last executing test programs: 3m14.842713902s ago: executing program 0 (id=669): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x80000) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xacb6, 0x8) write(r1, &(0x7f0000000040), 0xffffff4a) 3m14.663120205s ago: executing program 0 (id=672): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xffff8881f5c0a000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000002, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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") 3m14.280837975s ago: executing program 0 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) write(r0, &(0x7f0000000070)='s', 0x1) 3m13.794866633s ago: executing program 0 (id=680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m13.395095235s ago: executing program 0 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40) setpgid(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 3m12.76564345s ago: executing program 0 (id=693): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 2m57.650213494s ago: executing program 32 (id=693): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1m53.511845057s ago: executing program 1 (id=1119): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1m49.584949432s ago: executing program 1 (id=1131): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000080)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0xffffffffffffff9a, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00cb7b"], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) 1m48.901072547s ago: executing program 1 (id=1133): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1m47.740746286s ago: executing program 1 (id=1138): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000300)={[{@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@fat=@quiet}, {@shortname_mixed}, {@utf8}, {@fat=@flush}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}]}, 0x0, 0x2c7, &(0x7f0000002b80)="$eJzs3EFrE1sUwPHTTJumLW2yKA/eg4cH3ehmaOMnCNKCGFBqI+pCmNqJhoxJmImRiNjuxJ2fo7h0paB+gW7cuRc3RRDcdCGONJmJMR2btFqnbf4/KHM7Z87MHe69cKbQu3X92b1y0TOLVl0SKZWEyLpsi2R2WoGR4JhotZPSbV3OTX15///VGzcv5fL5hSXVxdzy+ayqzpx6/eDR89Nv61PXXsy8GpfNzK2tz9kPm/9s/rv1bTm8e1XE0pVqtW6tOLaulryyqXrFsS3P1lLFs926WuqG8aJTrdWaalVWpydrru15alWaWrabWq9q3W2qdccqVdQ0TZ2elGFj7DujsLG0ZOUOpTOIw0TUSdfNWUZksLDxNzoFAACOlrjq/7slT0ueVqo79f0e9X9CuuN96n+Roa7/D6r261BkPYnjZCRcvl0rOkT9DwAAAAAAAAAAAAAAAAAAAADAcbDt+2nf99PhMfwZF5GUiIS/x91PHI4Bxt9g/E+urn/cS4k4TxqFRqF9bMc7m0PMjYl8bc2HQLu9eDG/MKctGXnjrAX5a42CITtzKFeUUudhmej8+Xa+duevyZhMhvmO2JKVtMxG52cj8huFpJw9448HT7bFlLS8uy1VcWS1Na9/5D+eV71wOd+TP9G6DgAAAACAk8DUjl3f7624qeG2IT3x9snO9/mcpPv8faDn+3pU/huN770BAAAAABgmXlLKluPYrtd82K/xNMgZ6OIj2Ag3s/0jNxSJ+3VSg148KiLBmZfx9dnYd1ZCRHpDY7vORDeM3xvlTyI/r4vZ2Ic7qiFJkb4X+0Znrn68314Be9159y7BAAAAAE6GsPofibsjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMsYF3GgscZKOyrscZ8bwlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDR8DwAA//9KIAfL") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r1, 0x0, 0x0) stat(0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1m46.513933238s ago: executing program 1 (id=1143): write(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 1m45.943771251s ago: executing program 1 (id=1147): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(0x0, 0x2, 0x161281) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x7, 0x3, 0x6, 0x4006, 0x0, 0x3]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 1m45.647495599s ago: executing program 33 (id=1147): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(0x0, 0x2, 0x161281) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x7, 0x3, 0x6, 0x4006, 0x0, 0x3]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 27.756812902s ago: executing program 6 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/conf/all/rpl_seg_enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/default/rpl_seg_enabled\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/rpl_seg_enabled\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\x00', 0x1) close(r2) syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000282b40fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b04030100000000fe800000000000000000000000000001fe800000000000000000000000000002"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 23.594780593s ago: executing program 6 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/conf/all/rpl_seg_enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/default/rpl_seg_enabled\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/rpl_seg_enabled\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\x00', 0x1) close(r2) syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000282b40fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b04030100000000fe800000000000000000000000000001fe800000000000000000000000000002"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 20.274209618s ago: executing program 6 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/conf/all/rpl_seg_enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/default/rpl_seg_enabled\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/rpl_seg_enabled\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\x00', 0x1) close(r2) syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000282b40fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b04030100000000fe800000000000000000000000000001fe800000000000000000000000000002"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 16.586887406s ago: executing program 5 (id=1343): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 16.586377937s ago: executing program 3 (id=1345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r3, &(0x7f0000000000)='3', 0x4e) setgroups(0x0, 0x0) 15.426169755s ago: executing program 2 (id=1348): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4c050) write$tun(0xffffffffffffffff, 0x0, 0xfdef) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000280)={{@host, 0xfffffffd}, 0x0, 0x2, 0x4}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "afe1658d587e93ab4b5fca380cdddd71e95c81000bac90d9689507b96ace5d2f9f55fddb8b36c7cac9209681a5fa01cd3874b06f2fcadd0d6c3b2543560ad96ffb3b3bb528250d54c3849e85a72f9805820433eaf86b855cc6bb316351ebf38753b22f619e6525c21a5050c57297595293366a0ed2ad9b308f845f1d9af97cf6384f5ec26ca2afea4eb950f209116b1d8b58fe396fcfb8ae0b8898f212b216cbb7d1bbd57a726d194a29a4e15e035b8162b139c67404e6a503db799c06078f56258de59c08f1812611aff6d4485a01f3413b9b4a11412629c2a4810db413d940af170b313dcf9a1e08e0156a7784c413ffa69bfb6b135b6093ad19c7f8bc70e5f9a0bcf07eb164c44642489845d93c25064c768ff253b3faf52378653b61ed2f3460a2221e6d9b2c04e99cd9fe74c005a330a08f558771a77771a1d1eb8b110912dbc327e07869f73b857cb841b5a47296a81d956c030dee87fda743cf9e56d08856a82ee26a390ac2569a31ca9beccda0251f28b124ee1e8ea6babc1b1e2d81fc795de9620301d65ded5865c5a9f6ce7422536d40694c2aa987542364f7f0bb75bdb0182d10b18a64045c7dadc0c82a47eab7e735fe240f27bb5da305cd08c86314a4a5fef8487c96bc1ea97409d73e1cc6ceba35f74eea39f2bf881833298b1e1a201eb9ea9c0754d41ef9a91b4deefcaeff08ee35a1f31b2d780b3934d5913626ef4a0f31c8e057e43ff14fc6fbf5e4a86b906b1ba320f3c52b629974a1324d97067935df1e4340b071130ee953bababf9dc0229e4a2f29cf1ae2713ffe85a5a9bd374c928ed416e1bd2516657bd4d3a9ac114ed279fcd89645245df7c55454fc367513ffae594d5236b320ad103f2d0956b3da7344a29fc910040027ca8b239d00ab5e79eeb83e25275fb61ceb65f6ace88cb43f106e128330ae709e19f209afd87b934dbd0faf470dfb52fdfd73bfa9a7a983b36d78469568ae69a0481cdc764c554d5ac03e607781cf3a5e209bffce2276529929d800f6d9b8a2f100108d7b883b5ce5e19da38ae5c99a8351b4e41c538fee7299a890edc630abbfe604c0b8847a7b5b4eec1dc00ed60e95b5374270ec634ff6d6ccbcd08145f9df1c2082c9447482ed42b4d0ea9a73bc9a68e36ee9e118bb5c08e1e7c2bd2627e82902d2c6f0da90bdbc52103f3992663653fd2b41a4294aa8f222812fa8b5e1864b75748f992bc2b396c03e202e8bfe9a1ccca1cb8b28c9c6faa47cc6b871140ddc45a0d02c752175a0498c3ba30e79c12d6ebbc32d5533d0216529e0f713eac725fe41bad4c9051d364bf38e3b72641510b09b2645447ea13b440d568adc9aa9ce85c967d78a14bdbd2fcfe0c7324a556ee841fc9ffd7a3c784fe41a349ced68e01c145db8847a547086c5595b9f6299bf7432e0e9c9a4a9108a24f7ad49c18a3ec771953480a0a0fdfeaded6b74f174ea2def77a0b9799f6b75a77a6314a4165e194be616eb5c98726d88da79f54fd01d39e751837a6bd0d77ca79073b3a7e62686fd8e089b0258645db505bb674174d626b1d1cfdf0f32b0d880884b73c63bc78a231a8cb45a12884907c021f87cdd7b2f1de020044666d38a866983c8ffa0cc6963a745c108e80a3b54eedac65b68c897043d914f146ba4ca18a61e144e7746d31879fa7ae7c2a43747e6060d79669bf9a8edcc229b7f1a0fe239b398692a6a65acd19c58442dfa8997430aab89aae8fb8f201bb1fd58605cf9dfe5c85a15e0928542a8fd7768f4b7750c7aeab8d9ced7c9fdea6cc38bc38209f608cc3d7c8bc9240b5b7d1661b8bfd231f30047befefd70183fb8330d184394159cd4153990c6a43ccded133adecced28499e73c4b25ee86e5d68848670736362931be74fe0aab5708ce05f4d6d7a068c590d36f99a0ba3501df60d9c01f54a7c366727287996de354c4a3a5e1ece988e5f59087c730afa107edbab31de441a88061ad799fefef86254a2f2891aa47420dd3f6267833a5345bf001d10c9f1fd121401ae846a9a5df517210cd0beb50a5139854aa1747115bca24522dae42667ef9ce893c4db108941198ed5323f582f11c4b13385f60b3038fa661f3ed276504fb51fb966ef88cbbb953c269ea2ed989ced5e8988839c55b398dbce98ce1e976c2065b2ded80f929dc6ef8afad6b61145686ce14e2d26f0694fda1e52a6c5155c0d8ea91544c76548a25376f13de7245b48e7298421d2c2433a472a8c89c3e621c5370654e1c7bba0f3d8bdf40c36cdbf02f6b5a7c4138b9e3931896fd89272b4d61a9875c00ba0d8d1bd960b9aaee3b6f127db1155680d7eefc5eaa6d4c648fca303706796bef110fbdb731d9e671f937e55ebf5d2e64f7cdcc073c905c134e8d3852689ed81c95be0c259816e7ff7b979557684aa1b6c2dd42754bda93e3e55c5ffc1122c988ca171fd57ab24ebe789e819c60ff3f9f1a9465ff4a9bdc5c2b2d9c351ffef5ab375f9024e297a26642b15108781fdf3c55d0aa9a8cb68ba93b7b13cd6d05b9b16502d7f9d72d015059e7999cc4ed880fd5ebf626ea409b9f0c4ded2974bb3daf88cc1930818dc3e09200897389211d3e780faa0acd64e37c60924a3fd0a16a7146a41b1b01e43fecf610c7d11d42baac5a60db7638077162cd58b3f734070e81ee71c5092422eaac366b41dd996723124df9005cbae4e2ec47f8a06616bd7faa5da6c0200c872c2ef929a16c823c57f2d4f798061e49102cab3af65a5cc9f8856dc5d3c0de1440c4d8df50a7ec09491d2e651ee5f5a76b8fc2d20a07def1a8951b9770f85728b42cd9dafce7c341c26a90b7d1c2e36f03f74eda3bfb2c40eec5c454c38e90f4d31e6a0f23b2ad53a429f73761713181b7839792cc494f21c5be9dd7f167a6681720ccd3cfcdd4b427058b995505a82993805a1860d5ea75e61c216ec9594adfd39cab47511578d57e312f2f3e0d2da8f2d8dbe3fc1fd281bdd8e7dbd203e4ec3e7d3b468ad2b81a76c5bac460f497e3cdb6bf0c6be5ceae4bd488b9597b13a37885b95426d8ea06760516ec13aa339084407d1f45e331e5dd77ac73306f70996728a0d67b48a833e9a3ddf22968e898b59e4b4c9a16aa9ea8120202737746e1a5ec2cca9640d69df2b27900de7abe573b7c023a88d7f3fcc3469a3a4e7f9f9095a6fed55fbb1d3582807407e62b55a38d33e70a0203513f30d37a4e6f03acd9d0fd2f3438eb485aa5e693806c002efd0811ab92518c41856039d7f36cf9981981231b3cea3493f0e8988bd05d3d424a5bfc8d1cdfd0e09e3ce12cab6edfb7f6d80c1edbb4d1d51a1500b0876e13e5173bfeba378c71046e70b590cf542094d01f458a3cec642fb1ce13a992765eca608579e85f03e7d871dbdbd882ce4821a944179e48a920d346ae21b08ee043cbbf3284c3a67d9b9417a5fed1202ca537f7711650f692df044f145587467dfdd45405d7caeb064bfa12b52057e90d2b5d2885bbaf032db769654af272dd78bb8ec8446344d0c1ca57d51fe1243e0a02ada90371e75418223f171f014f9a970964828cdd9faf3b66789cefd0374437f2a271c2765d9876943fb93205cb12448d4cccf68c28259e85a540e013ac77414a147fb1e0f0fc4a4d859a928eaef6e952a103a944052534c9264c85f4200cc8b465f66725c779f49312a308dda8fe7e423ebbee16e64ad6e112b3efd95584160f08c83595fdddfa39c4b89867fcf23085a24c53a6d846863b95f5605beb9b0a1cc6d191524da81ce89c0f7767652d887661b5299e300f2e83a6c962cf9089d82b139f4bedcc14bbf6611258d52e1f3d5a5e3ac05cfa4d066550b2180c31695a52da12c1412e55cdbe6660d86fe4c8eda51f2adf34b81af8ec55b549c3bbcc588c5f074e0dc76bb9bbd0cdea26dd47d84d9321f970912d374a081c9ebb74700a0792dbbb2da41ae7e3aa5230bdd260bd208b68100dc2f7bf2132d7cb34084e999b6ee2b91356ce766523a80359147af20fa15febc42b89d43e4a48d13cb8ed6678f346aa981954e0520ea8cd0a0c16281e57f33a5e3fd97d55d24386832c17f22b1c1fb91d5b1f362f3bc8aa8369c18444fc10e9d1285f6a3bcf24e2606b69fbd89f337f7ee3c27b1a2c7e8dec2c38c84c6712de1e7f1d790d86d8e0a402c40d406d39c13879f4d103adcbca13570eadcd424f8e06155885b054e1d7f994723fd22a6d704a89e6b126271ec5c19ea7b814c36f9ca9a0223da630324ca0f2a3010f4e53426d8d514bcc3303e6fa429c00244b918c01a444f74dd376bccb5709ed103514484a67240c4b992c722601e27dee6ba8b37608ba66e2065f8298a6df8c0a491113bf10e0bf18867dda3e1170fa1853b355fdf41898de4a339927872e8d9fb8a4d1c31833ac1355695a20c75ff6dafb70244a3754cb58feee89045e3408da902a7987e6a66dad0f044951a560954ee812abe142e9a4db701bdc46fabb0b98b4be01dadd629cffc661a3816744bcacdc38777494289ba156b272ade8f4ed3e32ce48958863b09bb09fb6999281164c0c5b50a77350d5f3c78d951fa76d1db68587e58bd40f824a68fd59c4ebd4f7e22e8e1458911012472b876ab15ca8c48ef664b1da41bd1ad9a5b799a1de8b2962c477f1726cbbe4f285a5c387842ac723b3877f5826503b68602c4bdaea94544b4b056142876d995d0db128a38f5c4547f12cf9d1cbc678cd42eebf67519484ab251855dbda09dd04ddc031860a69fd592fa1c12d59adc4699c246a666f6f6c20c1a21562f05f8db43ff424cea0d16789a6a69dc8552f4865bb3fac5b650b549432a0383c8f95c79084ca4841903f0c04319135f2bfc94ec8837374f0c1eccaacf8a0722d54b1a0e748a79e6c7ecdcdbfe376d080d9747a9a5a13cc7eb4111345216d1c787f05c992df3712d2a194ac325bb568abc6a97011bc62110ee12ba209d76f690ddb4e4b417f5b5db52ee7ad97159dfcf82b1c2a4eb5a97396fa24e52ba1c47330f7caca91b2965bac75dbcb86ac85a07b774dbf82be5fc92a8621e80973418d94a0bc10905a3815e04d1a668ea8cb5ffb293893b06bd372c75b477118b78dd69a04097ca8ff8f8fb21a5293d2fe6785e33d15d61008c4ca84121a8e48fabba3656250fba7e058ffc1705c7fa13509fc7c96fc9b16d0b21a26b11ebfc3325a2ca682bc014ec54dc8433af105ada5566f491d3ebe5e1e5f0859b28a576fb7978f2a1b4897890c1c9b0c1f4f8c7351ca738a6100c4f64092d865bc65a8b92007b117e5a4dd7988d3281aa2ccebb36f9af5032eeca2c8a72888c84346d3945507a6bb956b84f03d88a90bb9ecc466c7d94a3670783e11b312ecb4f9eb8489df8d129110b6bd710138476c8be75327e9ea6a0b94b8567b31692fee2d9c17d7e20d3d23cc4d317710537f608793e87d9158cd61a43306898da40d01b544fc951ccd13f11b4b8fbf47d694df601fd6677d796818571ee3125089316e3d33c5684affe9f29f12186bb5dc4c5eaee94e41d07a03c9c59db95bc42c23da55c497caa6a64c73ea3059a8c80955a9730666a0e02c3bf87cfb79542d84a529d7bf9c3ac60b323952fa439c2e5fd512c3bfe3770178b4e8d7efa223bd76830a6b8b604e15773d63d9fec504ea6561793723ff4f6fbdd016372e1a98a9252e8d1607512e5397c78498f68d3792ef7a28f74f4b15358afa5674d4340863a2897af87499bd073a06aef8215f76c9418f5b82b79b77f0a01dfc059b510794cda70b7daf2c74950652e"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) 15.354385289s ago: executing program 4 (id=1349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000080)='4', 0x1) 14.827475934s ago: executing program 6 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/conf/all/rpl_seg_enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/default/rpl_seg_enabled\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/rpl_seg_enabled\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\x00', 0x1) close(r2) syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000282b40fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b04030100000000fe800000000000000000000000000001fe800000000000000000000000000002"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 12.687596046s ago: executing program 5 (id=1350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x3e, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x100000, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 12.684300936s ago: executing program 2 (id=1351): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 12.681702587s ago: executing program 3 (id=1352): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c374b96ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x5, {0xb, 0x2, 0x0, {0x2, 0x9, 0x1000, 0x90000005, 0x2000000000001, 0x8000000000000001, 0x9ec, 0x35741061, 0x40, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f000000db80)="7f6918c94c44884d7b8a28634924247bb7227f95c895bbd9b1d304e96d5cec730781de7dae19f800f70a3f79a7dd3d71df24387c5c75ab544cb9f6046356198c15e42d1243561d3564eb81f867c971bfde8b68e2bb06c19acd4db9ff3338918a966ab2ae23d8a2d5d8329ebad40e96db51b70fb245b7876f6df6c6d07327f3c03928531903e5e783e0115db15b2833fc33d3b57f30f25e7b32d7d41f724e8b61cf82045c6cef472b58b94ad9f0b4746e47a86aa7fe472a33dd5d87578cbc83356e87ed9786be4fe4bbd49c4bea54f1209106ecc101b945d8bd1fc5f8f9fc04cb63087d76679c6985f9cd03ab2b47208be4f291c12a1aa95ec5d84137ef7f84f6bc37d829622c63a758886d23c509bb6009ee56c05ae6a79c890728b9028231456d8ba449755ac2a3b33f17ec27c69a93319f84ee840f08f379b53fd36a770b4353e273efce7392e2ad35975a1a6c9ec0d09a3e5052aa9c0cd67f68c0c878129ab13a46c2c650311739fe5658f035b08cd96b41b5b8b154eaa9aad034fa376ae9b906a93c91343755a26056335c7a3cd68132a957badaa133517f219b48dac6f8b9e073d484170e7c8d0279aa09986a4e18ababe7a67ca4706916dc14442ace6876fc039fc4895c086e6464b41c31fbfee4385bc6c8adfce87642ef7e360c84f6d731635579c2b78f3efb77a8cd7d985f7f4a3260cc8802173f6db768645cb59d3dcaf4c024312fb6bc6a77d177d838f976f2e37026927b02cbdcb2cf6f6c1ca9dcc90ad40d849c50085f4d1f15378f388b51a5c3a0eab990b8724fc2e39b4c5308e5bb2faa1e534a46c298309d6d8d01982ce3a4f5e7ffb6a32e1062735c361e29e8648a94daf71896fee3b2e5ecf3c9bc30d00f588129e3eb3ee8c3b5dda9b70db7e8f0ceb1b14bf4e823781237a8490ef28205b23d88840f9865ba8a760752bbae44ecaed810051ed2778864ba9aa48422c22fdb46b1dcca4601ade39a2200b9ca59cec048527da207d1b122da061f2085af49574bf9c9ff3534d8dc10f1352638515facb031dcf9d4f44aa76908b7ca8cb19347d83dea67121ae9f759df68e183a79e4f14b35bd18a47a81cd8cbfc45a772f2084f640d1343c1048dfb0da78063896a2f757637d767289c24608cadb0c98b0b8e525c5a6fcd57471b1a03f34008c70d60096fb25dbc1d7b090427304699a6e64a547c192388fa88b021644a38705645d0588e573f1052d56b2fbd3f0c7fa8bf713b77801fbeb7e53517326055617a45691a24dd22022b0f8a4f70da5792a66dffd7a52b0133bc8df01e7bfb2b81e15179452035b9a6f27f262936d7ecfafe97964ae4e6848793400177554bdfcae4897f0c5eebda209ff2e39326fc6bfb8012801432fb27723ccce88dc4bf26c9c2407e8fa19c2a5669905319e67268d0900c3a4de3825c1a6f3d256d62c1983d6136aa5554cbece1bd238161a7f7138d6b4d1bf4841c72ae9f8cd2eb4141f84947367c6457d37178f8dd3589faf2dfdc2a52172b5eed7ac6e65ea8a85764df131e05ce45e29a55e77625c4b47a823d726994956321af20152482d8bfa165fb3a59cb177a0a39839b597260e81bda3c1ce17cd84b5b5934f1e0c14287d99a091754b6430d8c7fe06ddecd1dc54fbdb2fb241a3022abdd5072c40fabd6a278bf12c2508b5222ecee996359fb7e2013280f25d63879fbc464c90966dc5d475fc0518593728e627be5683a782df540117cb0da3d0aa9ef492ac2e454cf8c4a34b454eb4ec4316026e34aeb4f0490d7d2b1a8cf757e0613b0348f10f3075a6ba221adbd3ee54a520254d4a3d4f7c012e6e35a6c3c7d5c321f12ed8ea1bea46161c26d5b2b956d712624435fc267d90b61c7a7929f82762e5708a650d5ed27be212a313bd603480857c26e118dc7b16021f090a765dd0b304aad70d16e7fa31c5c06e511b8a848bef23a68bd415ba3bce70d6e2d621a7c871e7c45a0e66e6e8f9b3ec58610f24e8332c15d8e0422ce3589639523e2089f68fb4d38b4fae820b88fc67a0884249fd509996dedce14d307e91166f90da5086b4574e922137b60c859847e54f62fc6d13ad5b79f7595999d54df6810f6cfe90e81399d4d6f905f569672f6f543572f87124b56d26ea43f66a1c75ac1ea26695d61599fd8db6e7f8c025393f948ba9e3ccc57270f371d3d31589c1f445388c931d78ae714a54b4c0bf1b0c8e4ec49db480c40b1df7135e5a1cd5d427fdb3fc8689999600f474f2b98312b89e8102e231258ad7137a3eed49a26f1ba3d7624e7ca647232ab36fb2a73f85f52c752bb32d61c2b6b9452cf279a30e971322cad2d6430a0d9f4902c9ce4b43054a4aac67250f9967523d57068616e7769189d3c513cfdf8a8bb37ad7932159c819af127eb3abee2c45e78ae62a3f6022f0e9de7454ff51ebeefc58db63803236b311087af41efe1cd5b82fc973a047565fb2c428a20052cb578e1fc6e33a66b331f53045b69efef186a6b34e01d089197112566020cd78410657e4547b726b48aab4d3d49554bfbbdf9d3598e93b412796931c2b662a096618deb94649cf2a922b2b6e2ea44163fc460419a8c5e88a18a05ee96392573cf2406affe801955214891430da0ee4ce385b013d827fd4adafaff661741d447e7be653efd5977bbd4aef922c076e91f391607a3f60d105753cb8e44aeee51e90aba0c52f731885c9d459cc89a1f548874009c5b6938feab5cc3f42721f4c9599fe74a11fd2f898c9fb3401be644a9ff6c093683e90e9a23a544e778fd5735e72eb432dd1ccbbfa9db14e8b7e5a638895edcff4a684a9d467151cd4b8d0fcebe3481b4c9f18b3279cafb76ed7bc5bde263baba9ab032f8973c8e1527f26c56b627a312538bec70e3829a1b35c53b0ca64571de79514c30c98cad975056a98fca351dd1753422e81733667098f893f1375736d6228531b97c5ab918819ff16c7eb38d33f0a1f023d07f97ce5d1d1e4b71c9a292aaee6522e1b0e332b7ad6a0248ecbc611e93652951ded443ba05530e2b6ef6f5837b2fb214db180281ecf14e73064dbb53f002ffc12038b8d720f7fb919ae92c423798fee59e1d20dc9002b8eee98347ec86026a293545d4224a334d77cbd68a39e698567b47dd296402b1a91b31184032ad5c07f9766d96a3aad4746153c3060204b6fca81b0e4195e54ad6d963526c2ce74cfece9b16fb93bddd0965335756243153faaae2e299b33eb8c2b58b1ff26714e3479418d77f3d122c2a397b851cc1b62ee272129137037b14312a6535376c2f8a505434bdbe1f009898709790a0cd0c6f265d7d2e93b22319991dedd018d391b9d824af7a0d1cdd08e05b961ef867d0bef9b56791bd34602af6cf812e20d7f1a68bd66b5b30700003b6fd06e690baad26193ccb4806057068f4a48cfbe289e718215b368ecee46b30088d38668f55e04f8ba14c26264f10456acab6a0982ac251ee1f2e2f612e7d7f4f9c7399972013844d442334aceb641e7b3535311488925d542a2a4000eadaecd0e23238bc3740beb45ac504b14591fbbd7e1b6015fe338c1399edb7d6dbb539d34ad9ffadd665e5f85b918f3d1d888636a84c7e685453bbdf9a5e22fe80f8e8b72ebfc1a2db75ae07edd9004f7d95481459edae62388c75d8be87fa491daab39e8f0764809fb6cdd0c1a501094b2ece56cdf14b5a92593fe8f158f41c0f77e0fbfcd8a76bc805895014b3c4a1ff8933bf07ffa971845441a27c4f83c682706cd03b405fa87224216f178403ac871990cdeb1bd75cc4dc963e4ca23be0fe9961a04cdb631e67baa1947c154f106ed5d8afbb1a6b57314603200a381a83446e5cb6346c484a878fe4339f0260e70f987fc73c58d4b82b853dd52b1967eeb13f724ae92b2ab490b8457230422cc1ecdc2860d730ed8cac393f7fd4927edcd13c8c8d576848a24d973172b2b70e9467dd6e28bcce21eb34d8cf0e2da165b18851d5fd017fd7b74eeca936267787870131a203e946fff450387ca87d5a6fa3f95109a9671cf4b066ef881df3ccc8902f67808c01e1739167ecb59b6cd8a195c62837348a2548708ce553e9cbd3f2a75bc83996871bcb0e7fac4d1e68eb3302b42cb46d3b8d1c6a27b237b3b50d87874197a197357178ccd8fd7575a4d54222ac1fb200657cbca5683303f3bc7a36ed0418327f8d1df336af2092c544f6226ced77b63445d913d328f03fb8889cf54ee36e642b37638d203c2e1bbb9ffa33d1e8124f7dcd22e98f66519f79a0731f6c5f1a3417d7e50eb39ba9d9a0a8be11112d1de4b6983ec0436cfcc5e0cbfab9ceed17a75743f70173649e8650a0e1183c11e62d0a9b566641feb8261432624d5116a6cc0a3332945f4aac41d46067777261ed028436220237340eecd76e820cb434f50e88c4c731f3e3f302220baba2a346683acb65008f4af74de5112cfb15be1d4d5fe080098e9cc447c5ed48eed2729f437f685548bea6842eb33bf7683bb097fc400d5be9ef54f79d8bf53ab057a431f535309e9af11783a5ce371ba5de8e517b767ff1b1d64efea71bf44cb0974665e4142f583489bb3b3870a779089822f52136bd34ee4b97276992bb080c6278be503fa06c970bff455d9d323fa2a7baea78e03b99a57ead6cfc90ec1cdc541e06c0ba80f23a03756e3d3d56b6f7cf7fe706cc9fd10395f18a6f1cd019e57efe3c49cddcc48c42890349d1255201c928d590ad6963700f91c73b8e522e9950ff9088f1b5365de624178f1e71168d29644e8a4dd9b524aeaf70738dc16aed5edef1c18365f00d6a7f8b1466b4da1a3f0981b491f79a87ebc323c75b12b292ad9e0ff34b615f57c1dd896e7eec65d075d3a4414769af553c0fde01d73196660c3401a0a5a82a5099564480bb7fc10240860bb2813612122c580438403a0fbc3aa5b789af01a4392163345291e7c83e57f20e9f7a9b4b234308688956d993ac0b4d4eaa8f714a5059734a5e1d47c98f93a40f60e77511e463e4fcbad3410882c553da9c7845b8554ae7e070f04c6752ca58363840479ee570b2960102814dd963bcf69d3a1279e5d6bee1ca28a46c0f34626da074053f52ac7eb71e05702086d3b23a250e7b8c4c0075e366b42fc64d06af19c49fc89a441182cef130c72f279f56813241e51775681aac365459bc24bb4bf59819c65df280cf1d11650796f35650efaebf2d4d00c9ea7c49dc8e7400e3c344dbfe7e93f4b70b89ca42df53dc42d7c0a6c67d8cb28c711ecbd945b3a21a412a10296a705c447c4a46a2c62a63a686ef467ee736a25c23a6e9496d35257b58f21669300b33d6e5abf93fdad59ab1f7358e07d0e409c9c8371bc44d42ce5da24a8fb8eb5a3aa55010d55358f72033c59a4491851002fce689caf1efe7e61016ce511c6af68fa4498ffc643cfcfe992f3d4a68987c27a1aceb06a87c8ae6fb59de2d5b6f01c57cfe27738531b0cf87f3b2ac41e19c4b51f2dc54514513c740bd2a1a60a7210afa6c727352d00b1a6b0c70d44592029eba80bf0b47e7bfffa6865d4ed213e9ad66f28ac8066d3e3a22f795c374de53a07b8318ef37b809601b2ce19d18229d5c9190250a9b0a27c500744b359134dc7a19ce9ba83b586c7c4190610e807ba13a62fde4ab8c443311800b03ad761a77dadbcf91b1fb7de0696d273b803d186f22657feb01fcfc00e2c38b4b3e77c987cc10605429e6a5aa4a6e55397cf8b7252119a8c90e4c5ab44e035e43f038e23cf491e9d0cb54155b38a73f781b7ba3973d5b011fca0501ab228bc7a07d52c1a417f2d89b21e32d7b54f0a7ceb7e5b3bbbf30093542df3c2896334a046d9ea5bf5b39c65d44bb4fc0447496549a2252c5002f4eacb09659c7d81a1b5aa36019fc6cf2dadc62bfb923d573a245b01be37872505081c28d95c023bb9d2398614cf8c06b48bcb26c727d739d8f970ac8b430001f32a11d60573edc125551ef19a46f9ed274f7da3962572d741a38ebfe2c79eefde7c0cc6f6b800bd3c2c3a3f397f109550e3339044968ee5d76a41c74d40cf7a9f9e1f6b8917037ba5dd5faad8a18380ce2c9c78f70fce4a6086649bc0bbd3fd79a2b96083a82ec212ffc00f98469b1923773a25400fdce8f2d6f6c5aa83e8071dc3073927f7901bf9685f603b246f46101ea69383a26277a7dde0aad5df47bfd9dd2dbfbb9c82d4c2536d687cabd85876725fa98220b85387ddabc59f9e065ab499cb19db370f4090edbe5203255c2e7b9199e9f7e3fd8efe96c760e56a8a0b581d7419fbcb7bc05b0ecad49980a191f3c572a3f187bbc7c9aca7e07631174be92bc42e31d420466503cd8eb65ff81f2fc87f262731f7f9a3d70b2973baf6a0a45e84aab447cc33ae5ee7e7e00ca346ebdf307b32f6a2792311195b6dd4458fbdfd63aa743848be5f33919fac774887bc2e819afc2f18b639bfbed1d4be7aac932ec64d1b735fd58f23ef87e9986d70d734267ef75b6c37d833d7c7c9abfccaf77e300e687127eda92dbe586d2821a50028d2bf073e8e628fa17c30f72d4ab734c03e665381de9b2c6bc56d3352a05db51c6b880a503368286a12e8eadebd62d5176725444700ee47c6d129f95ee724f7c15f1c6f8eb173482295789b870b1c307841e9f4ba0cba08f67bf38b26e9a7951a2bb6e1b11a864d468d26104573a23557e376667aeae0680086924c6be4a3b1cd77791a461b69bbbea5e2bb1662fd09fac1e4c2a4c3a9af4e1d1950a61f6731b84ef80809c745226c4b5c973e2ae9db0a0b89243ac24b6211a7dfd01ce2ac794bb1ddf4971ed9e03e1b48b15928de9ba1ec10d25c729e5aa1791de3c24f88783bece40b2d26f818a85412631136da414dae2b0e84a4f756ff47faf50b993ca2b1332f946bd60aaa244fef4c44e27abe18e3c139357621cc3f2181078619175019f07e8cff2029225657e869ab2f85f7d0da1f4ca725213ff3c54e9c8bbde165f4e7fefa7703ff9aaaeba782d09cfacd1b3ae70bc59c6721a487e9a151c2c2d6c374b2c9d7437485dcd9aabf09c1e8adfa2484f0e5972ede72ce13d6162052c6a94d8cd742a02996bc477a00a9180744ee9ea3d4c9c8b033c23076bef2773345d221c294864bc8b20a0522ddea26c0f9257db1abf991830cfc08e34d0d6f3225c425dfa7661ef281d715756e967ceacba90430f42bc906c39415266225041f7f400060bb86a43ec1f8f050f5c3cee2cf541b1d5f3e13d9613bb97d7dc0e58c5a0f4b11c572bceda5b632e98a9172e1b45eefc4ba808aeec0d3e40eb121035d174147aa1e54b8d5f75b630118e12e7688375e26ed745a9c50fa8a2fb023571c40ef4f0a2da5284d0ee921839709a3df86662dcabe01a592621a5c57d88f3dd7b1f1db695d6f577b024e004d46d4a463109befe04ad42776dcbe46ec9399d88f4b83018baa453c981d2639af3dcf650777be6a9ca936c1619cdedeece29c2013237556d09dd983d56a3cc8bc6a3a2960daeaec4d798637564eff409248ee3f9a733e7d612812748c63650c9f75997953e5e781ad48c1bc3a5c4d85cb5819acdfd7d593d615b6d09cb072d222332b6f8e23bdca8ae10868534519e250f7052b009b0e5c132726734645bc9850ab98bab08665887f4c97ce2eff5d8603066d4dfc2d762cd45bc96a7b2cdc2ca557e9ffaf0f03521a0680e30387706946c3587996b2751b5944147c7344b51cfd30e70da869ef1a5d8ec2ac8f4c56d4168f20365690c995c226840c5fc6b1f998acbaf4bbf095c314aec39123ba23df17d36ffbf48d110a6cef7b0d49cd34a6a097b31fc05025924e32df666c9bd264d62aeba0db0c6fad6513bd366c1c788661bd7f86fd3e5e5c52963a30a589f2266a0e3d0d00245f9db624bcfacd3328a9ff9c1ac6ed9495b37e56bf3152ff3188d2a5a5ec3ffd237468fff8fb42e693b796647020e1be6689789fee77045ef0e99114ba5eb55055805f012cd11a6d4a3cb04b1dd6243618cff80cc8a980325e9fe55e1acae084bc353fd56b8a500614c2f4997358099521a7210024d03e0f31f29eda6bf96eff0f741d90bacfb4fc87c15f0a924b38facd926a9767edddaf0e328ace267367a7a4f0efd04ba042457f306eb7f201faa5709e4052a162cd33bab0bac9a0181c0d383fd17957a9987f1d24e80901e6843beb37e7e13a076e44576456d3fedf50afaf2fbff36b1c7555bd560bdfdecb37412a2a6b66c94f988668d05eebbb5738ef09c7b9c1fda542f39a4f7d3eb2902d9c144fe89a4c33d77b7a053d89749a1260a6236db383474e8938d0c6a21abd63fe67c01d9fc16a8821c5709a22949344670547174223c3e13117ad43cb4e1b39903c92f9e548832019adec859e8ab84952b379f80a81451cf53eee157ed76eb0c816598e018195d69d9bd01b0e46432fef38f7cce7e0b180b0e16425ba49fa2d2cb99a5525f90e04ceeed8c8643592e64756e0b9911aae238a475ede1378e709cd20144d779e6aaf9fdb8236dbf5fe3f60d254fa19bd2c9fa950501894b95f272f6f4236625c5b2108d853f8407298a90947447c0c5dad5c235144954dd197493fc9fcbe82afea68cc29d3e53c16256c00d6ec40ef6319164a70017d19e07747cea22e668d53115f66c2a222dd3ab72d3ea6712f539796010c122aace09934fa37f2f4564d19ffe320ee0f0bb252e5b9d3abccd3cac62d7700a8372e19b981c192c367ed4182c94dd36771ab70d84e4f993de2c7a6d005c648b3ad78a065685cd11621c0a74bd4444e7e1183bb6b175bd43c7f5986fcd48c7a5522449b3f38019668a197bb6ee510719a7288d018ff4a72ad18ab81f7136b5f0b9f23e63a69d8ff174efd824a9ae0722a3cbce8ee596bb6025ff9a901ee70c462c01baa240f93511803652ee9fb2bd19bef2a849e184e36938cd2e1220157a8ca376e8a8bbb93669ba1dbe3ea2b5c5a55ec02cbb1393eee30a9ccfa22f22fe7fc888be74e00dadc9f273ef252304cc10b3acb2d320c74800e8397ce26eb806c9bbaab24c3bee318669e62696b05ea586068feabcff9e49967b2f7b1698f45a086f9deda7d8a26d3fe0723ad1a6ea3dfd10722e960f270db5a7d39daf6c5bcd822d4b05e10f5ea53d9267d13eab771405de136ed3a77c8f2f483d543fe8a5d7d1f34b39e78df05c3945a0f1ae184f641eaff54d92e739f16dd7ff3bb7f4026281eee4dc6fb429f7715a6fde415172d193b913dae9e73cc8c690f597ec757801f503fab84579f21721f90518b4ee88c0c947dce61fd5bcb7c58d4eb45d06aac0d35c1a9647ebb3507c0f8a2dbff36d03681929b942d7202ea575542f6921db5a3a933ff8ba2cb066f028e216b64d281fb6a236481d57d71bd318930fc1ee1d9ad2113df747c592be3d244e5f42957e468c0840b1dcd6cb82a5ce29ab016c7294bad05a6c0430929ae96164597abc25b6f746c25f50fe98afdc04ee696c620b923d15e211360b8c122f9c0fa8cec463c8f7a45a1eb054e2480d4f87a14a9ebb3836afad1d02234bfcbe75ac0ff43d1ab4b8c1ae7067422a2a1807814d53868959e8919090e6af016628ebac18684bd238d99ba6f16053aebcd69dd4ddde9db5fe0b6b431a316eb54d2ae29b695430ba60e30e3fb169bb3636de169175e5fcb52d13ed918fdaa0eea476df0804a3af0dc468fbea1b263b92de2206c7aa9ff6a85ebd5a578c60df6611a3944d79d81729fefd0562cdde51e8108bf0c273359d596e4bb85dd888168de99b0a6a81ae74ac3759c4b986d9cca8fcf60a536180570f0be902f1e96d960d353dc38c684eb63118f27bfc167f971f76a5863106889cbaa47f800436405eac62a14ff4138c712f1b45eac7b531fe548cfa6918f11787cb2c84a157a65a9e8668b2f3751e51a943423fc59a691ca16de178edf0c2a8e897222356af56490aaf6a0a8a4153f43ec3876a5bbf27a00dbcb70dfb885c85c419556624a18800bef8eb4f3e6e138856b1bbdc1eda17c1adfee5966837da52fa088c532e47263f5917707b7f08408d3461d4dc083b247714915c7c751ac0f9a6118fb24cd759d04f33043892e509fc12c73b17d03541749ca82ca2992b3aef51191e02f8bea747d0690a0991087761bd5e23b6289e7dadc6025276e9bec88858357f93735b01718d1d250b80381354ed5a782413bc34c08dc4b2aa91f2f6892a116cab3173b74230fe109e879ce854b1bc7047b6c8228e18797f7a355eb502aa0b012c82e10f7bc4bc91b149c85b8696cd5735c553347c26212b36dc9e778ac43dfe139a319e9aaf3c5643dc476a7ecd9f8f69e6b5ff54e2b98b6ff9f3aeb6ffd0019c4c6cf5332c1fec541ca45720e88d10f9c04352dce307053ad6e0b9b1448fe86b893cdd3a0caabc5a42772b186caec04e029faf696a842f78fdcd5bc6168e49656d9922d3797ab948298d830bcbdfeb2a593e38ac7f0c0aa10d70c4a6b110d3a75aea66af29ead30f3d03806ba9b1fc2c42aa27627e0647209b07ed7317eb711148b8781d9c6a79317fee6277951d9d7b7d8f823c046b3f2cd22bd809fc4c17d27c9f1c14269f6846f70bca0eb2280e720dff51082b40890061fad286ad200828a58e50391b011489e5b70d2aafe165c6e609badb24c0b29c05ab48b296a2b75a27aec0ca8a5b5eeec344ec2ebcdc2f7910b0b136b925e1dd75e3cf0739721f0f6d1df55e00445bdb630d801fe51a16eb63019df487b91a556d0ebcdeec1511b251679df0624bbaf8b0f53262f587cfad05f3587ea7ee22aa4b052013b08fd217fd58e8b918d58fb9ba50c1998a9ef9a42494392f8f3087b5d18512472420450fcce13ff6a56a5b491020f91a586decf28171ac13ad0e803b4617557a7335052b7468e98179ee82c729dc9422d4ecc87a4c6c308caff8e6ef4c3fe8088924cfea53d760d17008a4d111db27ead13863e808bd13b8bc5341017231fa1c27d12a0630b5472271354a1b09d85c90e4d0d731c7233c163c6d78fe48ae3f665f2e75d922e77a48f949cb33d41800360d0fc7cb165b6f4e8f3c05f0e1b9ce163f288861ecc7f3e134cac468795d3781c4aabad5d88fab0dd780bf913a19102a2be74798cd737d62b0186b641dc89552ac444ad60685e4c3118e8296972880f69ff39a69dfa38e07bbfe32fef1b683edb340f8b8ccfdadca73a44488ad6807c16a8c3a45111ac8664f7b85a45a28a6fbd4351a06521ebe22feaba53229c9d13daa40d8762e5eacb9bd6a69c3b37230c229348307ca24d15305a8667f9584a3abb11e5135146e3fa90769410f7dd04bb4e7744f28288b84dfde7aaab141d582d9faa5dfbdd36e6d3da28f627e05f39ca3cd24fe6cb05817c528b956e623f74b747b56e11fe93f40d881b59ff7edaa26d583fcaaf368a4247fb338759e5ead21fd8225e2436a336f95edf783fdfbabc7813f4d9a96613ed01e22becb25634ce3e5a1ccd25f6328c8c60eeb09a5484743bf0c90ad2ea1884ea12263b4700f667a2cf4649e7185c74f6e1f707d45db83563cd3cf6caa1a90da482d9ddba7e2c0bdbd60d24f00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4000000002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r7, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x7ffffffe, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x0, 0x2, 0x8002ad, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4a72, 0x2000, 0x9, 0x102, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 12.676723838s ago: executing program 4 (id=1353): socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x1, 0x3, 0xa, 0x4}) 12.553064682s ago: executing program 4 (id=1354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0xe}, 0xe) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x4e10db25}, 0x8) shutdown(r4, 0x1) 11.592878832s ago: executing program 2 (id=1355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x51}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xfff2, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) 10.394802198s ago: executing program 5 (id=1356): socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat(0xffffffffffffffff, 0x0, 0x129302, 0x41) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x17, @time={0x65757100, 0x1000000}}) 10.382137891s ago: executing program 4 (id=1357): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r1, 0x1, 0x7, &(0x7f0000000040)="c04bfa0a", 0xa) read$FUSE(r2, &(0x7f0000002000)={0x2020}, 0xfffffc7c) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/206, 0xce}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 10.298181978s ago: executing program 3 (id=1358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 9.417296511s ago: executing program 6 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/conf/all/rpl_seg_enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/default/rpl_seg_enabled\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/rpl_seg_enabled\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\x00', 0x1) close(r2) syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000282b40fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b04030100000000fe800000000000000000000000000001fe800000000000000000000000000002"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 9.355214364s ago: executing program 5 (id=1359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x104}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 5.92759156s ago: executing program 5 (id=1360): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x8}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x400000000000136, 0x4000845) 5.9272301s ago: executing program 2 (id=1361): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000), 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) ftruncate(r2, 0x100000001) 5.912197473s ago: executing program 3 (id=1362): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5.854802714s ago: executing program 4 (id=1370): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) io_uring_setup(0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(0x0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x2040400) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.003830214s ago: executing program 5 (id=1363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r3, &(0x7f0000000000)='3', 0x4e) setgroups(0x0, 0x0) 2.003604004s ago: executing program 3 (id=1364): socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x1, 0x3, 0xa, 0x4}) 1.834127938s ago: executing program 2 (id=1365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000000c0)="510003000000", 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) 594.706533ms ago: executing program 3 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0xa, 0x11, 0xffffffffffffffff, 0x0) 198.694341ms ago: executing program 2 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'team0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "a2fee6f7eb767c9b809e2565b2423cb50e5bb6986fac8b2bb94e6b0f841d9229", "4ea177474b99a07055219783d8179ac3dcaaaa61859b13def40b8a71959f8340", "c2e4ec51276e47ba2a1e865a5243fdb5efcec3f2002000", "98437dceb81f5b31842504b2b80000000800c33516706534ff830500276c00d1", "43ab7102be254f898a4e33c291f70d364363cb1d3c2bd0600160508cc281746d", "3e415ae6c8e2bb550e9700b3"}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") sendmsg$inet(0xffffffffffffffff, 0x0, 0x4a046) r2 = open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x1c3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) copy_file_range(r3, 0x0, r2, 0x0, 0xfffffbffa003e458, 0x1000000000000000) 163.509548ms ago: executing program 4 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, 0x0, 0x0) inotify_init() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, 0x0}, 0x20) 0s ago: executing program 6 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/conf/all/rpl_seg_enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/default/rpl_seg_enabled\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/rpl_seg_enabled\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\x00', 0x1) close(r2) syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000282b40fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b04030100000000fe800000000000000000000000000001fe800000000000000000000000000002"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) kernel