911] batman_adv: batadv0: Removing interface: dummy0 [ 1455.421322][T22911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1455.429093][T22911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.437105][T22911] batman_adv: batadv0: Removing interface: vlan2 [ 1458.534917][T22920] device batadv0 left promiscuous mode [ 1461.143912][T22920] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.154492][T22920] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.167131][T22920] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.178156][T22920] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.253092][T22920] device macvlan2 left promiscuous mode [ 1461.652164][T22937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5526'. [ 1461.662248][T22946] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1461.733197][T22972] tipc: Enabling of bearer rejected, already enabled [ 1461.871227][T22989] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1461.882952][T22989] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1469.343369][T23076] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1470.563492][ T26] audit: type=1800 audit(1779892097.679:136): pid=23093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5570" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1470.707787][T23100] 9pnet_virtio: no channels available for device syz [ 1471.157579][T20624] wlan0 speed is unknown, defaulting to 1000 [ 1476.945460][T23173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.043049][T23173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.075262][T23173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.344595][T23208] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5597'. [ 1480.674743][T23226] device sit0 left promiscuous mode [ 1481.559508][T23258] ================================================================== [ 1481.568434][T23258] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 1481.577211][T23258] Read of size 2 at addr ffff888062ffb1fb by task syz.0.5613/23258 [ 1481.585100][T23258] [ 1481.587565][T23258] CPU: 0 PID: 23258 Comm: syz.0.5613 Not tainted syzkaller #0 [ 1481.595028][T23258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1481.605095][T23258] Call Trace: [ 1481.608375][T23258] [ 1481.611301][T23258] dump_stack_lvl+0x188/0x250 [ 1481.616026][T23258] ? show_regs_print_info+0x20/0x20 [ 1481.621219][T23258] ? load_image+0x400/0x400 [ 1481.625714][T23258] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1481.631249][T23258] ? ieee80211_tx+0x460/0x460 [ 1481.635996][T23258] print_address_description+0x60/0x2d0 [ 1481.641548][T23258] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 1481.647873][T23258] kasan_report+0xdf/0x130 [ 1481.652366][T23258] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 1481.658878][T23258] ieee80211_monitor_select_queue+0x23a/0x240 [ 1481.664950][T23258] ? ieee80211_recalc_smps_work+0x20/0x20 [ 1481.670678][T23258] netdev_core_pick_tx+0x118/0x2e0 [ 1481.675876][T23258] __dev_queue_xmit+0x756/0x2f80 [ 1481.680814][T23258] ? __might_fault+0xb7/0x110 [ 1481.685639][T23258] ? dev_queue_xmit+0x20/0x20 [ 1481.690307][T23258] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 1481.695921][T23258] ? packet_cached_dev_get+0x270/0x270 [ 1481.701370][T23258] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 1481.707419][T23258] packet_sendmsg+0x3dba/0x5060 [ 1481.712392][T23258] ? __might_sleep+0xf0/0xf0 [ 1481.717137][T23258] ? aa_sk_perm+0x7dc/0x910 [ 1481.721714][T23258] ? packet_getsockopt+0x9a0/0x9a0 [ 