last executing test programs: 8m19.168718102s ago: executing program 0 (id=324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x41, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 8m19.059325177s ago: executing program 0 (id=326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x64) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) write$rfkill(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008045, 0x0, 0x0) 8m17.854770815s ago: executing program 0 (id=332): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0xcc, @loopback, 0x8}]}, &(0x7f0000000300)=0x10) 8m16.761748097s ago: executing program 0 (id=335): syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r2 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 8m16.063472431s ago: executing program 0 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt\x00'}) 8m15.03666814s ago: executing program 0 (id=343): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x11, &(0x7f00000005c0)=ANY=[], 0x0) 7m58.772978141s ago: executing program 32 (id=343): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x11, &(0x7f00000005c0)=ANY=[], 0x0) 2m20.054329489s ago: executing program 2 (id=1142): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0x0, 0x4}}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000102240)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000103440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00001048c0)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r7}], 0xd4, "d65dd32b44df19"}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2m19.584129661s ago: executing program 2 (id=1145): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000180)={0xffffffffffffffff, 0x2}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) fcntl$dupfd(r4, 0x406, r4) 2m18.592262087s ago: executing program 2 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x4, 0x4}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) semop(0x0, 0x0, 0x0) semget(0x3, 0x4, 0x39c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 2m17.954205107s ago: executing program 2 (id=1147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x386c, 0x0, 0x0, &(0x7f0000000000), 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0xfc92) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) 2m16.928947746s ago: executing program 2 (id=1148): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000680)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000b00)=[{0x0}], 0x1, 0x60, 0x2) 2m8.898939843s ago: executing program 4 (id=1161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000900), 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x8000000000008d) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x10001, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, r0) 2m7.854089663s ago: executing program 4 (id=1164): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x3f00) 2m6.491823567s ago: executing program 4 (id=1165): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000200)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2m2.276261186s ago: executing program 2 (id=1175): socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x60600) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x199, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedreceive(r2, &(0x7f0000001140)=""/170, 0xaa, 0x5, 0x0) 2m0.69070738s ago: executing program 4 (id=1178): socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) 2m0.012769342s ago: executing program 4 (id=1182): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x3f00) 1m57.532271109s ago: executing program 4 (id=1185): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000680)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000b00)=[{0x0}], 0x1, 0x60, 0x2) 1m47.152957667s ago: executing program 33 (id=1175): socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x60600) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x199, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedreceive(r2, &(0x7f0000001140)=""/170, 0xaa, 0x5, 0x0) 1m42.049786307s ago: executing program 34 (id=1185): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000680)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000b00)=[{0x0}], 0x1, 0x60, 0x2) 16.844427697s ago: executing program 3 (id=1408): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4c) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget$private(0x0, 0x5, 0x30) semctl$IPC_INFO(r3, 0x3, 0x3, &(0x7f0000000040)=""/215) r4 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) sendmmsg(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x1a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 12.906991082s ago: executing program 5 (id=1420): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x130) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2200480, &(0x7f0000000080)=ANY=[], 0xfe, 