console output (not intermixed with test programs): m tag 0x0 [ 109.658535][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.666552][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.674646][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.682428][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.689896][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.693767][ T4678] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 109.697294][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.703766][ T4678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.721176][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.728576][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.736050][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.743600][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.750995][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.758389][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.766100][ T4678] vhci_hcd vhci_hcd.0: Device attached [ 109.773741][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.781129][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.788537][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.795959][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.803371][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.811309][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.818732][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.836350][ T4681] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 109.836802][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.842871][ T4681] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.858082][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.865576][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.878214][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.885584][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.892896][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.900150][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.907438][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.914757][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.922139][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.929792][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.937232][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.944553][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.951897][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.960205][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.960208][ T4682] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 109.960226][ T4682] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.967545][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.991225][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 109.999165][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 110.006494][ T4457] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 110.041670][ T4328] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 110.052245][ T4457] greenasia 0003:0E8F:0012.0001: hidraw0: USB HID v0.09 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 110.071132][ T4457] greenasia 0003:0E8F:0012.0001: no inputs found [ 110.071838][ T4682] vhci_hcd vhci_hcd.0: Device attached [ 110.109886][ T4457] usb 4-1: USB disconnect, device number 2 [ 110.112666][ T4681] vhci_hcd vhci_hcd.0: Device attached [ 110.190687][ T4678] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(5) [ 110.197245][ T4678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.253935][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 110.338106][ T4678] vhci_hcd vhci_hcd.0: Device attached [ 110.365828][ T4678] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(8) [ 110.372378][ T4678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.396242][ T4691] fido_id[4691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 110.415689][ T4678] vhci_hcd vhci_hcd.0: Device attached [ 110.441119][ T4681] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(14) [ 110.447746][ T4681] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.544054][ T4681] vhci_hcd vhci_hcd.0: Device attached [ 110.561197][ T4678] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(13) [ 110.567816][ T4678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.625498][ T4678] vhci_hcd vhci_hcd.0: Device attached [ 110.635645][ T4678] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 110.707567][ T4700] vhci_hcd: connection closed [ 110.752098][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 110.872342][ T4690] vhci_hcd: connection closed [ 110.873933][ T4698] vhci_hcd: connection closed [ 110.880100][ T4684] vhci_hcd: connection closed [ 110.888996][ T4679] vhci_hcd: connection reset by peer [ 110.901580][ T4683] vhci_hcd: connection closed [ 110.930834][ T4408] vhci_hcd: stop threads [ 111.214307][ T4408] vhci_hcd: release socket [ 111.289217][ T4705] vhci_hcd: connection closed [ 111.322141][ T4408] vhci_hcd: disconnect device [ 111.431707][ T4408] vhci_hcd: stop threads [ 111.436003][ T4408] vhci_hcd: release socket [ 111.451668][ T4408] vhci_hcd: disconnect device [ 111.461502][ T4408] vhci_hcd: stop threads [ 111.473633][ T4408] vhci_hcd: release socket [ 111.497630][ T4408] vhci_hcd: disconnect device [ 111.546521][ T4408] vhci_hcd: stop threads [ 111.550821][ T4408] vhci_hcd: release socket [ 111.570423][ T4408] vhci_hcd: disconnect device [ 111.591760][ T4408] vhci_hcd: stop threads [ 111.596058][ T4408] vhci_hcd: release socket [ 111.610735][ T4408] vhci_hcd: disconnect device [ 111.631811][ T4408] vhci_hcd: stop threads [ 111.636082][ T4408] vhci_hcd: release socket [ 111.659995][ T4408] vhci_hcd: disconnect device [ 111.732221][ T4726] overlayfs: failed to clone upperpath [ 111.758761][ T4408] vhci_hcd: stop threads [ 111.925832][ T4408] vhci_hcd: release socket [ 112.067921][ T4408] vhci_hcd: disconnect device [ 112.511473][ T27] audit: type=1326 audit(1790666925.374:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.4.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a6a99e159 code=0x0 [ 115.211448][ T4328] vhci_hcd: vhci_device speed not set [ 115.948965][ T4757] netlink: 'syz.3.94': attribute type 4 has an invalid length. [ 116.325258][ T4764] netlink: 'syz.4.98': attribute type 1 has an invalid length. [ 116.337693][ T4763] loop0: detected capacity change from 0 to 1024 [ 116.353640][ T4764] netlink: 'syz.4.98': attribute type 2 has an invalid length. [ 116.631303][ T4392] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.662719][ T4771] null_blk: disk nullb1 created [ 116.881214][ T4392] usb 3-1: Using ep0 maxpacket: 16 [ 116.898225][ T4392] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 117.004686][ T4392] usb 3-1: config 0 has no interface number 0 [ 117.087756][ T4392] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.259100][ T4392] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 117.380423][ T4392] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 117.478956][ T4392] usb 3-1: Product: syz [ 117.527773][ T4392] usb 3-1: SerialNumber: syz [ 117.664681][ T4392] usb 3-1: config 0 descriptor?? [ 118.973159][ T4392] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 119.009195][ T4392] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 119.404320][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 119.404860][ T26] usb 3-1: USB disconnect, device number 3 [ 119.411350][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19 [ 119.417802][ T4783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 120.161052][ T4783] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 120.203993][ T4783] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 121.447199][ T26] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 121.999021][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.042376][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.074854][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.224697][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.243667][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.254752][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.265080][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.275845][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.285987][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.297082][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.354132][ T4792] device batadv_slave_1 entered promiscuous mode [ 123.360837][ T4792] device macsec1 entered promiscuous mode [ 123.395769][ T4792] device batadv_slave_1 left promiscuous mode [ 123.563570][ T4794] loop3: detected capacity change from 0 to 32768 [ 123.951471][ T4794] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.106 (4794) [ 124.252434][ T4807] loop0: detected capacity change from 0 to 8 [ 124.776609][ T4794] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.850178][ T4794] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 124.858915][ T4794] BTRFS info (device loop3): using free space tree [ 125.286443][ T4794] BTRFS error (device loop3): open_ctree failed: -12 [ 125.698760][ T4845] vivid-002: disconnect [ 126.290183][ T4842] vivid-002: reconnect [ 128.941587][ T4857] loop3: detected capacity change from 0 to 1024 [ 128.991293][ T4861] netlink: 43 bytes leftover after parsing attributes in process `syz.1.120'. [ 129.340421][ T4857] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.240603][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 130.672188][ T4884] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 130.699422][ T4884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.127'. [ 130.718874][ T4884] device dummy0 entered promiscuous mode [ 130.740558][ T4884] bridge0: port 3(dummy0) entered blocking state [ 130.771733][ T4884] bridge0: port 3(dummy0) entered disabled state [ 130.793957][ T4884] bridge0: port 3(dummy0) entered blocking state [ 130.800827][ T4884] bridge0: port 3(dummy0) entered forwarding state [ 130.841944][ T4887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.022428][ T4882] jffs2: notice: (4882) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 132.103976][ T4874] loop1: detected capacity change from 0 to 32768 [ 132.154356][ T4874] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.124 (4874) [ 132.228735][ T4902] futex_wake_op: syz.4.131 tries to shift op by 144; fix this program [ 132.257362][ T4874] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 132.278362][ T4874] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 132.309795][ T4874] BTRFS info (device loop1): enabling ssd optimizations [ 132.316974][ T4874] BTRFS info (device loop1): not using ssd optimizations [ 132.429673][ T4874] BTRFS info (device loop1): turning off barriers [ 132.515210][ T4874] BTRFS info (device loop1): use no compression [ 132.661649][ T4874] BTRFS info (device loop1): using free space tree [ 132.678382][ T4900] loop3: detected capacity change from 0 to 8192 [ 132.970954][ T4900] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.987149][ T4900] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 132.998232][ T4900] REISERFS (device loop3): using ordered data mode [ 133.005149][ T4900] reiserfs: using flush barriers [ 133.036001][ T4900] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1024). FSCK? [ 133.132868][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.139315][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.163816][ T4900] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 133.263567][ T4919] netlink: 'syz.4.132': attribute type 2 has an invalid length. [ 133.305707][ T4919] netlink: 'syz.4.132': attribute type 1 has an invalid length. [ 133.321893][ T4925] lo speed is unknown, defaulting to 1000 [ 133.333697][ T4925] lo speed is unknown, defaulting to 1000 [ 133.341610][ T4925] lo speed is unknown, defaulting to 1000 [ 133.416615][ T4899] loop0: detected capacity change from 0 to 32768 [ 133.508288][ T4899] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.130 (4899) [ 133.528021][ T4273] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 133.546925][ T7] lo speed is unknown, defaulting to 1000 [ 133.580541][ T4929] loop3: detected capacity change from 0 to 512 [ 133.583552][ T4925] infiniband sz1: set active [ 133.597082][ T4899] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.635587][ T4929] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.644081][ T4925] infiniband sz1: added lo [ 133.668613][ T4899] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 133.752488][ T4899] BTRFS info (device loop0): setting nodatasum [ 133.758863][ T4899] BTRFS info (device loop0): force zlib compression, level 3 [ 133.762579][ T4929] EXT4-fs (loop3): 1 truncate cleaned up [ 133.766506][ T4899] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 133.784485][ T4899] BTRFS info (device loop0): use lzo compression, level 0 [ 133.792041][ T4899] BTRFS info (device loop0): turning on flush-on-commit [ 133.799280][ T4899] BTRFS info (device loop0): enabling auto defrag [ 133.805902][ T4899] BTRFS info (device loop0): max_inline at 4096 [ 133.812436][ T4899] BTRFS info (device loop0): using free space tree [ 133.831984][ T4929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.844371][ T4925] RDS/IB: sz1: added [ 133.882738][ T4925] smc: adding ib device sz1 with port count 1 [ 133.971545][ T4925] smc: ib device sz1 port 1 has pnetid [ 133.988772][ T4441] lo speed is unknown, defaulting to 1000 [ 134.004748][ T4925] lo speed is unknown, defaulting to 1000 [ 134.004979][ T4929] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.134: Logical block already allocated [ 134.605839][ T4953] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.134: Logical block already allocated [ 134.678717][ T4899] BTRFS info (device loop0): enabling ssd optimizations [ 135.429075][ T4272] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.480344][ T4953] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.134: Logical block already allocated [ 136.091347][ T4865] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 4: invalid block bitmap [ 136.318371][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 137.725457][ T4925] lo speed is unknown, defaulting to 1000 [ 137.926555][ T4977] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 137.926555][ T4977] program syz.0.138 not setting count and/or reply_len properly [ 141.669658][ T4976] syz.0.138 (4976): drop_caches: 2 [ 142.595126][ T4287] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 143.703528][ T4925] lo speed is unknown, defaulting to 1000 [ 143.810817][ T4994] netlink: 128 bytes leftover after parsing attributes in process `syz.4.145'. [ 143.840976][ T4994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.145'. [ 143.877752][ T4994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.145'. [ 144.112455][ T4925] lo speed is unknown, defaulting to 1000 [ 144.344326][ T4925] lo speed is unknown, defaulting to 1000 [ 144.524377][ T5003] netlink: 'syz.3.143': attribute type 10 has an invalid length. [ 144.625850][ T5003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.667525][ T5003] team0: Port device bond0 added [ 144.842817][ T5008] loop1: detected capacity change from 0 to 4096 [ 145.589553][ T5011] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.388200][ T5044] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 151.235621][ T5057] input: syz1 as /devices/virtual/input/input6 [ 153.243816][ T5068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.744938][ T27] audit: type=1326 audit(1790667222.610:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.4.167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a6a99e159 code=0x0 [ 154.265148][ T5078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.275620][ T5078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.949926][ T5085] device hsr0 entered promiscuous mode [ 155.065605][ T5085] device macsec1 entered promiscuous mode [ 155.206486][ T5089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.227053][ T5089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.405541][ T5093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 155.642496][ T5103] capability: warning: `syz.4.169' uses 32-bit capabilities (legacy support in use) [ 155.912349][ T5099] jffs2: notice: (5099) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.147811][ T27] audit: type=1326 audit(1790667225.021:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.0.185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295f59e159 code=0x7ffc0000 [ 156.265749][ T27] audit: type=1326 audit(1790667225.021:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.0.185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f295f59e159 code=0x7ffc0000 [ 156.406712][ T27] audit: type=1326 audit(1790667225.021:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.0.185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295f59e159 code=0x7ffc0000 [ 156.447212][ T5136] device macvlan2 entered promiscuous mode [ 156.470013][ T27] audit: type=1326 audit(1790667225.021:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.0.185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295f59e159 code=0x7ffc0000 [ 156.528521][ T27] audit: type=1326 audit(1790667225.021:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.0.185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f295f59e159 code=0x7ffc0000 [ 156.584913][ T27] audit: type=1326 audit(1790667225.021:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.0.185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295f59e159 code=0x7ffc0000 [ 156.693587][ T27] audit: type=1326 audit(1790667225.021:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.0.185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295f59e159 code=0x7ffc0000 [ 156.806425][ T27] audit: type=1326 audit(1790667225.021:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.0.185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f295f59e159 code=0x7ffc0000 [ 156.866217][ T27] audit: type=1326 audit(1790667225.021:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.0.185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295f59e159 code=0x7ffc0000 [ 157.116041][ T5161] loop0: detected capacity change from 0 to 1024 [ 157.146829][ T5163] device syzkaller0 entered promiscuous mode [ 157.896161][ T5134] syz.3.184 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 159.153941][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 159.153954][ T27] audit: type=1326 audit(1790667228.021:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6a99e159 