1481.726999][T23258] ? __check_object_size+0x3e/0x410 [ 1481.732300][T23258] ? aa_sock_msg_perm+0x94/0x150 [ 1481.737303][T23258] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1481.742653][T23258] ? security_socket_sendmsg+0x7c/0xa0 [ 1481.748158][T23258] ? packet_getsockopt+0x9a0/0x9a0 [ 1481.753265][T23258] ____sys_sendmsg+0x5b7/0x8f0 [ 1481.758101][T23258] ? __sys_sendmsg_sock+0x30/0x30 [ 1481.763148][T23258] ? import_iovec+0x6f/0xa0 [ 1481.767813][T23258] ___sys_sendmsg+0x236/0x2e0 [ 1481.772483][T23258] ? __sys_sendmsg+0x2a0/0x2a0 [ 1481.777278][T23258] __se_sys_sendmsg+0x1af/0x290 [ 1481.782123][T23258] ? __x64_sys_sendmsg+0x80/0x80 [ 1481.787073][T23258] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1481.793132][T23258] ? lockdep_hardirqs_on+0x94/0x140 [ 1481.798832][T23258] do_syscall_64+0x4c/0xa0 [ 1481.803251][T23258] ? clear_bhb_loop+0x30/0x80 [ 1481.808088][T23258] ? clear_bhb_loop+0x30/0x80 [ 1481.812766][T23258] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1481.818660][T23258] RIP: 0033:0x7fba5cc83e59 [ 1481.823074][T23258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.842765][T23258] RSP: 002b:00007fba5aebc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1481.851205][T23258] RAX: ffffffffffffffda RBX: 00007fba5cefd090 RCX: 00007fba5cc83e59 [ 1481.859170][T23258] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1481.867523][T23258] RBP: 00007fba5cd19d6f R08: 0000000000000000 R09: 0000000000000000 [ 1481.875601][T23258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.883583][T23258] R13: 00007fba5cefd128 R14: 00007fba5cefd090 R15: 00007ffe6c339248 [ 1481.891570][T23258] [ 1481.894593][T23258] [ 1481.896914][T23258] Allocated by task 22152: [ 1481.901424][T23258] __kasan_kmalloc+0xb5/0xf0 [ 1481.906007][T23258] __alloc_skb+0x22c/0x750 [ 1481.910414][T23258] alloc_skb_with_frags+0xa7/0x730 [ 1481.915603][T23258] sock_alloc_send_pskb+0x87f/0x9a0 [ 1481.920809][T23258] __ip_append_data+0x2037/0x32d0 [ 1481.925848][T23258] ip_make_skb+0x227/0x440 [ 1481.930259][T23258] udp_sendmsg+0x1ab5/0x2370 [ 1481.934853][T23258] ____sys_sendmsg+0x5b7/0x8f0 [ 1481.939693][T23258] ___sys_sendmsg+0x236/0x2e0 [ 1481.944362][T23258] __sys_sendmmsg+0x2ba/0x500 [ 1481.949036][T23258] __x64_sys_sendmmsg+0x9c/0xb0 [ 1481.953871][T23258] do_syscall_64+0x4c/0xa0 [ 1481.958384][T23258] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1481.964269][T23258] [ 1481.966600][T23258] Last potentially related work creation: [ 1481.972294][T23258] kasan_save_stack+0x35/0x60 [ 1481.977052][T23258] kasan_record_aux_stack+0xb8/0x100 [ 1481.982333][T23258] insert_work+0x54/0x3d0 [ 1481.986754][T23258] __queue_work+0x9c5/0xd50 [ 1481.991424][T23258] call_timer_fn+0x17b/0x540 [ 1481.996131][T23258] __run_timers+0x569/0x800 [ 1482.000627][T23258] run_timer_softirq+0x63/0xf0 [ 1482.005382][T23258] handle_softirqs+0x339/0x830 [ 1482.010285][T23258] run_ksoftirqd+0xa4/0x100 [ 1482.014864][T23258] smpboot_thread_fn+0x4f6/0x970 [ 1482.020310][T23258] kthread+0x436/0x520 [ 1482.024543][T23258] ret_from_fork+0x1f/0x30 [ 1482.028999][T23258] [ 1482.031480][T23258] Second to last potentially related work creation: [ 1482.038084][T23258] kasan_save_stack+0x35/0x60 [ 1482.042840][T23258] kasan_record_aux_stack+0xb8/0x100 [ 1482.048122][T23258] insert_work+0x54/0x3d0 [ 1482.052470][T23258] __queue_work+0x9c5/0xd50 [ 1482.057142][T23258] call_timer_fn+0x17b/0x540 [ 1482.061727][T23258] __run_timers+0x569/0x800 [ 1482.066494][T23258] run_timer_softirq+0x63/0xf0 [ 1482.071288][T23258] handle_softirqs+0x339/0x830 [ 1482.076137][T23258] __irq_exit_rcu+0x13b/0x230 [ 1482.080808][T23258] irq_exit_rcu+0x5/0x20 [ 1482.085132][T23258] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1482.090792][T23258] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1482.096936][T23258] [ 1482.099248][T23258] The buggy address belongs to the object at ffff888062ffb000 [ 1482.099248][T23258] which belongs to the cache kmalloc-512 of size 512 [ 1482.113398][T23258] The buggy address is located 507 bytes inside of [ 1482.113398][T23258] 512-byte region [ffff888062ffb000, ffff888062ffb200) [ 1482.126665][T23258] The buggy address belongs to the page: [ 1482.132317][T23258] page:ffffea00018bfe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888062ff9400 pfn:0x62ff8 [ 1482.143952][T23258] head:ffffea00018bfe00 order:2 compound_mapcount:0 compound_pincount:0 [ 1482.152312][T23258] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1482.160290][T23258] raw: 00fff00000010200 ffffea0000868108 ffffea00007c0008 ffff888016c41c80 [ 1482.168864][T23258] raw: ffff888062ff9400 0000000000100008 00000001ffffffff 0000000000000000 [ 1482.177518][T23258] page dumped because: kasan: bad access detected [ 1482.183916][T23258] page_owner tracks the page as allocated [ 1482.189617][T23258] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4188, ts 62240028392, free_ts 21351413708 [ 1482.208861][T23258] get_page_from_freelist+0x1bbd/0x1ca0 [ 1482.214463][T23258] __alloc_pages+0x1ee/0x480 [ 1482.219075][T23258] new_slab+0xc0/0x4b0 [ 1482.223131][T23258] ___slab_alloc+0x80a/0xdd0 [ 1482.227813][T23258] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 1482.233222][T23258] inetdev_init+0x7c/0x4d0 [ 1482.237660][T23258] inetdev_event+0x26f/0x1370 [ 1482.242324][T23258] raw_notifier_call_chain+0xcb/0x160 [ 1482.247682][T23258] register_netdevice+0x12a6/0x1710 [ 1482.252867][T23258] wg_newlink+0x4b2/0x750 [ 1482.257321][T23258] rtnl_newlink+0x1359/0x1a50 [ 1482.262060][T23258] rtnetlink_rcv_msg+0x844/0xf30 [ 1482.266996][T23258] netlink_rcv_skb+0x1f5/0x440 [ 1482.271844][T23258] netlink_unicast+0x774/0x920 [ 1482.276625][T23258] netlink_sendmsg+0x8ba/0xbe0 [ 1482.281382][T23258] __sys_sendto+0x46d/0x620 [ 1482.285894][T23258] page last free stack trace: [ 1482.290571][T23258] free_unref_page_prepare+0x637/0x6c0 [ 1482.296046][T23258] free_unref_page+0x8f/0x2a0 [ 1482.300816][T23258] free_contig_range+0x96/0xf0 [ 1482.305566][T23258] destroy_args+0xf0/0xa00 [ 1482.310017][T23258] debug_vm_pgtable+0x321/0x380 [ 1482.314858][T23258] do_one_initcall+0x272/0x730 [ 1482.319607][T23258] do_initcall_level+0x137/0x1f0 [ 1482.324534][T23258] do_initcalls+0x4b/0x90 [ 1482.328861][T23258] kernel_init_freeable+0x3e9/0x570 [ 1482.334049][T23258] kernel_init+0x19/0x1b0 [ 1482.338394][T23258] ret_from_fork+0x1f/0x30 [ 1482.342811][T23258] [ 1482.345129][T23258] Memory state around the buggy address: [ 1482.350749][T23258] ffff888062ffb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1482.358817][T23258] ffff888062ffb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1482.366869][T23258] >ffff888062ffb180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1482.374946][T23258] ^ [ 1482.382958][T23258] ffff888062ffb200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1482.391002][T23258] ffff888062ffb280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1482.399056][T23258] ================================================================== [ 1482.407111][T23258] Disabling lock debugging due to kernel taint [ 