0x161, &(0x7f0000000380)="$eJzs0c1qGmEUxvH/zLyOQhVbakG6aIUuaisFP2h3pTil0i6s0NJNV4JOm4CSECFxFyXbLLwAF/nYhkCuQKOLkKCbuMsVZOM6uxjmHfN9C+fHLGaec95zhplvn8dJg1tfl+rLK26j4VYTv0rFwu/zXi/v5TY0D+7VIQT087CAoq9g2oYqMIxAkJprViw9c5r3nsF5Av8Wa65JPXq9z4kp2goy+OeTb2DwQveZPM7cHAF97qUCJ+pnaWC2DW9tcJ75WcZvw9IXE+/+bL7zuQHNbmp/7+Tn6PjHh/df3M1sofMuHLdS67CDY4SOhv8n1rx9PCp6bz/OZbOfcumMycdT28tbHdT38Cr8NUB580z0PJv4K/UHNoxLPaDZnR4aEWCwdVGqB2++dWvNSoDxulspxwO75dhTEyupvMoMuPtXNF0hFHiYCyGEEEIIIYQQQgghhBBCCCGEEFwFAAD//4rET8k=") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) setrlimit(0x8, &(0x7f0000000100)={0x3, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000006b00)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) 12.891497953s ago: executing program 6 (id=1421): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x71, 0x1, {{0x10, 0x3, 0x2}, 0x40}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(0x0, 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x6, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x1, 0x0) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002d80)=""/220, 0xdc}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x44004) 12.764837419s ago: executing program 7 (id=1422): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00050008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r2, 0x534, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4050) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000500dfd74d0589230000"], 0x104}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdae"], 0x0, 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r6, 0x215eb000) socket(0x40000000015, 0x5, 0x0) 11.822803374s ago: executing program 6 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0}, 0x0) 10.243369478s ago: executing program 7 (id=1426): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0xa, 0x4) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzsz7GNwkAUBND5d/ZZch/XB0VAQhWU4HroAYlCqMEZGdIiC5yQIwjeS2Z3gpF++KiftN+0wyUt/dqda5tkk2RKqta6pUsy/NcSGTMs0WV+WZyT07h+ptr/PZ/9Yy9d6pZrWlLZHd9/IQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8v3sAAAD//w1yD3I=") syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x14c04, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@dmask={'dmask', 0x3d, 0x4}}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@dmask={'dmask', 0x3d, 0xb0}}, {}, {@namecase}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x1, 0x1530, &(0x7f0000001340)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r2, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_io_uring_setup(0x606b, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000100)='cifs.spnego\x00', 0x0, 0x0, 0x0, r1) syz_emit_ethernet(0x6a, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000140)="5a1d1fa16a38a6ee116e6d84428426b7b99c0ace31", 0x15}], 0x1}, 0x4c871) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYRESHEX=0xee00, @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c6e6f646f74732c646f74732c646f74732c636f6465706167653d3836332c646973636172642c74696d655f6f66667365743d3078303030303030303030303030303131312c6e6f646f74732c646f74732c6d61736b3d4d41595f57524954452c6d61736b3d5e4d41595f524541442c657569643ef883eb28a293025193a6fefb745d68f12d67af948c8077e8efb39e14d4478e56efcecf8909524f89", @ANYBLOB='dots,fmask=00000000000000000000157,uid=', @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYBLOB=',\x00', @ANYRES32=r3], 0x1, 0x1f6, &(0x7f0000000340)="$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") 10.022681258s ago: executing program 3 (id=1428): socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000240)={0x7, 0xfffff60b, 0xfffffff9, 0x9, 0x2}) 9.731240642s ago: executing program 6 (id=1430): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000004c0)="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", 0x201, 0x90, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 9.410863017s ago: executing program 5 (id=1431): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00050008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r2, 0x534, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000500dfd74d0589230000"], 0x104}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r7 = syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r7, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x40000000015, 0x5, 0x0) 9.3566296s ago: executing program 6 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x1) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r4, r5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, 0x0, 0x0}, 0x94) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x40) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 8.771326707s ago: executing program 6 (id=1433): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$igmp(0x2, 0x3, 0x2) setreuid(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 8.749752488s ago: executing program 3 (id=1434): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x71, 0x1, {{0x10, 0x3, 0x2}, 0x40}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(0x0, 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x6, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x1, 0x0) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002d80)=""/220, 