code=0x7ffc0000 [ 159.260903][ T27] audit: type=1326 audit(1790667228.021:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f8a6a99e159 code=0x7ffc0000 [ 159.300127][ T27] audit: type=1326 audit(1790667228.021:88): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=5196 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6a99e159 code=0x7ffc0000 [ 160.576334][ T5217] syz.0.217[5217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.576493][ T5217] syz.0.217[5217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.948344][ T5237] 9pnet_fd: Insufficient options for proto=fd [ 161.142482][ T5228] jffs2: notice: (5228) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 161.752075][ T5268] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 161.813726][ T4524] Bluetooth: hci5: Frame reassembly failed (-84) [ 162.452127][ T5299] loop1: detected capacity change from 0 to 8192 [ 162.505940][ T5299] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 162.524326][ T5299] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 162.565713][ T5299] REISERFS (device loop1): using ordered data mode [ 162.572532][ T5299] reiserfs: using flush barriers [ 162.594679][ T5299] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.611944][ T5299] REISERFS (device loop1): checking transaction log (loop1) [ 162.627827][ T5299] REISERFS (device loop1): Using r5 hash to sort names [ 162.651269][ T5299] REISERFS (device loop1): using 3.5.x disk format [ 162.700041][ T5299] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 162.731839][ T5304] jffs2: notice: (5304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.926782][ T5313] Bluetooth: MGMT ver 1.22 [ 163.574227][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 163.584728][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 163.598319][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 163.608513][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 163.765391][ T4289] Bluetooth: hci5: command 0x1003 tx timeout [ 163.770537][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 163.966845][ T5359] netlink: 'syz.0.275': attribute type 8 has an invalid length. [ 163.996687][ T5346] jffs2: notice: (5346) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 164.557288][ T5378] loop0: detected capacity change from 0 to 8192 [ 164.595895][ T5378] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.617601][ T5378] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 164.663417][ T5378] REISERFS (device loop0): using ordered data mode [ 164.675249][ T5378] reiserfs: using flush barriers [ 164.685003][ T5378] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.714343][ T5378] REISERFS (device loop0): checking transaction log (loop0) [ 164.725242][ T4441] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 164.754993][ T5378] REISERFS (device loop0): Using r5 hash to sort names [ 164.786875][ T5378] REISERFS (device loop0): using 3.5.x disk format [ 164.806097][ T5378] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 164.926809][ T4441] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.965572][ T4441] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.995448][ T4441] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.027883][ T4441] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 165.045185][ T4441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 165.063572][ T4441] usb 3-1: Product: syz [ 165.073701][ T4441] usb 3-1: Manufacturer: syz [ 165.093959][ T4441] usb 3-1: SerialNumber: syz [ 165.125480][ T4287] Bluetooth: hci0: command 0x0401 tx timeout [ 165.330900][ T4441] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 165.375322][ T4441] usb 3-1: USB disconnect, device number 4 [ 165.404855][ T4441] usblp0: removed [ 165.670986][ T27] audit: type=1800 audit(1790667234.542:89): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.300" name="in_ports" dev="configfs" ino=38382 res=0 errno=0 [ 166.454175][ T5462] Illegal XDP return value 4294967199 on prog (id 8) dev syz_tun, expect packet loss! [ 166.566768][ T5458] loop2: detected capacity change from 0 to 32768 [ 166.597326][ T5458] (syz.2.314,5458,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.612653][ T5458] (syz.2.314,5458,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.641748][ T5458] JBD2: Ignoring recovery information on journal [ 166.716161][ T5458] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 166.932878][ T5458] syz.2.314 (5458) used greatest stack depth: 19744 bytes left [ 167.164058][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 167.276122][ T5490] loop0: detected capacity change from 0 to 128 [ 167.304561][ T5490] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.329786][ T5490] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.617070][ T4408] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.824212][ T5514] jffs2: notice: (5514) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 168.475105][ T5543] block nbd0: shutting down sockets [ 170.067479][ T5561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.351'. [ 170.382594][ T5538] loop1: detected capacity change from 0 to 32768 [ 170.507086][ T5578] jffs2: notice: (5578) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 171.157519][ T5599] device syzkaller1 entered promiscuous mode [ 171.227686][ T5604] loop1: detected capacity change from 0 to 1024 [ 171.359286][ T5604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 171.709249][ T5619] block nbd2: shutting down sockets [ 172.470346][ T5626] loop0: detected capacity change from 0 to 512 [ 172.551363][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 172.824706][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 172.923382][ T5640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.380'. [ 172.941970][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.950247][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.162660][ T5649] Cannot find set identified by id 0 to match [ 173.197837][ T27] audit: type=1804 audit(1790667242.073:90): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.384" name="/newroot/60/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=27372 res=1 errno=0 [ 173.736229][ T5676] FAULT_INJECTION: forcing a failure. [ 173.736229][ T5676] name failslab, interval 1, probability 0, space 0, times 0 [ 173.768749][ T5676] CPU: 0 PID: 5676 Comm: syz.1.393 Not tainted syzkaller #0 [ 173.776078][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.786152][ T5676] Call Trace: [ 173.789443][ T5676] [ 173.792385][ T5676] dump_stack_lvl+0x188/0x24e [ 173.796793][ T5682] IPv6: sit1: Disabled Multicast RS [ 173.797064][ T5676] ? show_regs_print_info+0x12/0x12 [ 173.807458][ T5676] ? load_image+0x410/0x410 [ 173.811984][ T5676] ? __might_sleep+0xd0/0xd0 [ 173.816589][ T5676] ? __lock_acquire+0x7c40/0x7c40 [ 173.821637][ T5676] should_fail_ex+0x390/0x4c0 [ 173.826347][ T5676] should_failslab+0x5/0x20 [ 173.830860][ T5676] slab_pre_alloc_hook+0x59/0x300 [ 173.835890][ T5676] ? file_end_write+0x156/0x250 [ 173.840752][ T5676] kmem_cache_alloc_lru+0x49/0x2e0 [ 173.845847][ T5676] ? new_inode_pseudo+0x7e/0x1c0 [ 173.850771][ T5676] new_inode_pseudo+0x7e/0x1c0 [ 173.855529][ T5676] create_pipe_files+0x4c/0x6b0 [ 173.860383][ T5676] __do_pipe_flags+0x46/0x1f0 [ 173.865058][ T5676] do_pipe2+0xa7/0x190 [ 173.869120][ T5676] ? _compound_head+0x120/0x120 [ 173.873956][ T5676] ? lock_chain_count+0x20/0x20 [ 173.878802][ T5676] ? syscall_enter_from_user_mode+0x21/0x80 [ 173.884700][ T5676] __x64_sys_pipe+0x36/0x40 [ 173.889198][ T5676] do_syscall_64+0x4c/0xa0 [ 173.893603][ T5676] ? clear_bhb_loop+0x60/0xb0 [ 173.898268][ T5676] ? clear_bhb_loop+0x60/0xb0 [ 173.902938][ T5676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.908837][ T5676] RIP: 0033:0x7fb9abd9e159 [ 173.913245][ T5676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.932844][ T5676] RSP: 002b:00007fb9accf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 173.941262][ T5676] RAX: ffffffffffffffda RBX: 00007fb9ac025fa0 RCX: 00007fb9abd9e159 [ 173.949223][ T5676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.957182][ T5676] RBP: 00007fb9abe3506b R08: 0000000000000000 R09: 0000000000000000 [ 173.965145][ T5676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.973103][ T5676] R13: 00007fb9ac026038 R14: 00007fb9ac025fa0 R15: 00007ffd3fb40da8 [ 173.981074][ T5676] [ 174.426341][ T5707] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 174.957230][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 174.969749][ T5736] netlink: 'syz.4.416': attribute type 4 has an invalid length. [ 174.977877][ T5736] netlink: 152 bytes leftover after parsing attributes in process `syz.4.416'. [ 175.006571][ T5736] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 175.129844][ T5742] "syz.4.418" (5742) uses obsolete ecb(arc4) skcipher [ 175.653480][ T5766] loop0: detected capacity change from 0 to 4096 [ 175.743035][ T5774] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.769338][ T27] audit: type=1800 audit(1790667500.701:91): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.426" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 175.864639][ T5766] loop0: detected capacity change from 4096 to 0 [ 175.900538][ T5782] syz.0.426: attempt to access beyond end of device [ 175.900538][ T5782] loop0: rw=0, sector=224, nr_sectors = 8 limit=0 [ 175.942507][ T5782] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.007958][ T4524] kworker/u4:14: attempt to access beyond end of device [ 176.007958][ T4524] loop0: rw=0, sector=224, nr_sectors = 8 limit=0 [ 176.052955][ T4524] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.072036][ T5774] segctord: attempt to access beyond end of device [ 176.072036][ T5774] loop0: rw=0, sector=224, nr_sectors = 8 limit=0 [ 176.148978][ T5774] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.188266][ T5774] segctord: attempt to access beyond end of device [ 176.188266][ T5774] loop0: rw=0, sector=224, nr_sectors = 8 limit=0 [ 176.210922][ T5774] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.232239][ T4337] kworker/u4:6: attempt to access beyond end of device [ 176.232239][ T4337] loop0: rw=0, sector=224, nr_sectors = 8 limit=0 [ 176.250559][ T4337] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.266428][ T5774] segctord: attempt to access beyond end of device [ 176.266428][ T5774] loop0: rw=0, sector=224, nr_sectors = 8 limit=0 [ 176.290025][ T5774] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.300977][ T5774] segctord: attempt to access beyond end of device [ 176.300977][ T5774] loop0: rw=0, sector=224, nr_sectors = 8 limit=0 [ 176.315862][ T5774] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.341140][ T5774] segctord: attempt to access beyond end of device [ 176.341140][ T5774] loop0: rw=0, sector=224, nr_sectors = 8 limit=0 [ 176.357551][ T5774] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.375112][ T4272] syz-executor: attempt to access beyond end of device [ 176.375112][ T4272] loop0: rw=0, sector=224, nr_sectors = 8 limit=0 [ 176.405817][ T4272] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.422577][ T4272] syz-executor: attempt to access beyond end of device [ 176.422577][ T4272] loop0: rw=0, sector=224, nr_sectors = 8 limit=0 [ 176.469382][ T4272] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.487730][ T4272] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.505952][ T4272] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.518713][ T4272] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 176.528513][ T4272] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 176.543081][ T4272] Buffer I/O error on dev loop0, logical block 511, lost sync page write [ 176.560692][ T4272] NILFS (loop0): unable to write superblock: err=-5 [ 176.577242][ T4272] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 176.586773][ T4272] NILFS (loop0): unable to write superblock: err=-5 [ 176.644507][ T49] Bluetooth: hci4: command 0x0407 tx timeout [ 177.030808][ T49] Bluetooth: hci4: hardware error 0x00 [ 177.092865][ T4287] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 177.100462][ T4287] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 177.106920][ T5810] FAULT_INJECTION: forcing a failure. [ 177.106920][ T5810] name failslab, interval 1, probability 0, space 0, times 0 [ 177.108114][ T4287] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 177.120599][ T5810] CPU: 1 PID: 5810 Comm: syz.0.441 Not tainted syzkaller #0 [ 177.134069][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.144133][ T5810] Call Trace: [ 177.147424][ T5810] [ 177.150364][ T5810] dump_stack_lvl+0x188/0x24e [ 177.155055][ T5810] ? show_regs_print_info+0x12/0x12 [ 177.160267][ T5810] ? load_image+0x410/0x410 [ 177.164788][ T5810] ? __might_sleep+0xd0/0xd0 [ 177.169372][ T5810] ? __lock_acquire+0x7c40/0x7c40 [ 177.174397][ T5810] should_fail_ex+0x390/0x4c0 [ 177.179072][ T5810] should_failslab+0x5/0x20 [ 177.183565][ T5810] slab_pre_alloc_hook+0x59/0x300 [ 177.188585][ T5810] ? xprt_alloc+0x4d7/0x790 [ 177.193083][ T5810] __kmem_cache_alloc_node+0x4f/0x270 [ 177.198455][ T5810] ? xprt_alloc+0x4d7/0x790 [ 177.202958][ T5810] kmalloc_trace+0x26/0xe0 [ 177.207373][ T5810] xprt_alloc+0x4d7/0x790 [ 177.211698][ T5810] xs_setup_xprt+0x9e/0x3b0 [ 177.216209][ T5810] xs_setup_tcp+0x7c/0x700 [ 177.220622][ T5810] xprt_create_transport+0x14e/0x630 [ 177.225903][ T5810] rpc_create+0x413/0x7e0 [ 177.230229][ T5810] ? rpc_cleanup_clids+0x20/0x20 [ 177.235170][ T5810] ? net_generic+0x1e/0x240 [ 177.239666][ T5810] ? net_generic+0x1e/0x240 [ 177.244167][ T5810] nfs_create_rpc_client+0x4cc/0x6d0 [ 177.249450][ T5810] ? nfs_init_timeout_values+0x410/0x410 [ 177.255076][ T5810] ? memset+0x1e/0x40 [ 177.259059][ T5810] ? __init_waitqueue_head+0xa4/0x140 [ 177.264438][ T5810] nfs4_alloc_client+0x79a/0xc20 [ 177.269374][ T5810] ? nfs40_shutdown_client+0x80/0x80 [ 177.274652][ T5810] ? nfs_get_client+0x9db/0xd80 [ 177.279501][ T5810] ? __lock_acquire+0x7c40/0x7c40 [ 177.284516][ T5810] ? do_raw_spin_lock+0x128/0x2f0 [ 177.289537][ T5810] ? do_raw_spin_unlock+0x11d/0x230 [ 177.294734][ T5810] nfs_get_client+0x9f4/0xd80 [ 177.299424][ T5810] nfs4_set_client+0x36e/0x500 [ 177.304182][ T5810] ? nfs4_create_referral_server+0x5b0/0x5b0 [ 177.310164][ T5810] nfs4_create_server+0x4c2/0x10c0 [ 177.315272][ T5810] ? nfs4_set_ds_client+0x490/0x490 [ 177.320463][ T5810] ? get_nfs_version+0x1e7/0x200 [ 177.325397][ T5810] ? nfs_get_tree+0x10b6/0x1520 [ 177.330240][ T5810] nfs4_try_get_tree+0x45/0x110 [ 177.335081][ T5810] vfs_get_tree+0x88/0x270 [ 177.339488][ T5810] do_new_mount+0x247/0xa40 [ 177.343996][ T5810] __se_sys_mount+0x2e3/0x3d0 [ 177.348673][ T5810] ? __x64_sys_mount+0xc0/0xc0 [ 177.353428][ T5810] ? lockdep_hardirqs_on+0x94/0x140 [ 177.358616][ T5810] ? __x64_sys_mount+0x1c/0xc0 [ 177.363370][ T5810] do_syscall_64+0x4c/0xa0 [ 177.367776][ T5810] ? clear_bhb_loop+0x60/0xb0 [ 177.372439][ T5810] ? clear_bhb_loop+0x60/0xb0 [ 177.377103][ T5810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.383005][ T5810] RIP: 0033:0x7f295f59e159 [ 177.387409][ T5810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.407003][ T5810] RSP: 002b:00007f2960539028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 177.415405][ T5810] RAX: ffffffffffffffda RBX: 00007f295f825fa0 RCX: 00007f295f59e159 [ 177.423365][ T5810] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 177.431327][ T5810] RBP: 00007f295f63506b R08: 0000200000000140 R09: 0000000000000000 [ 177.439288][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.447247][ T5810] R13: 00007f295f826038 R14: 00007f295f825fa0 R15: 00007fff87931f28 [ 177.455218][ T5810] [ 177.754746][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.780899][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.790383][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.800912][ T5816] device bridge_slave_0 left promiscuous mode [ 177.811078][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.833723][ T5816] device bridge_slave_1 left promiscuous mode [ 177.852162][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.952238][ T5816] bond0: (slave bond_slave_0): Releasing backup interface [ 178.001119][ T5816] bond0: (slave bond_slave_1): Releasing backup interface [ 178.081374][ T5816] team0: Port device team_slave_1 removed [ 178.095731][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.112192][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.134570][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.149819][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.203157][ T5818] team0: Mode changed to "loadbalance" [ 178.273325][ T5821] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 178.283710][ T5833] process 'syz.3.451' launched './file0' with NULL argv: empty string added [ 178.316435][ T5821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.349730][ T5826] bond1: (slave geneve2): making interface the new active one [ 178.371240][ T5826] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 178.415339][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 178.470603][ T5842] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.510672][ T5842] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.125046][ T49] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 179.213696][ T5867] fuse: Bad value for 'fd' [ 179.628603][ T5886] loop1: detected capacity change from 0 to 512 [ 179.691253][ T5886] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.811660][ T5886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 179.845522][ T5886] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.898444][ T5886] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 13: comm syz.1.472: lblock 0 mapped to illegal pblock 13 (length 1) [ 179.918696][ T5886] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 1 [ 179.928275][ T5886] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 179.938020][ T5886] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.472: Failed to acquire dquot type 0 [ 179.998421][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 180.090857][ T5902] overlayfs: failed to resolve './file0': -2 [ 180.188723][ T5906] user requested TSC rate below hardware speed [ 180.213277][ T5906] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=155648 (311296 ns) > initial count (4 ns). Using initial count to start timer. [ 180.713258][ T5925] overlayfs: missing 'lowerdir' [ 181.093456][ T5937] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 181.141766][ T5937] netlink: 67 bytes leftover after parsing attributes