1482.413401][T23258] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1482.420573][T23258] CPU: 0 PID: 23258 Comm: syz.0.5613 Tainted: G B syzkaller #0 [ 1482.429403][T23258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1482.439709][T23258] Call Trace: [ 1482.443075][T23258] [ 1482.446090][T23258] dump_stack_lvl+0x188/0x250 [ 1482.450768][T23258] ? show_regs_print_info+0x20/0x20 [ 1482.456125][T23258] ? load_image+0x400/0x400 [ 1482.460627][T23258] panic+0x2e5/0x810 [ 1482.464668][T23258] ? bpf_jit_dump+0xd0/0xd0 [ 1482.469168][T23258] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1482.475052][T23258] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1482.481367][T23258] ? _raw_spin_unlock+0x40/0x40 [ 1482.486243][T23258] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 1482.492806][T23258] check_panic_on_warn+0x80/0xa0 [ 1482.497820][T23258] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 1482.504231][T23258] end_report+0x6d/0xf0 [ 1482.508393][T23258] kasan_report+0x102/0x130 [ 1482.512968][T23258] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 1482.519305][T23258] ieee80211_monitor_select_queue+0x23a/0x240 [ 1482.525545][T23258] ? ieee80211_recalc_smps_work+0x20/0x20 [ 1482.531267][T23258] netdev_core_pick_tx+0x118/0x2e0 [ 1482.536574][T23258] __dev_queue_xmit+0x756/0x2f80 [ 1482.541809][T23258] ? __might_fault+0xb7/0x110 [ 1482.546516][T23258] ? dev_queue_xmit+0x20/0x20 [ 1482.551282][T23258] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 1482.556838][T23258] ? packet_cached_dev_get+0x270/0x270 [ 1482.562516][T23258] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 1482.568706][T23258] packet_sendmsg+0x3dba/0x5060 [ 1482.573729][T23258] ? __might_sleep+0xf0/0xf0 [ 1482.578382][T23258] ? aa_sk_perm+0x7dc/0x910 [ 1482.582925][T23258] ? packet_getsockopt+0x9a0/0x9a0 [ 1482.588184][T23258] ? __check_object_size+0x3e/0x410 [ 1482.593471][T23258] ? aa_sock_msg_perm+0x94/0x150 [ 1482.598407][T23258] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1482.603679][T23258] ? security_socket_sendmsg+0x7c/0xa0 [ 1482.609141][T23258] ? packet_getsockopt+0x9a0/0x9a0 [ 1482.614256][T23258] ____sys_sendmsg+0x5b7/0x8f0 [ 1482.619034][T23258] ? __sys_sendmsg_sock+0x30/0x30 [ 1482.624055][T23258] ? import_iovec+0x6f/0xa0 [ 1482.628567][T23258] ___sys_sendmsg+0x236/0x2e0 [ 1482.633415][T23258] ? __sys_sendmsg+0x2a0/0x2a0 [ 1482.638359][T23258] __se_sys_sendmsg+0x1af/0x290 [ 1482.643201][T23258] ? __x64_sys_sendmsg+0x80/0x80 [ 1482.648121][T23258] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1482.654176][T23258] ? lockdep_hardirqs_on+0x94/0x140 [ 1482.659614][T23258] do_syscall_64+0x4c/0xa0 [ 1482.664026][T23258] ? clear_bhb_loop+0x30/0x80 [ 1482.668685][T23258] ? clear_bhb_loop+0x30/0x80 [ 1482.673350][T23258] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1482.679230][T23258] RIP: 0033:0x7fba5cc83e59 [ 1482.683636][T23258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.703234][T23258] RSP: 002b:00007fba5aebc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1482.711644][T23258] RAX: ffffffffffffffda RBX: 00007fba5cefd090 RCX: 00007fba5cc83e59 [ 1482.719610][T23258] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1482.727657][T23258] RBP: 00007fba5cd19d6f R08: 0000000000000000 R09: 0000000000000000 [ 1482.735615][T23258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1482.743582][T23258] R13: 00007fba5cefd128 R14: 00007fba5cefd090 R15: 00007ffe6c339248 [ 1482.751550][T23258] [ 1482.754891][T23258] Kernel Offset: disabled [ 1482.772048][T23258] Rebooting in 86400 seconds..