in process `syz.0.489'. [ 181.202675][ T5937] device vlan0 entered promiscuous mode [ 181.277210][ T5937] team0: Port device vlan0 added [ 181.283045][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 181.302236][ T5942] netlink: 'syz.2.490': attribute type 4 has an invalid length. [ 181.341220][ T5942] netlink: 152 bytes leftover after parsing attributes in process `syz.2.490'. [ 181.374281][ T5944] fuse: Bad value for 'fd' [ 181.394153][ T5942] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 181.657025][ T27] audit: type=1326 audit(1790667506.591:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.493" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f295f59e159 code=0x0 [ 182.937807][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.956885][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.052843][ T6003] overlayfs: failed to clone upperpath [ 184.058821][ T4315] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.256814][ T4315] usb 3-1: config 0 has no interfaces? [ 184.263656][ T4315] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 184.298910][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.339398][ T4315] usb 3-1: config 0 descriptor?? [ 184.674338][ T6021] lo speed is unknown, defaulting to 1000 [ 184.694104][ T4315] usb 3-1: USB disconnect, device number 5 [ 185.376812][ T6024] loop1: detected capacity change from 0 to 32768 [ 185.564337][ T6024] XFS (loop1): Mounting V5 Filesystem [ 185.663899][ T6024] XFS (loop1): Ending clean mount [ 185.812750][ T6010] loop0: detected capacity change from 0 to 131072 [ 185.904626][ T6010] F2FS-fs (loop0): invalid crc value [ 185.982382][ T6010] F2FS-fs (loop0): Found nat_bits in checkpoint [ 186.025215][ T4273] XFS (loop1): Unmounting Filesystem [ 186.283220][ T6010] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 186.351553][ T6010] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 186.416999][ T27] audit: type=1800 audit(1790667511.351:93): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.518" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 186.765724][ T6074] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 186.881237][ T6074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.013329][ T6076] bond1: (slave geneve2): making interface the new active one [ 187.056516][ T6076] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 187.086339][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 187.456956][ T6084] kvm: pic: single mode not supported [ 187.457048][ T6084] kvm: pic: single mode not supported [ 187.482095][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.584610][ T6087] team0: Port device bond0 removed [ 187.599654][ T6087] bridge0: port 3(dummy0) entered disabled state [ 187.630850][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.654878][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.696083][ T6087] device bridge_slave_0 left promiscuous mode [ 187.714262][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.736736][ T6087] device bridge_slave_1 left promiscuous mode [ 187.756890][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.765357][ T6093] Mass Storage Function, version: 2009/09/11 [ 187.771386][ T6093] LUN: removable file: (no medium) [ 187.792551][ T6087] bond0: (slave bond_slave_0): Releasing backup interface [ 187.801840][ T27] audit: type=1800 audit(1790667512.731:94): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.544" name="file" dev="configfs" ino=41858 res=0 errno=0 [ 187.803600][ T6093] mass_storage.0/lun.0: file too small: file0 [ 187.850569][ T6087] bond0: (slave bond_slave_1): Releasing backup interface [ 187.909817][ T6087] team0: Port device team_slave_0 removed [ 187.953454][ T6087] team0: Port device team_slave_1 removed [ 187.971195][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.987995][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.013789][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.034839][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.110054][ T6088] team0: Mode changed to "loadbalance" [ 188.442100][ T6110] netlink: 'syz.0.550': attribute type 4 has an invalid length. [ 188.522589][ T6116] netlink: 'syz.0.550': attribute type 4 has an invalid length. [ 188.923011][ T6129] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 189.052868][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 189.071833][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 189.116306][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.125532][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.140097][ T6138] device bridge_slave_0 left promiscuous mode [ 189.148132][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.161136][ T6138] device bridge_slave_1 left promiscuous mode [ 189.169290][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.220206][ T6138] bond0: (slave bond_slave_0): Releasing backup interface [ 189.269190][ T6138] bond0: (slave bond_slave_1): Releasing backup interface [ 189.376576][ T6138] team0: Port device team_slave_0 removed [ 189.422459][ T6138] team0: Port device team_slave_1 removed [ 189.451330][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.473560][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.494633][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.503644][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.636643][ T6139] team0: Mode changed to "loadbalance" [ 189.717100][ T6156] block nbd1: shutting down sockets [ 190.843799][ T6176] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.934862][ T6180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.573'. [ 191.524151][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 191.524189][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 191.531062][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 191.536775][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 192.221288][ T6205] mmap: syz.3.582 (6205) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 192.950084][ T6240] loop0: detected capacity change from 0 to 256 [ 193.027318][ T6240] FAT-fs (loop0): Directory bread(block 64) failed [ 193.047570][ T6240] FAT-fs (loop0): Directory bread(block 65) failed [ 193.077335][ T6240] FAT-fs (loop0): Directory bread(block 66) failed [ 193.091845][ T6240] FAT-fs (loop0): Directory bread(block 67) failed [ 193.107668][ T6240] FAT-fs (loop0): Directory bread(block 68) failed [ 193.134463][ T6240] FAT-fs (loop0): Directory bread(block 69) failed [ 193.159972][ T6240] FAT-fs (loop0): Directory bread(block 70) failed [ 193.182109][ T6240] FAT-fs (loop0): Directory bread(block 71) failed [ 193.205527][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 193.212656][ T6240] FAT-fs (loop0): Directory bread(block 72) failed [ 193.226688][ T6240] FAT-fs (loop0): Directory bread(block 73) failed [ 193.239081][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.285959][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.342219][ T6244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.518047][ T6250] netlink: 'syz.1.599': attribute type 11 has an invalid length. [ 194.481997][ T6282] loop1: detected capacity change from 0 to 1024 [ 194.569327][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.575685][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.652450][ T6282] hfsplus: xattr searching failed [ 194.688277][ T6282] hfsplus: xattr searching failed [ 194.795352][ T11] hfsplus: bad catalog file entry [ 194.803192][ T11] hfsplus: b-tree write err: -5, ino 3 [ 194.928023][ T6296] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 195.206078][ T11] rpcbind: server 127.0.0.1 not responding, timed out [ 195.361857][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 195.460391][ T6309] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.469840][ T6309] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.478584][ T6309] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.487313][ T6309] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.539655][ T6314] syz.2.626 uses obsolete (PF_INET,SOCK_PACKET) [ 195.598364][ T6313] block nbd1: shutting down sockets [ 195.690061][ T6316] fuse: Bad value for 'fd' [ 196.120660][ T27] audit: type=1326 audit(1790667777.044:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.3.629" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f894179e159 code=0x0 [ 196.578314][ T6346] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.914824][ T6361] netlink: 64 bytes leftover after parsing attributes in process `syz.4.641'. [ 199.777022][ T6459] loop0: detected capacity change from 0 to 512 [ 199.800041][ T6459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 199.829871][ T6459] System zones: 1-12 [ 199.884855][ T6459] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.672: corrupted inode contents [ 199.914706][ T6459] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 199.934127][ T6459] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.672: corrupted inode contents [ 199.950423][ T6459] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.672: mark_inode_dirty error [ 199.963704][ T6459] EXT4-fs (loop0): 1 orphan inode deleted [ 199.969614][ T6459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.020995][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 200.117510][ T6472] FAULT_INJECTION: forcing a failure. [ 200.117510][ T6472] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 200.132390][ T6472] CPU: 0 PID: 6472 Comm: syz.0.676 Not tainted syzkaller #0 [ 200.139695][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.149735][ T6472] Call Trace: [ 200.152997][ T6472] [ 200.155911][ T6472] dump_stack_lvl+0x188/0x24e [ 200.160581][ T6472] ? show_regs_print_info+0x12/0x12 [ 200.165762][ T6472] ? load_image+0x410/0x410 [ 200.170269][ T6472] ? __lock_acquire+0x7c40/0x7c40 [ 200.175286][ T6472] should_fail_ex+0x390/0x4c0 [ 200.179959][ T6472] _copy_from_user+0x2c/0x170 [ 200.184627][ T6472] memdup_user_nul+0x65/0xf0 [ 200.189212][ T6472] proc_simple_write+0xcb/0x130 [ 200.194057][ T6472] ? proc_remove+0x80/0x80 [ 200.198457][ T6472] proc_reg_write+0x1dd/0x2c0 [ 200.203121][ T6472] ? proc_reg_llseek+0x280/0x280 [ 200.208043][ T6472] vfs_write+0x2dc/0x9a0 [ 200.212285][ T6472] ? file_end_write+0x250/0x250 [ 200.217145][ T6472] ? __fget_files+0x28/0x460 [ 200.221720][ T6472] ? __fget_files+0x3fc/0x460 [ 200.226387][ T6472] ? __fdget_pos+0x2ae/0x360 [ 200.230961][ T6472] ? ksys_write+0x70/0x260 [ 200.235373][ T6472] ksys_write+0x14d/0x260 [ 200.239699][ T6472] ? __ia32_sys_read+0x80/0x80 [ 200.244473][ T6472] ? lockdep_hardirqs_on+0x94/0x140 [ 200.249697][ T6472] do_syscall_64+0x4c/0xa0 [ 200.254114][ T6472] ? clear_bhb_loop+0x60/0xb0 [ 200.258796][ T6472] ? clear_bhb_loop+0x60/0xb0 [ 200.263459][ T6472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.269341][ T6472] RIP: 0033:0x7f295f59e159 [ 200.273737][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.293334][ T6472] RSP: 002b:00007f2960539028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.301738][ T6472] RAX: ffffffffffffffda RBX: 00007f295f825fa0 RCX: 00007f295f59e159 [ 200.309696][ T6472] RDX: 0000000000000001 RSI: 0000200000000070 RDI: 0000000000000004 [ 200.317658][ T6472] RBP: 00007f295f63506b R08: 0000000000000000 R09: 0000000000000000 [ 200.325624][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.333576][ T6472] R13: 00007f295f826038 R14: 00007f295f825fa0 R15: 00007fff87931f28 [ 200.341543][ T6472] [ 200.375130][ T6474] block nbd1: shutting down sockets [ 200.424084][ T4320] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 200.482419][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 200.519285][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 200.614154][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 200.620814][ T4320] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.647393][ T4320] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 200.677589][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.707877][ T4320] usb 3-1: Product: syz [ 200.712067][ T4320] usb 3-1: Manufacturer: syz [ 200.737805][ T4320] usb 3-1: SerialNumber: syz [ 200.975698][ T6466] FAULT_INJECTION: forcing a failure. [ 200.975698][ T6466] name failslab, interval 1, probability 0, space 0, times 0 [ 200.988824][ T6466] CPU: 1 PID: 6466 Comm: syz.2.674 Not tainted syzkaller #0 [ 200.996136][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.006202][ T6466] Call Trace: [ 201.009501][ T6466] [ 201.012444][ T6466] dump_stack_lvl+0x188/0x24e [ 201.017139][ T6466] ? __sys_setsockopt+0x2bf/0x3d0 [ 201.022177][ T6466] ? do_syscall_64+0x4c/0xa0 [ 201.026787][ T6466] ? show_regs_print_info+0x12/0x12 [ 201.032003][ T6466] ? load_image+0x410/0x410 [ 201.036544][ T6466] should_fail_ex+0x390/0x4c0 [ 201.041251][ T6466] should_failslab+0x5/0x20 [ 201.045783][ T6466] slab_pre_alloc_hook+0x59/0x300 [ 201.050834][ T6466] ? ip_mc_add_src+0x850/0xee0 [ 201.055631][ T6466] __kmem_cache_alloc_node+0x4f/0x270 [ 201.061022][ T6466] ? ip_mc_add_src+0x850/0xee0 [ 201.065811][ T6466] kmalloc_trace+0x26/0xe0 [ 201.070250][ T6466] ip_mc_add_src+0x850/0xee0 [ 201.074883][ T6466] ip_mc_msfilter+0x536/0xa50 [ 201.079578][ T6466] ? _copy_from_user+0x10b/0x170 [ 201.084542][ T6466] do_ip_setsockopt+0x26b8/0x2f00 [ 201.089589][ T6466] ? ip_sock_set_pktinfo+0x60/0x60 [ 201.094714][ T6466] ? aa_sk_perm+0x81f/0x950 [ 201.099238][ T6466] ? aa_af_perm+0x340/0x340 [ 201.103763][ T6466] ? __fget_files+0x3fc/0x460 [ 201.108467][ T6466] ? aa_sock_opt_perm+0x74/0x100 [ 201.113432][ T6466] ip_setsockopt+0x5d/0x100 [ 201.117951][ T6466] ? sock_common_recvmsg+0x190/0x190 [ 201.123259][ T6466] __sys_setsockopt+0x2bf/0x3d0 [ 201.128216][ T6466] __x64_sys_setsockopt+0xb1/0xc0 [ 201.133261][ T6466] do_syscall_64+0x4c/0xa0 [ 201.137697][ T6466] ? clear_bhb_loop+0x60/0xb0 [ 201.142393][ T6466] ? clear_bhb_loop+0x60/0xb0 [ 201.147092][ T6466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.153003][ T6466] RIP: 0033:0x7fa98979e159 [ 201.157436][ T6466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.177051][ T6466] RSP: 002b:00007fa98a726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 201.185479][ T6466] RAX: ffffffffffffffda RBX: 00007fa989a25fa0 RCX: 00007fa98979e159 [ 201.193467][ T6466] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000004 [ 201.201447][ T6466] RBP: 00007fa98983506b R08: 0000000000000057 R09: 0000000000000000 [ 201.209434][ T6466] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 201.217421][ T6466] R13: 00007fa989a26038 R14: 00007fa989a25fa0 R15: 00007ffe48889858 [ 201.225420][ T6466] [ 201.422743][ T4320] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 201.452845][ T4320] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 201.522084][ T4320] usb 3-1: USB disconnect, device number 6 [ 201.877547][ T6518] loop1: detected capacity change from 0 to 512 [ 201.904774][ T6518] EXT4-fs: Ignoring removed orlov option [ 201.911833][ T6518] EXT4-fs: Ignoring removed orlov option [ 201.964130][ T6518] EXT4-fs (loop1): 1 truncate cleaned up [ 201.977783][ T6518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 202.141636][ T6518] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory [ 202.191839][ T6518] EXT4-fs (loop1): Remounting filesystem read-only [ 202.213651][ T6518] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #13: comm syz.1.695: mark_inode_dirty error [ 202.249160][ T6518] EXT4-fs (loop1): Remounting filesystem read-only [ 202.274305][ T6518] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory [ 202.317906][ T6518] EXT4-fs (loop1): Remounting filesystem read-only [ 202.329751][ T6518] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #13: comm syz.1.695: mark_inode_dirty error [ 202.350198][ T6518] EXT4-fs (loop1): Remounting filesystem read-only [ 202.358223][ T6518] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768304430 [ 202.379952][ T6518] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768304430 [ 202.406887][ T6518] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory [ 202.422046][ T6518] EXT4-fs (loop1): Remounting filesystem read-only [ 202.428890][ T6518] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #13: comm syz.1.695: mark_inode_dirty error [ 202.452245][ T6518] EXT4-fs (loop1): Remounting filesystem read-only [ 202.467555][ T6518] EXT4-fs error (device loop1): ext4_free_branches:1043: inode #13: block 234881024: comm syz.1.695: Read failure [ 202.536028][ T6518] EXT4-fs (loop1): Remounting filesystem read-only [ 202.542679][ T6518] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory [ 202.563828][ T6518] EXT4-fs (loop1): Remounting filesystem read-only [ 202.572321][ T6518] EXT4-fs error (device loop1): ext4_truncate:4325: inode #13: comm syz.1.695: mark_inode_dirty error [ 202.595271][ T6518] EXT4-fs (loop1): Remounting filesystem read-only [ 203.264051][ T26] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 203.462715][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.484043][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.492943][ T26] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.544040][ T26] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 203.553115][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.593529][ T26] cdc_acm 3-1:1.0: skipping garbage [ 205.285302][ T26] usb 3-1: USB disconnect, device number 7 [ 206.790258][ T6633] loop2: detected capacity change from 0 to 256 [ 207.870750][ T6655] ip_tables: iptables: counters copy to user failed while replacing table [ 210.145046][ T6709] overlayfs: failed to clone upperpath [ 210.968984][ T6732] netlink: 76 bytes leftover after parsing attributes in process `syz.4.768'. [ 212.774106][ T4321] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 212.979216][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.005356][ T4321] usb 2-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 214.129493][ T4321] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.145010][ T4321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 214.154134][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.180690][ T4321] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 214.424253][ T6804] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3435868635 (6871737270 ns) > initial count (1022727236 ns). Using initial count to start timer. [ 214.573941][ T4838] usb 2-1: USB disconnect, device number 3 [ 214.879737][ T6823] loop2: detected capacity change from 0 to 512 [ 214.960619][ T6823] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 214.983438][ T6823] ext4 filesystem being mounted at /138/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.199366][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 215.401255][ T27] audit: type=1800 audit(1790667796.324:96): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.797" name=976D9023D56482CD284A63DA539706D7 dev="sda1" ino=2048 res=0 errno=0 [ 215.402005][ T6841] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 596667799 (only 8 groups) [ 217.625700][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.643684][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.654312][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.664070][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.672254][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.681137][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.028688][ T6874] loop2: detected capacity change from 0 to 32768 [ 219.102152][ T6874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.809 (6874) [ 219.336028][ T6874] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.398597][ T4507] udevd[4507]: incorrect btrfs checksum on /dev/loop2 [ 219.452887][ T6874] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 219.528219][ T6874] BTRFS error (device loop2): superblock checksum mismatch [ 219.555186][ T6892] lo speed is unknown, defaulting to 1000 [ 219.650797][ T6874] BTRFS error (device loop2): open_ctree failed: -22 [ 219.765257][ T4277] Bluetooth: hci5: command 0x0409 tx timeout [ 219.879450][ T4357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.298679][ T4357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.665468][ T4357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.890965][ T4357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.243616][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.831'. [ 221.420678][ T6892] chnl_net:caif_netlink_parms(): no params data found [ 221.844220][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 222.756648][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.770570][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.810373][ T6892] device bridge_slave_0 entered promiscuous mode [ 222.921039][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.934012][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.960282][ T6892] device bridge_slave_1 entered promiscuous mode [ 223.327321][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.840'. [ 223.359157][ T6990] team0: No ports can be present during mode change [ 223.463844][ T6892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.505181][ T6892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.604295][ C1] net_ratelimit: 44 callbacks suppressed [ 223.924184][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 224.038360][ T6892] team0: Port device team_slave_0 added [ 224.091803][ T6892] team0: Port device team_slave_1 added [ 224.522612][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.543826][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.610633][ T6892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.813080][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.825296][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.916743][ T6892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.335995][ T6892] device hsr_slave_0 entered promiscuous mode [ 225.384662][ T6892] device hsr_slave_1 entered promiscuous mode [ 225.476218][ T6892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.483817][ T6892] Cannot create hsr debugfs directory [ 225.791852][ T4357] device hsr_slave_0 left promiscuous mode [ 225.869205][ T4357] device hsr_slave_1 left promiscuous mode [ 225.941951][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.956419][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.004140][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 226.014503][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.053648][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.089432][ T4357] device bridge_slave_1 left promiscuous mode [ 226.119395][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.178715][ T4357] device bridge_slave_0 left promiscuous mode [ 226.192793][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.306769][ T4357] device veth1_macvtap left promiscuous mode [ 226.320097][ T4357] device veth0_macvtap left promiscuous mode [ 226.334593][ T4357] device veth1_vlan left promiscuous mode [ 227.251225][ T4357] team0 (unregistering): Port device vlan0 removed [ 227.469279][ T7092] loop1: detected capacity change from 0 to 1024 [ 227.495832][ T7092] EXT4-fs: quotafile must be on filesystem root [ 228.095881][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 228.185266][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 228.271515][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.358961][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.805069][ T4357] bond0 (unregistering): Released all slaves [ 228.964033][ C1] net_ratelimit: 77 callbacks suppressed [ 229.956703][ T6892] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.015911][ T6892] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.146567][ T6892] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.229650][ T6892] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.672478][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.987849][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.042331][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.093618][ T6892] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.172739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.224974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.257830][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.264948][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.349569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.397661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.456385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.495565][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.502672][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.545664][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.592526][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.622801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.666646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.695681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.754319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.806528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.920267][ T7185] binder: BINDER_SET_CONTEXT_MGR already set [ 231.943293][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.958193][ T7185] binder: 7184:7185 ioctl 4018620d 2000000002c0 returned -16 [ 231.991483][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.047099][ T6892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.101921][ T6892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.141942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.170558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.340180][ T7161] loop1: detected capacity change from 0 to 32768 [ 232.426643][ T7196] overlayfs: failed to clone upperpath [ 232.484837][ T7161] XFS (loop1): Mounting V5 Filesystem [ 232.632714][ T7161] XFS (loop1): Ending clean mount [ 232.671686][ T7161] XFS (loop1): Quotacheck needed: Please wait. [ 232.816413][ T7161] XFS (loop1): Quotacheck: Done. [ 233.222983][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.267051][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.284871][ T7233] overlayfs: failed to clone upperpath [ 233.330108][ T6892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.345293][ T4273] XFS (loop1): Unmounting Filesystem [ 234.164070][ C1] net_ratelimit: 67 callbacks suppressed [ 235.035701][ T7265] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 235.469102][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.489488][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.583908][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.669761][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.700555][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.749941][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.927141][ T6892] device veth0_vlan entered promiscuous mode [ 236.015893][ T6892] device veth1_vlan entered promiscuous mode [ 236.097576][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.110809][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 236.125128][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.140297][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.151934][ T6892] device veth0_macvtap entered promiscuous mode [ 236.171171][ T6892] device veth1_macvtap entered promiscuous mode [ 236.911962][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.012108][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.068991][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.110668][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.152301][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.214692][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.237903][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.291223][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.332217][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.370341][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.393499][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.418446][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.450725][ T6892] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.495696][ T6892] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.513856][ T6892] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.541866][ T6892] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.894182][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.902042][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.929860][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.027118][ T4439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.044847][ T4439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.134248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.240996][ T7296] loop1: detected capacity change from 0 to 32768 [ 238.331056][ T7320] device syzkaller0 entered promiscuous mode [ 238.388695][ T7320] tipc: Started in network mode [ 238.403103][ T7296] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 238.403103][ T7296] [ 238.427226][ T7320] tipc: Node identity 362949039cb3, cluster identity 4711 [ 238.452445][ T7320] tipc: Enabled bearer , priority 0 [ 238.468644][ T7296] ERROR: (device loop1): remounting filesystem as read-only [ 238.486587][ T7319] tipc: Resetting bearer [ 238.598964][ T7327] loop5: detected capacity change from 0 to 256 [ 238.642062][ T7319] tipc: Disabling bearer [ 239.111896][ T7344] block nbd2: shutting down sockets [ 239.364034][ C0] net_ratelimit: 84 callbacks suppressed [ 239.529875][ T7352] loop2: detected capacity change from 0 to 1024 [ 239.728845][ T7352] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.785798][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564e2800: rx timeout, send abort [ 239.797131][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880564e2800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 240.312669][ T7355] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.325544][ T7355] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.337885][ T7355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.352369][ T7355] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 240.358925][ T7355] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 240.373378][ T7355] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 241.684150][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.008529][ T7423] device syzkaller0 entered promiscuous mode [ 242.404140][ T49] Bluetooth: hci5: command 0x0c1a tx timeout [ 242.404354][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.416169][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.805563][ T7418] loop1: detected capacity change from 0 to 32768 [ 242.907103][ T7418] XFS (loop1): Mounting V5 Filesystem [ 243.040297][ T7418] XFS (loop1): Ending clean mount [ 243.072002][ T7418] XFS (loop1): Quotacheck needed: Please wait. [ 243.222315][ T7418] XFS (loop1): Quotacheck: Done. [ 244.484160][ C1] net_ratelimit: 99 callbacks suppressed [ 244.490612][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 246.310915][ T4273] XFS (loop1): Unmounting Filesystem [ 246.370324][ T7498] device syzkaller0 entered promiscuous mode [ 247.076617][ T7509] loop5: detected capacity change from 0 to 1024 [ 247.109500][ T7513] loop2: detected capacity change from 0 to 256 [ 247.328364][ T7509] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 247.337244][ T7509] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.634530][ T4457] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 247.836303][ T4457] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 247.851414][ T4457] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 11776, setting to 1024 [ 247.874281][ T4457] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 247.925758][ T4457] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 247.950125][ T4457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.968947][ T4457] pl2303 6-1:1.0: required endpoints missing [ 247.996153][ T4457] pl2303 6-1:1.1: pl2303 converter detected [ 248.011082][ T4457] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 248.652543][ T7509] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.959: lblock 0 mapped to illegal pblock 0 (length 6) [ 248.750467][ T7509] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.959: bg 0: block 112: padding at end of block bitmap is not set [ 248.797471][ T7509] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 4: comm syz.5.959: lblock 4 mapped to illegal pblock 4 (length 2) [ 248.846601][ T7509] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 248.867638][ T7509] EXT4-fs (loop5): This should not happen!! Data will be lost [ 248.867638][ T7509] [ 249.424697][ T4457] usb 6-1: USB disconnect, device number 2 [ 249.487319][ T4457] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 249.489098][ T4457] pl2303 6-1:1.1: device disconnected [ 249.529054][ C0] net_ratelimit: 54 callbacks suppressed [ 249.535952][ T4524] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 249.540591][ T4524] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 249.540617][ T4524] EXT4-fs (loop5): This should not happen!! Data will be lost [ 249.540617][ T4524] [ 249.545429][ T6892] EXT4-fs (loop5): unmounting filesystem. [ 249.716333][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.823024][ T27] audit: type=1800 audit(1790667830.744:97): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.975" name="file" dev="configfs" ino=50340 res=0 errno=0 [ 250.532362][ T7612] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 250.852047][ T7626] loop2: detected capacity change from 0 to 736 [ 250.985780][ T7630] loop1: detected capacity change from 0 to 8 [ 251.033143][ T7631] overlayfs: failed to resolve './bus': -2 [ 251.079785][ T7630] unable to read xattr id index table [ 251.912786][ T7641] FAULT_INJECTION: forcing a failure. [ 251.912786][ T7641] name failslab, interval 1, probability 0, space 0, times 0 [ 251.958755][ T7641] CPU: 0 PID: 7641 Comm: syz.2.991 Not tainted syzkaller #0 [ 251.966086][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.976152][ T7641] Call Trace: [ 251.979424][ T7641] [ 251.982358][ T7641] dump_stack_lvl+0x188/0x24e [ 251.987034][ T7641] ? show_regs_print_info+0x12/0x12 [ 251.992225][ T7641] ? load_image+0x410/0x410 [ 251.996726][ T7641] ? __might_sleep+0xd0/0xd0 [ 252.001310][ T7641] ? __lock_acquire+0x7c40/0x7c40 [ 252.006342][ T7641] should_fail_ex+0x390/0x4c0 [ 252.011020][ T7641] should_failslab+0x5/0x20 [ 252.015514][ T7641] slab_pre_alloc_hook+0x59/0x300 [ 252.020535][ T7641] kmem_cache_alloc_lru+0x49/0x2e0 [ 252.025641][ T7641] ? sock_alloc_inode+0x24/0xc0 [ 252.030490][ T7641] sock_alloc_inode+0x24/0xc0 [ 252.035159][ T7641] ? sockfs_init_fs_context+0xa0/0xa0 [ 252.040524][ T7641] new_inode_pseudo+0x5f/0x1c0 [ 252.045292][ T7641] __sock_create+0x129/0x940 [ 252.049877][ T7641] ? memset+0x1e/0x40 [ 252.053856][ T7641] udp_sock_create4+0xc2/0x480 [ 252.058615][ T7641] ? free_zapped_rcu+0x1f0/0x1f0 [ 252.063550][ T7641] ? erspan_exit_batch_net+0x20/0x20 [ 252.068842][ T7641] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 252.074733][ T7641] ? rcu_is_watching+0x11/0xa0 [ 252.079497][ T7641] rxrpc_lookup_local+0xe00/0x1600 [ 252.084613][ T7641] ? rxrpc_process_local_events+0xa40/0xa40 [ 252.090501][ T7641] ? lockdep_hardirqs_on+0x94/0x140 [ 252.095695][ T7641] ? _local_bh_enable+0xa0/0xa0 [ 252.100542][ T7641] rxrpc_sendmsg+0x3e7/0x890 [ 252.105129][ T7641] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 252.110442][ T7641] ? rxrpc_getsockopt+0x150/0x150 [ 252.115462][ T7641] ____sys_sendmsg+0x5ed/0x9a0 [ 252.120218][ T7641] ? __might_fault+0xa6/0x120 [ 252.124978][ T7641] ? __sys_sendmsg_sock+0x30/0x30 [ 252.129999][ T7641] ? __import_iovec+0x306/0x510 [ 252.134855][ T7641] ? import_iovec+0x6f/0xa0 [ 252.139356][ T7641] ___sys_sendmsg+0x2a2/0x360 [ 252.144034][ T7641] ? __sys_sendmsg+0x2a0/0x2a0 [ 252.148822][ T7641] __se_sys_sendmsg+0x1c3/0x2b0 [ 252.153667][ T7641] ? __x64_sys_sendmsg+0x80/0x80 [ 252.158606][ T7641] ? lockdep_hardirqs_on+0x94/0x140 [ 252.163799][ T7641] do_syscall_64+0x4c/0xa0 [ 252.168206][ T7641] ? clear_bhb_loop+0x60/0xb0 [ 252.172875][ T7641] ? clear_bhb_loop+0x60/0xb0 [ 252.177541][ T7641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.183437][ T7641] RIP: 0033:0x7fa98979e159 [ 252.187844][ T7641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.207440][ T7641] RSP: 002b:00007fa98a726028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.215847][ T7641] RAX: ffffffffffffffda RBX: 00007fa989a25fa0 RCX: 00007fa98979e159 [ 252.223809][ T7641] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 252.231772][ T7641] RBP: 00007fa98983506b R08: 0000000000000000 R09: 0000000000000000 [ 252.239732][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.247694][ T7641] R13: 00007fa989a26038 R14: 00007fa989a25fa0 R15: 00007ffe48889858 [ 252.255670][ T7641] [ 252.258748][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.749640][ T7668] loop5: detected capacity change from 0 to 512 [ 252.850438][ T7668] ext4: Unknown parameter '' [ 253.043574][ T7682] device syzkaller0 left promiscuous mode [ 253.243256][ T7694] FAULT_INJECTION: forcing a failure. [ 253.243256][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 253.305636][ T7694] CPU: 1 PID: 7694 Comm: syz.5.1001 Not tainted syzkaller #0 [ 253.313059][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.323127][ T7694] Call Trace: [ 253.326437][ T7694] [ 253.329381][ T7694] dump_stack_lvl+0x188/0x24e [ 253.334090][ T7694] ? show_regs_print_info+0x12/0x12 [ 253.339310][ T7694] ? load_image+0x410/0x410 [ 253.343860][ T7694] ? __might_sleep+0xd0/0xd0 [ 253.348467][ T7694] ? __lock_acquire+0x7c40/0x7c40 [ 253.353520][ T7694] should_fail_ex+0x390/0x4c0 [ 253.358226][ T7694] should_failslab+0x5/0x20 [ 253.362746][ T7694] slab_pre_alloc_hook+0x59/0x300 [ 253.367791][ T7694] ? iter_file_splice_write+0x1a0/0xcf0 [ 253.373361][ T7694] __kmem_cache_alloc_node+0x4f/0x270 [ 253.378762][ T7694] ? iter_file_splice_write+0x1a0/0xcf0 [ 253.384329][ T7694] __kmalloc+0xa3/0x240 [ 253.388514][ T7694] iter_file_splice_write+0x1a0/0xcf0 [ 253.393910][ T7694] ? __vfs_getxattr+0x3b2/0x3e0 [ 253.398802][ T7694] ? splice_from_pipe+0x180/0x180 [ 253.403858][ T7694] ? rcu_read_lock_any_held+0xb0/0x130 [ 253.409338][ T7694] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 253.414647][ T7694] ? memset+0x1e/0x40 [ 253.418635][ T7694] ? ovl_copyattr+0x3b7/0x4c0 [ 253.423319][ T7694] ovl_splice_write+0x3d4/0x650 [ 253.428167][ T7694] ? ovl_fsync+0x1f0/0x1f0 [ 253.432581][ T7694] ? ovl_fsync+0x1f0/0x1f0 [ 253.436990][ T7694] direct_splice_actor+0xe1/0x130 [ 253.442019][ T7694] splice_direct_to_actor+0x4b8/0xbd0 [ 253.447405][ T7694] ? direct_file_splice_eof+0xa0/0xa0 [ 253.452775][ T7694] ? pipe_to_sendpage+0x320/0x320 [ 253.457794][ T7694] ? common_file_perm+0x171/0x1c0 [ 253.462820][ T7694] ? fsnotify_perm+0x5a/0x550 [ 253.467480][ T7694] ? security_file_permission+0x75/0xa0 [ 253.473425][ T7694] do_splice_direct+0x1ce/0x2f0 [ 253.478295][ T7694] ? splice_direct_to_actor+0xbd0/0xbd0 [ 253.478326][ T7694] ? rcu_read_lock_any_held+0xb0/0x130 [ 253.478348][ T7694] ? do_splice_direct+0x2f0/0x2f0 [ 253.478374][ T7694] ? common_file_perm+0x171/0x1c0 [ 253.499377][ T7694] do_sendfile+0x51b/0xe20 [ 253.503800][ T7694] ? __ia32_sys_get_robust_list+0x100/0x100 [ 253.509688][ T7694] ? do_pwritev+0x3a0/0x3a0 [ 253.514181][ T7694] ? __might_fault+0xa6/0x120 [ 253.518855][ T7694] ? __might_fault+0xc2/0x120 [ 253.523526][ T7694] ? __might_fault+0xa6/0x120 [ 253.528198][ T7694] __se_sys_sendfile64+0xdc/0x1a0 [ 253.533213][ T7694] ? lock_chain_count+0x20/0x20 [ 253.538065][ T7694] ? __x64_sys_sendfile64+0xa0/0xa0 [ 253.543255][ T7694] ? lockdep_hardirqs_on+0x94/0x140 [ 253.548450][ T7694] do_syscall_64+0x4c/0xa0 [ 253.552856][ T7694] ? clear_bhb_loop+0x60/0xb0 [ 253.557527][ T7694] ? clear_bhb_loop+0x60/0xb0 [ 253.562195][ T7694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.568083][ T7694] RIP: 0033:0x7faf3019e159 [ 253.572492][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.592087][ T7694] RSP: 002b:00007faf30fa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 253.600491][ T7694] RAX: ffffffffffffffda RBX: 00007faf30425fa0 RCX: 00007faf3019e159 [ 253.608451][ T7694] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 253.616413][ T7694] RBP: 00007faf3023506b R08: 0000000000000000 R09: 0000000000000000 [ 253.624375][ T7694] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 253.632333][ T7694] R13: 00007faf30426038 R14: 00007faf30425fa0 R15: 00007ffc5e0872c8 [ 253.640309][ T7694] [ 254.447960][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 254.625526][ T7718] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.634410][ T7718] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.643145][ T7718] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.652008][ T7718] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.475455][ T4357] net_ratelimit: 44 callbacks suppressed [ 256.006886][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.013226][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.031556][ T7733] FAULT_INJECTION: forcing a failure. [ 256.031556][ T7733] name failslab, interval 1, probability 0, space 0, times 0 [ 256.244272][ T7733] CPU: 0 PID: 7733 Comm: syz.1.1008 Not tainted syzkaller #0 [ 256.251698][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.261766][ T7733] Call Trace: [ 256.265051][ T7733] [ 256.267985][ T7733] dump_stack_lvl+0x188/0x24e [ 256.272676][ T7733] ? show_regs_print_info+0x12/0x12 [ 256.277881][ T7733] ? load_image+0x410/0x410 [ 256.282402][ T7733] ? __might_sleep+0xd0/0xd0 [ 256.287000][ T7733] ? __lock_acquire+0x7c40/0x7c40 [ 256.292036][ T7733] ? memset+0x1e/0x40 [ 256.296026][ T7733] should_fail_ex+0x390/0x4c0 [ 256.300719][ T7733] should_failslab+0x5/0x20 [ 256.305227][ T7733] slab_pre_alloc_hook+0x59/0x300 [ 256.310263][ T7733] kmem_cache_alloc+0x56/0x2f0 [ 256.315035][ T7733] ? security_inode_alloc+0x30/0x110 [ 256.320334][ T7733] security_inode_alloc+0x30/0x110 [ 256.325461][ T7733] inode_init_always+0x910/0xc90 [ 256.330411][ T7733] new_inode_pseudo+0x91/0x1c0 [ 256.335197][ T7733] __sock_create+0x129/0x940 [ 256.339804][ T7733] ? memset+0x1e/0x40 [ 256.343799][ T7733] udp_sock_create4+0xc2/0x480 [ 256.348578][ T7733] ? free_zapped_rcu+0x1f0/0x1f0 [ 256.353533][ T7733] ? erspan_exit_batch_net+0x20/0x20 [ 256.358828][ T7733] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 256.364739][ T7733] ? rcu_is_watching+0x11/0xa0 [ 256.369521][ T7733] rxrpc_lookup_local+0xe00/0x1600 [ 256.374659][ T7733] ? rxrpc_process_local_events+0xa40/0xa40 [ 256.380569][ T7733] ? lockdep_hardirqs_on+0x94/0x140 [ 256.385785][ T7733] ? _local_bh_enable+0xa0/0xa0 [ 256.390653][ T7733] rxrpc_sendmsg+0x3e7/0x890 [ 256.395253][ T7733] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 256.400550][ T7733] ? rxrpc_getsockopt+0x150/0x150 [ 256.405585][ T7733] ____sys_sendmsg+0x5ed/0x9a0 [ 256.410357][ T7733] ? __might_fault+0xa6/0x120 [ 256.415055][ T7733] ? __sys_sendmsg_sock+0x30/0x30 [ 256.420087][ T7733] ? __import_iovec+0x306/0x510 [ 256.424960][ T7733] ? import_iovec+0x6f/0xa0 [ 256.429484][ T7733] ___sys_sendmsg+0x2a2/0x360 [ 256.434181][ T7733] ? __sys_sendmsg+0x2a0/0x2a0 [ 256.439000][ T7733] __se_sys_sendmsg+0x1c3/0x2b0 [ 256.443862][ T7733] ? __x64_sys_sendmsg+0x80/0x80 [ 256.448818][ T7733] ? lockdep_hardirqs_on+0x94/0x140 [ 256.454034][ T7733] do_syscall_64+0x4c/0xa0 [ 256.458459][ T7733] ? clear_bhb_loop+0x60/0xb0 [ 256.463144][ T7733] ? clear_bhb_loop+0x60/0xb0 [ 256.467836][ T7733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.473743][ T7733] RIP: 0033:0x7fb9abd9e159 [ 256.478167][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.497786][ T7733] RSP: 002b:00007fb9accf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.506213][ T7733] RAX: ffffffffffffffda RBX: 00007fb9ac025fa0 RCX: 00007fb9abd9e159 [ 256.514193][ T7733] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 256.522178][ T7733] RBP: 00007fb9abe3506b R08: 0000000000000000 R09: 0000000000000000 [ 256.530158][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.538140][ T7733] R13: 00007fb9ac026038 R14: 00007fb9ac025fa0 R15: 00007ffd3fb40da8 [ 256.546142][ T7733] [ 257.214112][ T4839] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 257.674136][ T4839] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 257.712365][ T4839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.776835][ T4839] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 257.849066][ T4839] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.892559][ T4839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.934923][ T4839] usb 2-1: config 0 descriptor?? [ 257.966953][ T4839] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 259.587640][ T7812] fuse: root generation should be zero [ 260.233582][ T4315] usb 2-1: USB disconnect, device number 4 [ 260.484034][ C0] net_ratelimit: 45 callbacks suppressed [ 265.604475][ T4324] net_ratelimit: 36 callbacks suppressed [ 265.729609][ T7909] loop1: detected capacity change from 0 to 128 [ 265.748248][ T7909] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 265.780051][ T27] audit: type=1800 audit(1790667846.704:98): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1063" name="bus" dev="loop1" ino=1048619 res=0 errno=0 [ 266.144601][ T4442] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 266.415987][ T7923] loop5: detected capacity change from 0 to 736 [ 268.757036][ T7941] FAULT_INJECTION: forcing a failure. [ 268.757036][ T7941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.836223][ T7941] CPU: 1 PID: 7941 Comm: syz.5.1071 Not tainted syzkaller #0 [ 268.843649][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.853700][ T7941] Call Trace: [ 268.856971][ T7941] [ 268.859893][ T7941] dump_stack_lvl+0x188/0x24e [ 268.864568][ T7941] ? show_regs_print_info+0x12/0x12 [ 268.869757][ T7941] ? load_image+0x410/0x410 [ 268.874255][ T7941] ? __lock_acquire+0x7c40/0x7c40 [ 268.879279][ T7941] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 268.885257][ T7941] ? __lock_acquire+0x7c40/0x7c40 [ 268.890277][ T7941] should_fail_ex+0x390/0x4c0 [ 268.894951][ T7941] _copy_from_user+0x2c/0x170 [ 268.899621][ T7941] __ia32_sys_rt_sigreturn+0x21c/0x750 [ 268.905076][ T7941] ? load_gs_index+0x130/0x130 [ 268.909848][ T7941] ? lock_chain_count+0x20/0x20 [ 268.914699][ T7941] ? lockdep_hardirqs_on+0x94/0x140 [ 268.919894][ T7941] do_syscall_64+0x4c/0xa0 [ 268.924301][ T7941] ? clear_bhb_loop+0x60/0xb0 [ 268.928972][ T7941] ? clear_bhb_loop+0x60/0xb0 [ 268.933638][ T7941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.939526][ T7941] RIP: 0033:0x7faf3013f4d9 [ 268.943932][ T7941] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 268.963532][ T7941] RSP: 002b:00007faf30fa4a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 268.971938][ T7941] RAX: ffffffffffffffda RBX: 00007faf30425fa0 RCX: 00007faf3013f4d9 [ 268.979905][ T7941] RDX: 00007faf30fa4a80 RSI: 00007faf30fa4bb0 RDI: 0000000000000021 [ 268.987864][ T7941] RBP: 00007faf3023506b R08: 0000000000039000 R09: 0000000000000000 [ 268.995823][ T7941] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 269.003782][ T7941] R13: 00007faf30426038 R14: 00007faf30425fa0 R15: 00007ffc5e0872c8 [ 269.011755][ T7941] [ 269.405973][ T7965] loop2: detected capacity change from 0 to 512 [ 269.469089][ T7965] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.549468][ T7965] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 269.652089][ T7965] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 269.679278][ T7965] EXT4-fs (loop2): orphan cleanup on readonly fs [ 269.768596][ T7965] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1074: Invalid block bitmap block 0 in block_group 0 [ 269.884303][ T7965] Quota error (device loop2): write_blk: dquota write failed [ 269.972653][ T7965] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 270.138227][ T7965] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1074: Failed to acquire dquot type 1 [ 270.403295][ T7965] EXT4-fs (loop2): 1 orphan inode deleted [ 270.411093][ T4353] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 270.467838][ T4353] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 270.724607][ T4439] net_ratelimit: 37 callbacks suppressed [ 270.737666][ T7965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 270.911321][ T7987] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1079'. [ 271.500979][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 273.941832][ T8014] block nbd1: shutting down sockets [ 275.764036][ C1] net_ratelimit: 30 callbacks suppressed [ 276.612531][ T8036] usb 1-1: USB disconnect, device number 2 [ 279.066256][ T8036] hub 1-0:1.0: USB hub found [ 279.131522][ T8036] hub 1-0:1.0: 1 port detected [ 279.390279][ T4316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 279.432144][ T8084] loop1: detected capacity change from 0 to 512 [ 279.539394][ T8084] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 279.558227][ T8084] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.596715][ T4316] usb 1-1: Dual-Role OTG device on HNP port [ 279.613048][ T4316] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 279.710947][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.770510][ T4316] gspca_main: spca501-2.14.0 probing 0000:0000 [ 279.830992][ T4316] gspca_spca501: reg write: error -32 [ 279.837517][ T4316] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 279.921001][ T4316] spca501: probe of 1-1:1.0 failed with error -22 [ 280.179258][ T8119] block nbd5: shutting down sockets [ 280.441891][ T8127] block nbd5: shutting down sockets [ 280.676994][ T8132] device syzkaller0 entered promiscuous mode [ 280.715975][ T8139] tipc: Enabling of bearer rejected, failed to enable media [ 280.806453][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 281.364061][ C1] net_ratelimit: 48 callbacks suppressed [ 281.874108][ T4315] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 282.074165][ T4315] usb 3-1: Using ep0 maxpacket: 16 [ 282.114196][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 282.149083][ T4315] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 282.179585][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.208136][ T4315] usb 3-1: Product: syz [ 282.212366][ T4315] usb 3-1: Manufacturer: syz [ 282.238648][ T4315] usb 3-1: SerialNumber: syz [ 282.348164][ T4315] usb 3-1: config 0 descriptor?? [ 282.408294][ T8171] block nbd5: shutting down sockets [ 282.602561][ T4315] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 282.738204][ T4315] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 283.224730][ T4315] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 284.448043][ T4315] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 284.457673][ T4315] em28xx 3-1:0.0: board has no eeprom [ 284.604139][ T4315] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 284.736385][ T4315] em28xx 3-1:0.0: dvb set to bulk mode. [ 284.743951][ T4316] em28xx 3-1:0.0: Binding DVB extension [ 284.973000][ T4315] usb 3-1: USB disconnect, device number 8 [ 284.985757][ T8194] FAULT_INJECTION: forcing a failure. [ 284.985757][ T8194] name failslab, interval 1, probability 0, space 0, times 0 [ 285.009736][ T8194] CPU: 1 PID: 8194 Comm: syz.5.1142 Not tainted syzkaller #0 [ 285.017142][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.027211][ T8194] Call Trace: [ 285.030475][ T8194] [ 285.030486][ T8194] dump_stack_lvl+0x188/0x24e [ 285.038083][ T8194] ? show_regs_print_info+0x12/0x12 [ 285.043283][ T8194] ? load_image+0x410/0x410 [ 285.047784][ T8194] ? __might_sleep+0xd0/0xd0 [ 285.052368][ T8194] ? __lock_acquire+0x7c40/0x7c40 [ 285.057396][ T8194] ? get_random_u32+0x16b/0x930 [ 285.062241][ T8194] should_fail_ex+0x390/0x4c0 [ 285.066919][ T8194] should_failslab+0x5/0x20 [ 285.071410][ T8194] slab_pre_alloc_hook+0x59/0x300 [ 285.076431][ T8194] ? kvmalloc_node+0x6c/0x180 [ 285.081107][ T8194] __kmem_cache_alloc_node+0x4f/0x270 [ 285.086475][ T8194] ? kvmalloc_node+0x6c/0x180 [ 285.091145][ T8194] __kmalloc_node+0xa2/0x240 [ 285.095734][ T8194] kvmalloc_node+0x6c/0x180 [ 285.100234][ T8194] sbitmap_init_node+0x443/0x670 [ 285.105176][ T8194] sbitmap_queue_init_node+0x3a/0x650 [ 285.110545][ T8194] kyber_init_sched+0x1d1/0x610 [ 285.115395][ T8194] blk_mq_init_sched+0x422/0x840 [ 285.120333][ T8194] ? blk_mq_sched_insert_requests+0x890/0x890 [ 285.126406][ T8194] elevator_switch+0x26c/0x860 [ 285.131172][ T8194] elv_iosched_store+0x3c3/0x460 [ 285.136104][ T8194] ? elevator_switch+0x860/0x860 [ 285.141041][ T8194] queue_attr_store+0x8a/0xc0 [ 285.145711][ T8194] ? sysfs_kf_read+0x350/0x350 [ 285.150469][ T8194] kernfs_fop_write_iter+0x3a0/0x520 [ 285.155751][ T8194] vfs_write+0x482/0x9a0 [ 285.159995][ T8194] ? file_end_write+0x250/0x250 [ 285.164845][ T8194] ? __fget_files+0x3fc/0x460 [ 285.169527][ T8194] ? __fdget_pos+0x2ae/0x360 [ 285.174110][ T8194] ? ksys_write+0x70/0x260 [ 285.178522][ T8194] ksys_write+0x14d/0x260 [ 285.182838][ T8194] ? __ia32_sys_read+0x80/0x80 [ 285.187604][ T8194] ? lockdep_hardirqs_on+0x94/0x140 [ 285.192809][ T8194] do_syscall_64+0x4c/0xa0 [ 285.197214][ T8194] ? clear_bhb_loop+0x60/0xb0 [ 285.201889][ T8194] ? clear_bhb_loop+0x60/0xb0 [ 285.206554][ T8194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.212442][ T8194] RIP: 0033:0x7faf3019e159 [ 285.216855][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.236452][ T8194] RSP: 002b:00007faf30fa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.244860][ T8194] RAX: ffffffffffffffda RBX: 00007faf30425fa0 RCX: 00007faf3019e159 [ 285.252820][ T8194] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 285.260784][ T8194] RBP: 00007faf3023506b R08: 0000000000000000 R09: 0000000000000000 [ 285.268748][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.276710][ T8194] R13: 00007faf30426038 R14: 00007faf30425fa0 R15: 00007ffc5e0872c8 [ 285.284683][ T8194] [ 285.299937][ T4315] em28xx 3-1:0.0: Disconnecting em28xx [ 285.540996][ T4316] em28xx 3-1:0.0: Registering input extension [ 285.553901][ T4315] em28xx 3-1:0.0: Closing input extension [ 285.628081][ T4315] em28xx 3-1:0.0: Freeing device [ 286.397329][ C0] net_ratelimit: 35 callbacks suppressed [ 286.622763][ T8217] loop5: detected capacity change from 0 to 128 [ 286.737663][ T8222] loop1: detected capacity change from 0 to 128 [ 286.764844][ T8217] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 286.828136][ T8217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.527536][ T27] audit: type=1326 audit(1790667868.454:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.5.1137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf3019e159 code=0x0 [ 287.789636][ T4273] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 287.792657][ T8237] tipc: Cannot configure node identity twice [ 287.866731][ T4273] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 289.816671][ T8261] usb 1-1: USB disconnect, device number 3 [ 290.001130][ T8261] hub 1-0:1.0: USB hub found [ 290.006626][ T8261] hub 1-0:1.0: 1 port detected [ 290.184461][ T4948] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 290.375253][ T4948] usb 1-1: Dual-Role OTG device on HNP port [ 290.384900][ T4948] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 290.393956][ T4948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.425646][ T4948] gspca_main: spca501-2.14.0 probing 0000:0000 [ 290.442009][ T4948] gspca_spca501: reg write: error -32 [ 290.457594][ T4948] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 290.474568][ T4948] spca501: probe of 1-1:1.0 failed with error -22 [ 290.559771][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.571849][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.592521][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.602641][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.611417][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 290.619183][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.783257][ T8297] lo speed is unknown, defaulting to 1000 [ 291.220603][ T8309] loop2: detected capacity change from 0 to 1024 [ 291.238195][ T8309] EXT4-fs: quotafile must be on filesystem root [ 291.671333][ T8297] chnl_net:caif_netlink_parms(): no params data found [ 291.844401][ C1] net_ratelimit: 38 callbacks suppressed [ 292.645525][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 292.972603][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.017536][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.049917][ T8297] device bridge_slave_0 entered promiscuous mode [ 293.117322][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.142596][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.242652][ T8297] device bridge_slave_1 entered promiscuous mode [ 293.465441][ T8297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.481614][ T8297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.519737][ T8348] loop2: detected capacity change from 0 to 512 [ 293.565055][ T8348] EXT4-fs: Ignoring removed i_version option [ 293.576168][ T8348] EXT4-fs: Ignoring removed bh option [ 293.660803][ T8348] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1173: inode #13: comm syz.2.1173: iget: illegal inode # [ 295.755816][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 295.794155][ T8348] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1173: couldn't read orphan inode 13 (err -117) [ 295.864666][ T8348] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 295.892952][ T8297] team0: Port device team_slave_0 added [ 295.933297][ T8297] team0: Port device team_slave_1 added [ 296.009289][ T8348] EXT4-fs error (device loop2): ext4_resize_begin:62: comm syz.2.1173: resize_inode disabled but reserved GDT blocks non-zero [ 296.085430][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.120196][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.198301][ T8297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.211367][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 296.263176][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.322451][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.415912][ T8297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.692225][ T8297] device hsr_slave_0 entered promiscuous mode [ 296.738925][ T8297] device hsr_slave_1 entered promiscuous mode [ 296.964862][ C0] net_ratelimit: 40 callbacks suppressed [ 297.764183][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 298.222814][ T8297] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.650145][ T8297] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 298.897132][ T8297] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 299.143791][ T8297] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 299.534540][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.589234][ T8297] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.609668][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.625696][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.642056][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.703832][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.743612][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.750855][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.820025][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.844190][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 299.867877][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.910653][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.975041][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.982222][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.042898][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.076849][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.109958][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.232909][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.271358][ T8397] netlink: 'syz.3.1177': attribute type 11 has an invalid length. [ 300.411754][ T8297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.422183][ T8297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.471432][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.486714][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.496220][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.512124][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.520994][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.529971][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.538654][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.561883][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.617231][ T27] audit: type=1326 audit(1790667882.544:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.4.1194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a6a99e159 code=0x0 [ 301.898863][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.931955][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.950548][ T8297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.110139][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1195'. [ 302.126801][ T4353] net_ratelimit: 32 callbacks suppressed [ 303.245859][ T8439] tipc: Enabling of bearer rejected, failed to enable media [ 303.330898][ T8441] loop2: detected capacity change from 0 to 1024 [ 303.400251][ T8441] EXT4-fs: Ignoring removed orlov option [ 303.449762][ T8441] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 303.559437][ T8441] loop2: detected capacity change from 0 to 512 [ 303.643489][ T8441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 303.664604][ T8441] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.792535][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 305.944213][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.040258][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.120666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.144817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.176147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.208146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.246366][ T8297] device veth0_vlan entered promiscuous mode [ 306.272097][ T4277] Bluetooth: Frame is too long (len 16, expected len 4) [ 306.302050][ T8297] device veth1_vlan entered promiscuous mode [ 306.689615][ T8297] device veth0_macvtap entered promiscuous mode [ 306.927835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.105384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.182503][ C1] net_ratelimit: 23 callbacks suppressed [ 307.192773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.307560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.359377][ T8297] device veth1_macvtap entered promiscuous mode [ 308.392008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.447240][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.236160][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.255316][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.286460][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.322939][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.352536][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 309.373500][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.414790][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.441434][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.473812][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.504060][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.542993][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.593857][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.629194][ T8297] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.658995][ T8297] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.679227][ T8297] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.697846][ T8297] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.892426][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.924724][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.913537][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 310.990638][ T8517] device syzkaller0 entered promiscuous mode [ 311.196495][ T8517] tipc: Started in network mode [ 311.201510][ T8517] tipc: Node identity 5a1e231a61b1, cluster identity 4711 [ 311.252146][ T8517] tipc: Enabled bearer , priority 0 [ 311.300586][ T8516] tipc: Resetting bearer [ 311.465778][ T8516] tipc: Disabling bearer [ 311.839787][ T4524] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.071324][ T4524] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.100379][ T4265] udevd[4265]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 312.146061][ T8532] block nbd5: shutting down sockets [ 312.200276][ T4524] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.244054][ C1] net_ratelimit: 72 callbacks suppressed [ 312.581840][ T4524] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.684221][ T4321] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 314.535365][ T4321] usb 6-1: not running at top speed; connect to a high speed hub [ 314.566833][ T4321] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.615465][ T4321] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 314.644214][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.739915][ T4321] usb 6-1: Found UVC 1.00 device (046d:0825) [ 314.764440][ T4321] usb 6-1: No streaming interface found for terminal 2. [ 314.931819][ T4321] usb 6-1: USB disconnect, device number 3 [ 315.036803][ T8561] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 317.130495][ T4265] udevd[4265]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 317.196190][ T8574] block nbd2: shutting down sockets [ 317.446205][ C0] net_ratelimit: 45 callbacks suppressed [ 317.464570][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.470884][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.612648][ T8616] loop2: detected capacity change from 0 to 512 [ 319.624881][ T4524] device hsr_slave_0 left promiscuous mode [ 319.646814][ T4524] device hsr_slave_1 left promiscuous mode [ 319.719527][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 319.747701][ T8616] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 319.770132][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.795238][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.823704][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.839368][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.851198][ T8616] EXT4-fs (loop2): orphan file too big: 67108874 [ 319.883049][ T8616] EXT4-fs (loop2): mount failed [ 319.888651][ T4524] device bridge_slave_1 left promiscuous mode [ 319.901594][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.943248][ T4524] device bridge_slave_0 left promiscuous mode [ 319.952486][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 319.972692][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.027910][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 320.130204][ T4524] device veth1_macvtap left promiscuous mode [ 320.137687][ T4524] device veth0_macvtap left promiscuous mode [ 320.143876][ T4524] device veth1_vlan left promiscuous mode [ 320.184237][ T4524] device veth0_vlan left promiscuous mode [ 321.084481][ T8637] loop2: detected capacity change from 0 to 16 [ 321.127523][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 321.223964][ T8637] erofs: (device loop2): mounted with root inode @ nid 36. [ 322.106520][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 322.180406][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 322.530578][ T6187] net_ratelimit: 47 callbacks suppressed [ 324.288899][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 325.592048][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 327.696544][ C1] net_ratelimit: 30 callbacks suppressed [ 327.837913][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.125934][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.555318][ T4524] bond0 (unregistering): Released all slaves [ 329.901748][ T8656] device syzkaller0 entered promiscuous mode [ 329.917404][ T8713] device syzkaller0 entered promiscuous mode [ 330.037776][ T4277] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 332.816092][ C0] net_ratelimit: 38 callbacks suppressed [ 333.387434][ T4948] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 333.585386][ T4948] usb 3-1: not running at top speed; connect to a high speed hub [ 333.595321][ T4948] usb 3-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 333.608161][ T4948] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 333.618455][ T4948] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 333.627016][ T4948] usb 3-1: Product: syz [ 333.631263][ T4948] usb 3-1: Manufacturer: syz [ 333.656741][ T4948] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 333.663542][ T4948] usb 3-1: No streaming interface found for terminal 2. [ 333.875427][ T4278] usb 3-1: USB disconnect, device number 9 [ 334.087578][ T4277] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 334.096424][ T4277] Bluetooth: hci3: Injecting HCI hardware error event [ 334.108685][ T4289] Bluetooth: hci3: hardware error 0x00 [ 336.264855][ T4289] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 337.925209][ C1] net_ratelimit: 43 callbacks suppressed [ 340.005088][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 342.964058][ C0] net_ratelimit: 34 callbacks suppressed [ 347.584338][ T8940] tmpfs: Unknown parameter 'quota' [ 348.005089][ T4357] net_ratelimit: 36 callbacks suppressed [ 352.543183][ T8988] tipc: Enabled bearer , priority 0 [ 352.556242][ T8988] device syzkaller0 entered promiscuous mode [ 352.594657][ T8988] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 352.611361][ T8988] tipc: Resetting bearer [ 352.639249][ T8987] tipc: Resetting bearer [ 352.690488][ T8987] tipc: Disabling bearer [ 353.911772][ C1] net_ratelimit: 24 callbacks suppressed [ 354.098493][ T9003] loop5: detected capacity change from 0 to 512 [ 354.203302][ T9009] udevd[9009]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 354.333244][ T9009] udevd[9009]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 354.377234][ T9009] udevd[9009]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 355.387861][ T9023] input: syz0 as /devices/virtual/input/input11 [ 359.044160][ C1] net_ratelimit: 33 callbacks suppressed [ 364.095131][ T4439] net_ratelimit: 53 callbacks suppressed [ 365.648403][ T9128] vivid-000: kernel_thread() failed [ 369.124051][ C0] net_ratelimit: 28 callbacks suppressed [ 373.260687][ T9246] device syzkaller0 entered promiscuous mode [ 374.137610][ C1] net_ratelimit: 72 callbacks suppressed [ 378.369724][ T9312] cgroup: fork rejected by pids controller in /syz5 [ 378.894204][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.900561][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.194522][ T9371] net_ratelimit: 32 callbacks suppressed [ 384.644824][ T66] net_ratelimit: 103 callbacks suppressed [ 389.764248][ T11] net_ratelimit: 36 callbacks suppressed [ 393.696314][ T9455] Bluetooth: MGMT ver 1.22 [ 394.536472][ T9462] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4284] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9462] [ 394.884707][ T66] net_ratelimit: 34 callbacks suppressed SYZFAIL: open(/dev/rfkill) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=1148 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 395.659974][ T9457] loop2: detected capacity change from 0 to 32768 [ 396.002216][ T9457] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1367 (9457) [ 396.404152][ T9457] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 396.446039][ T9468] udevd[9468]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 396.484175][ T9457] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 396.493688][ T9457] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 396.574330][ T9457] BTRFS info (device loop2): use zstd compression, level 3 [ 396.581594][ T9457] BTRFS info (device loop2): using free space tree [ 396.670698][ T9457] BTRFS error (device loop2): open_ctree failed: -12 [ 397.241461][ T4616] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.252850][ T4616] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.478719][ T4616] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.489514][ T4616] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.619938][ T4616] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.631937][ T4616] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.698922][ T9457] EXT4-fs (sda1): pa ffff88807186d460: logic 0, phys. 139264, len 2048 [ 397.708484][ T9457] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:4894: group 4, free 2047, pa_free 1525 [ 397.750435][ T4616] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.761589][ T4616] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.534557][ T4616] device hsr_slave_0 left promiscuous mode [ 399.545147][ T4616] device hsr_slave_1 left promiscuous mode [ 399.610688][ T4616] device veth1_macvtap left promiscuous mode [ 399.624087][ T4616] device veth0_macvtap left promiscuous mode [ 399.630816][ T4616] device veth1_vlan left promiscuous mode [ 399.642424][ T4616] device veth0_vlan left promiscuous mode [ 400.004232][ C0] net_ratelimit: 34 callbacks suppressed [ 401.311499][ T3601] EXT4-fs error (device sda1): mb_free_blocks:1839: group 4, block 139835:freeing already freed block (bit 8763); block bitmap corrupt. [ 401.624829][ T4616] bond0 (unregistering): Released all slaves [ 402.333068][ T4616] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.344125][ T4616] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.410129][ T4616] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.420732][ T4616] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.468887][ T4616] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.479459][ T4616] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.563889][ T4616] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.577409][ T4616] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.793320][ T4616] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.882235][ T4616] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.950595][ T4616] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.042549][ T4616] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.274448][ T4616] tipc: Left network mode [ 405.064530][ T4324] net_ratelimit: 19 callbacks suppressed