0xdc}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x44004) 8.024732132s ago: executing program 3 (id=1436): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00050008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r2, 0x534, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4050) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000500dfd74d0589230000"], 0x104}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdae"], 0x0, 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r6, 0x215eb000) socket(0x40000000015, 0x5, 0x0) 7.22720762s ago: executing program 7 (id=1438): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4c) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget$private(0x0, 0x5, 0x30) semctl$IPC_INFO(r3, 0x3, 0x3, &(0x7f0000000040)=""/215) r4 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) sendmmsg(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x1a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 6.464155866s ago: executing program 5 (id=1440): r0 = socket(0xf, 0x1, 0x0) epoll_create1(0x80000) close(r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1de) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 6.343489651s ago: executing program 3 (id=1441): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r4, r3, 0x0, 0x20fffe82) 4.879528271s ago: executing program 6 (id=1444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000900), 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x8000000000008d) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x10001, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, r0) 4.473614129s ago: executing program 1 (id=1445): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000240)={0x7, 0xfffff60b, 0xfffffff9, 0x9, 0x2}) 4.329334256s ago: executing program 7 (id=1446): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x71, 0x1, {{0x10, 0x3, 0x2}, 0x40}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(0x0, 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x6, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x2000000000006) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002d80)=""/220, 0xdc}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x44004) 3.553336573s ago: executing program 1 (id=1447): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x11, r0, r0, r0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, 0x0, 0x2002, 0x8) write(r4, &(0x7f0000000180)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, 0x0) getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)) 3.521125874s ago: executing program 7 (id=1448): openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), &(0x7f00000004c0)}) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x40047452, &(0x7f0000000380)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e00000020000"], 0x3c}}, 0x0) 3.204170819s ago: executing program 1 (id=1449): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) 2.866891595s ago: executing program 5 (id=1450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000900), 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x8000000000008d) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x10001, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, r0) 2.466929584s ago: executing program 7 (id=1451): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00050008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000500dfd74d0589230000"], 0x104}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdae"], 0x0, 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r6, 0x215eb000) socket(0x40000000015, 0x5, 0x0) 1.49792795s ago: executing program 1 (id=1452): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x34, 0x33, 0x32, 0x37, 0x66, 0x37, 0x36, 0x34, 0x65, 0x65, 0x65, 0x35, 0x31, 0x33, 0x34, 0x66]}, &(0x7f0000000600)={0x0, "838f86f674f3d4d3e58af5323869f6c2189e3be742dfcee3086c5f278d5969214260a6a57f984bfe9ea026ee4663fd5cb2b19bd97b8ec936d36a808dc26655f3", 0x27}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 1.451856631s ago: executing program 5 (id=1453): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0xc400941b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x30) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x40) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x4e23, 0x20003, 'wrr\x00', 0x9cac55234174523c, 0x40080005, 0x26}, 0x2c) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.297756629s ago: executing program 1 (id=1454): openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), &(0x7f00000004c0)}) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e00000020000"], 0x3c}}, 0x0) 1.167693915s ago: executing program 3 (id=1455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x6484, 0xd7b, 0x8000000, 0x1, 0x7, 0x5, 0x4, 0x3ff, 0x54c6cff3, 0xfd, 0x2002, 0x1, 0x0, 0x1, 0x6, 0x6a, 0x3, 0xc7c, 0x1, 0x40000003, 0xe25, 0xcaa5, 0x10000, 0x20001e57, 0x95, 0x2000e66, 0x3, 0x1, 0x10004086, 0x0, 0xfffffff8]}) 179.784521ms ago: executing program 5 (id=1456): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4c) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget$private(0x0, 0x5, 0x30) semctl$IPC_INFO(r3, 0x3, 0x3, &(0x7f0000000040)=""/215) r4 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) sendmmsg(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x1a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 0s ago: executing program 1 (id=1457): remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xc2741, 0x0) syz_emit_vhci(0x0, 0x14) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) kernel console output (not intermixed with test programs): attributes in process `syz.0.123'. [ 126.574598][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.021135][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 128.461378][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.424028][ T13] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 130.451370][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 130.460359][ T13] usb 1-1: can't read configurations, error -71 [ 130.596984][ T4232] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 130.617195][ T4232] usb 5-1: config 0 has no interface number 0 [ 130.637471][ T4232] usb 5-1: config 0 interface 12 has no altsetting 0 [ 130.871496][ T4232] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 130.900985][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.921263][ T4232] usb 5-1: Product: syz [ 130.925464][ T4232] usb 5-1: Manufacturer: syz [ 130.930089][ T4232] usb 5-1: SerialNumber: syz [ 130.955079][ T4232] usb 5-1: config 0 descriptor?? [ 131.291502][ T4232] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 131.379916][ T4232] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 131.413021][ T4232] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 131.432821][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 131.731589][ T4232] f81534: probe of 5-1:0.12 failed with error -71 [ 131.763138][ T4232] usb 5-1: USB disconnect, device number 2 [ 131.852905][ T4768] kAFS: No cell specified [ 132.285859][ T4773] loop4: detected capacity change from 0 to 128 [ 132.533693][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.536839][ T4773] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 132.540091][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.747738][ T4773] ; already mounted read-only [ 132.752753][ T4773] hpfs: filesystem error: improperly stopped [ 132.758759][ T4773] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 133.390935][ T4773] hpfs: You really don't want any checks? You are crazy... [ 133.421866][ T4773] hpfs: Code page index out of array [ 133.427393][ T4773] hpfs: code page support is disabled [ 133.503113][ T4773] hpfs: hpfs_map_4sectors(): unaligned read [ 133.521749][ T4773] hpfs: hpfs_map_4sectors(): unaligned read [ 133.668217][ T4773] hpfs: filesystem error: unable to find root dir [ 134.428336][ T4773] hpfs: hpfs_map_4sectors(): unaligned read [ 137.343284][ T4790] loop3: detected capacity change from 0 to 16 [ 137.412728][ T4790] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 137.521315][ T4235] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.861268][ T4802] Invalid ELF header magic: != ELF [ 144.599018][ T4838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.147'. [ 144.628596][ T4838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'. [ 148.767073][ T4858] loop3: detected capacity change from 0 to 131072 [ 148.861835][ T4858] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (512, 24) [ 148.869916][ T4858] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 148.879780][ T4858] F2FS-fs (loop3): Test dummy encryption mode enabled [ 148.895625][ T4858] F2FS-fs (loop3): invalid crc value [ 148.952196][ T4858] F2FS-fs (loop3): Found nat_bits in checkpoint [ 148.961421][ T4241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.993130][ T4858] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 149.008888][ T4858] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 149.022413][ T4858] F2FS-fs (loop3): Start checkpoint disabled! [ 149.050733][ T4858] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 149.057960][ T4858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 149.293294][ T4858] fscrypt (loop3, inode 4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 149.622526][ T4241] usb 2-1: Using ep0 maxpacket: 32 [ 149.881389][ T4241] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 149.892748][ T4241] usb 2-1: config 0 has no interface number 0 [ 149.898862][ T4241] usb 2-1: config 0 interface 12 has no altsetting 0 [ 150.034567][ T4887] FAULT_INJECTION: forcing a failure. [ 150.034567][ T4887] name failslab, interval 1, probability 0, space 0, times 1 [ 150.098554][ T4887] CPU: 0 PID: 4887 Comm: syz.4.171 Not tainted syzkaller #0 [ 150.105976][ T4887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.116047][ T4887] Call Trace: [ 150.119322][ T4887] [ 150.122250][ T4887] dump_stack_lvl+0x188/0x250 [ 150.126938][ T4887] ? show_regs_print_info+0x20/0x20 [ 150.132138][ T4887] ? load_image+0x410/0x410 [ 150.136636][ T4887] ? __might_sleep+0xf0/0xf0 [ 150.141220][ T4887] ? __lock_acquire+0x7b50/0x7b50 [ 150.146249][ T4887] should_fail+0x383/0x4b0 [ 150.150674][ T4887] should_failslab+0x5/0x20 [ 150.155167][ T4887] slab_pre_alloc_hook+0x51/0xc0 [ 150.160093][ T4887] __kmalloc_node+0x6d/0x3a0 [ 150.164680][ T4887] ? kvmalloc_node+0x84/0x130 [ 150.169352][ T4887] kvmalloc_node+0x84/0x130 [ 150.173845][ T4887] bpf_int_jit_compile+0x3df/0xc4d0 [ 150.179034][ T4887] ? bpf_convert_filter+0x5048/0x51e0 [ 150.184397][ T4887] ? kfree+0xef/0x2a0 [ 150.188372][ T4887] ? bpf_convert_filter+0x507b/0x51e0 [ 150.193739][ T4887] ? stack_trace_snprint+0xe0/0xe0 [ 150.198850][ T4887] ? emit_bpf_dispatcher+0x1050/0x1050 [ 150.204302][ T4887] ? sk_filter_release_rcu+0x110/0x110 [ 150.209772][ T4887] bpf_prog_select_runtime+0x46f/0x7b0 [ 150.215219][ T4887] ? bpf_prog_realloc+0x142/0x1c0 [ 150.220228][ T4887] bpf_prepare_filter+0x100e/0x11b0 [ 150.225423][ T4887] ? bpf_prog_create+0x1f0/0x1f0 [ 150.230349][ T4887] ? kmemdup+0x3d/0x50 [ 150.234410][ T4887] ? __get_filter+0x2db/0x400 [ 150.239086][ T4887] sk_attach_filter+0x20/0x140 [ 150.243880][ T4887] sock_setsockopt+0x18c7/0x2480 [ 150.248815][ T4887] ? __sock_set_mark+0x150/0x150 [ 150.253743][ T4887] ? __lock_acquire+0x7b50/0x7b50 [ 150.258763][ T4887] ? aa_sk_perm+0x7dc/0x910 [ 150.263265][ T4887] ? aa_af_perm+0x340/0x340 [ 150.267757][ T4887] ? __fget_files+0x402/0x470 [ 150.272436][ T4887] ? aa_sock_opt_perm+0x74/0x100 [ 150.277453][ T4887] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 150.282990][ T4887] ? security_socket_setsockopt+0x7a/0xa0 [ 150.288718][ T4887] __sys_setsockopt+0x2f6/0x3d0 [ 150.293587][ T4887] __x64_sys_setsockopt+0xb1/0xc0 [ 150.298620][ T4887] do_syscall_64+0x4c/0xa0 [ 150.303026][ T4887] ? clear_bhb_loop+0x30/0x80 [ 150.307709][ T4887] ? clear_bhb_loop+0x30/0x80 [ 150.312377][ T4887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.318270][ T4887] RIP: 0033:0x7f474653f159 [ 150.322674][ T4887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.342264][ T4887] RSP: 002b:00007f4744797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.350664][ T4887] RAX: ffffffffffffffda RBX: 00007f47467c6fa0 RCX: 00007f474653f159 [ 150.358622][ T4887] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 150.366585][ T4887] RBP: 00007f47465d603b R08: 0000000000000010 R09: 0000000000000000 [ 150.374550][ T4887] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.382508][ T4887] R13: 00007f47467c7038 R14: 00007f47467c6fa0 R15: 00007ffe69b56778 [ 150.390480][ T4887] [ 151.541313][ T4241] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 151.611226][ T4895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.172'. [ 151.622712][ T4895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.172'. [ 152.283020][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.291265][ T4241] usb 2-1: Product: syz [ 152.330146][ T4241] usb 2-1: config 0 descriptor?? [ 152.402487][ T4241] usb 2-1: can't set config #0, error -71 [ 153.011106][ T4241] usb 2-1: USB disconnect, device number 4 [ 163.773324][ T4964] loop3: detected capacity change from 0 to 16 [ 163.799511][ T4964] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 174.751943][ T5042] Invalid ELF header magic: != ELF [ 175.200515][ T5049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.212'. [ 175.211942][ T5049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.212'. [ 176.889768][ T5068] nvmet: adding nsid 1 to subsystem testsubsys [ 180.686312][ T5089] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 181.488701][ T5099] xt_hashlimit: size too large, truncated to 1048576 [ 184.348148][ T5117] process 'syz.0.232' launched '/dev/fd/7/./file1' with NULL argv: empty string added [ 187.220295][ T5130] loop3: detected capacity change from 0 to 512 [ 187.284057][ T5130] EXT4-fs (loop3): Ignoring removed nobh option [ 187.290434][ T5130] EXT4-fs (loop3): Ignoring removed orlov option [ 187.371296][ T5130] EXT4-fs (loop3): 1 truncate cleaned up [ 187.376967][ T5130] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 187.738253][ T5140] loop2: detected capacity change from 0 to 512 [ 187.832195][ T5141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.238'. [ 187.843550][ T5141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'. [ 188.009158][ T5140] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 188.307027][ T5140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.472702][ T5140] EXT4-fs (loop2): invalid inodes per group: 0 [ 188.472702][ T5140] [ 189.613495][ T5151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.889114][ T5140] netlink: 'syz.2.236': attribute type 4 has an invalid length. [ 190.413232][ T5162] loop1: detected capacity change from 0 to 40427 [ 190.454160][ T5162] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 190.462167][ T5162] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 190.612588][ T5162] F2FS-fs (loop1): Found nat_bits in checkpoint [ 190.660338][ T5162] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 190.667440][ T5162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.355972][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 191.482865][ T4231] Bluetooth: hci3: command 0x0406 tx timeout [ 192.224291][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 192.233334][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.242479][ T4231] Bluetooth: hci0: command 0x0406 tx timeout [ 192.521272][ T4231] Bluetooth: hci2: command 0x0406 tx timeout [ 192.595498][ T4186] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 192.595554][ T4186] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 192.613888][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.756529][ T4186] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 192.756550][ T4186] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 192.767606][ T4186] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 192.828250][ T4186] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 192.895905][ T4186] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 192.918510][ T5188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.250'. [ 192.938062][ T5188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.250'. [ 193.976161][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.982505][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.192737][ T5202] FAULT_INJECTION: forcing a failure. [ 195.192737][ T5202] name failslab, interval 1, probability 0, space 0, times 0 [ 195.205705][ T5202] CPU: 1 PID: 5202 Comm: syz.4.257 Not tainted syzkaller #0 [ 195.212982][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.223030][ T5202] Call Trace: [ 195.226298][ T5202] [ 195.229220][ T5202] dump_stack_lvl+0x188/0x250 [ 195.233906][ T5202] ? show_regs_print_info+0x20/0x20 [ 195.239101][ T5202] ? load_image+0x410/0x410 [ 195.243603][ T5202] ? __might_sleep+0xf0/0xf0 [ 195.248190][ T5202] ? __lock_acquire+0x7b50/0x7b50 [ 195.253226][ T5202] ? tomoyo_get_local_path+0x62a/0x780 [ 195.258688][ T5202] should_fail+0x383/0x4b0 [ 195.263103][ T5202] should_failslab+0x5/0x20 [ 195.267594][ T5202] slab_pre_alloc_hook+0x51/0xc0 [ 195.272523][ T5202] __kmalloc+0x6b/0x340 [ 195.276668][ T5202] ? tomoyo_encode+0x28a/0x550 [ 195.281438][ T5202] tomoyo_encode+0x28a/0x550 [ 195.286040][ T5202] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 195.291728][ T5202] tomoyo_check_open_permission+0x1eb/0x410 [ 195.297653][ T5202] ? tomoyo_check_path_number_acl+0x280/0x280 [ 195.303742][ T5202] ? __lock_acquire+0x7b50/0x7b50 [ 195.308763][ T5202] ? __rwlock_init+0x140/0x140 [ 195.313523][ T5202] ? free_zapped_rcu+0x1f0/0x1f0 [ 195.318592][ T5202] ? preempt_count_add+0x8d/0x190 [ 195.323630][ T5202] ? hook_file_open+0xf1/0x230 [ 195.328385][ T5202] ? tomoyo_file_open+0xe9/0x170 [ 195.333329][ T5202] security_file_open+0x5e/0xa0 [ 195.338172][ T5202] do_dentry_open+0x321/0xf90 [ 195.342865][ T5202] dentry_open+0xc6/0x120 [ 195.347190][ T5202] do_mq_open+0x653/0x750 [ 195.351520][ T5202] ? mq_put_mnt+0x40/0x40 [ 195.355866][ T5202] ? __context_tracking_exit+0x4c/0x80 [ 195.361340][ T5202] __x64_sys_mq_open+0x182/0x1e0 [ 195.366304][ T5202] ? proc_ipc_sem_dointvec+0x330/0x330 [ 195.371764][ T5202] ? lockdep_hardirqs_on+0x94/0x140 [ 195.376988][ T5202] do_syscall_64+0x4c/0xa0 [ 195.381442][ T5202] ? clear_bhb_loop+0x30/0x80 [ 195.386130][ T5202] ? clear_bhb_loop+0x30/0x80 [ 195.390799][ T5202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.396684][ T5202] RIP: 0033:0x7f474653f159 [ 195.401088][ T5202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.420692][ T5202] RSP: 002b:00007f4744797028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 195.429107][ T5202] RAX: ffffffffffffffda RBX: 00007f47467c6fa0 RCX: 00007f474653f159 [ 195.437073][ T5202] RDX: 0000000000000030 RSI: 00000000000008c2 RDI: 0000200000000000 [ 195.445036][ T5202] RBP: 00007f47465d603b R08: 0000000000000000 R09: 0000000000000000 [ 195.453026][ T5202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.460986][ T5202] R13: 00007f47467c7038 R14: 00007f47467c6fa0 R15: 00007ffe69b56778 [ 195.468960][ T5202] [ 195.472667][ T5202] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.167337][ T21] FS-Cache: Duplicate cookie detected [ 196.173160][ T21] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 196.180668][ T21] FS-Cache: O-cookie d=ffffffff8c747d80{AFS.cell} n=ffff88807c26e800 [ 196.188776][ T21] FS-Cache: O-key=[4] '73797a30' [ 196.193793][ T21] FS-Cache: N-cookie c=00000008 [p=00000006 fl=2 nc=0 na=1] [ 196.201081][ T21] FS-Cache: N-cookie d=ffffffff8c747d80{AFS.cell} n=ffff88805f5d8000 [ 196.209186][ T21] FS-Cache: N-key=[4] '73797a30' [ 196.323085][ T5218] nvmet: Invalid value '' for trsvcid [ 201.537189][ T5274] loop4: detected capacity change from 0 to 512 [ 201.596479][ T5274] EXT4-fs (loop4): Ignoring removed nobh option [ 201.674193][ T5274] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #3: comm syz.4.281: corrupted inode contents [ 201.799693][ T5281] kAFS: No cell specified [ 201.809321][ T5274] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #3: comm syz.4.281: mark_inode_dirty error [ 201.907572][ T5274] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #3: comm syz.4.281: corrupted inode contents [ 201.932135][ T5274] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.281: mark_inode_dirty error [ 202.058634][ T5274] Quota error (device loop4): write_blk: dquota write failed [ 202.123860][ T5274] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 202.204310][ T5274] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.281: Failed to acquire dquot type 0 [ 203.375760][ T5274] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.281: corrupted inode contents [ 203.862671][ T5274] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #16: comm syz.4.281: mark_inode_dirty error [ 203.876415][ T5274] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.281: corrupted inode contents [ 203.911498][ T5274] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.281: mark_inode_dirty error [ 203.961810][ T5274] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.281: corrupted inode contents [ 203.994449][ T5274] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 204.097034][ T5274] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.281: corrupted inode contents [ 204.140810][ T5274] EXT4-fs error (device loop4): ext4_truncate:4286: inode #16: comm syz.4.281: mark_inode_dirty error [ 204.202583][ T5274] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 204.376071][ T5274] EXT4-fs (loop4): 1 truncate cleaned up [ 204.481619][ T5274] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,nobh,,errors=continue. Quota mode: writeback. [ 204.841632][ T5274] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.277989][ T5305] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 205.309092][ T5306] Invalid ELF header magic: != ELF [ 205.468767][ T5308] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.477063][ T5308] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.383973][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 206.864596][ T5334] loop2: detected capacity change from 0 to 128 [ 207.763345][ T5353] Invalid ELF header magic: != ELF [ 209.253992][ T5366] loop0: detected capacity change from 0 to 64 [ 209.586975][ T26] audit: type=1800 audit(1789166230.112:11): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.307" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 211.573180][ T4295] Process accounting resumed [ 213.289727][ T5410] Invalid ELF header magic: != ELF [ 213.645256][ T5412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'. [ 213.797376][ T5412] netlink: 'syz.0.322': attribute type 7 has an invalid length. [ 213.805328][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 213.856513][ T5412] device bond0 entered promiscuous mode [ 213.894503][ T5412] device bond_slave_0 entered promiscuous mode [ 213.914917][ T5412] device bond_slave_1 entered promiscuous mode [ 213.952736][ T5412] device bridge0 entered promiscuous mode [ 213.979782][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 214.048595][ T26] audit: type=1800 audit(1789166234.572:12): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.323" name="addr_trtype" dev="configfs" ino=34763 res=0 errno=0 [ 214.070602][ T5417] nvmet_tcp: address family 255 not supported [ 214.170450][ T26] audit: type=1800 audit(1789166234.592:13): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.323" name="addr_trsvcid" dev="configfs" ino=34764 res=0 errno=0 [ 215.169828][ T5421] loop4: detected capacity change from 0 to 40427 [ 215.330212][ T5421] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 215.351204][ T5421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 215.899943][ T5421] F2FS-fs (loop4): Found nat_bits in checkpoint [ 216.891835][ T5421] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 216.898909][ T5421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 217.067978][ T5421] attempt to access beyond end of device [ 217.067978][ T5421] loop4: rw=2049, want=45104, limit=40427 [ 217.246465][ T4189] attempt to access beyond end of device [ 217.246465][ T4189] loop4: rw=2049, want=45112, limit=40427 [ 218.165055][ T5501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.342'. [ 218.266556][ T5506] bridge0: port 3(veth0) entered blocking state [ 218.291253][ T5506] bridge0: port 3(veth0) entered disabled state [ 218.298589][ T5506] device veth0 entered promiscuous mode [ 218.566666][ T5512] loop4: detected capacity change from 0 to 4096 [ 218.622018][ T5512] EXT4-fs (loop4): Test dummy encryption mode enabled [ 218.628835][ T5512] EXT4-fs (loop4): inline encryption not supported [ 218.686139][ T5512] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 218.766675][ T5512] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 218.784532][ T5512] System zones: 0-5 [ 218.838301][ T5512] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 219.258837][ T5514] loop2: detected capacity change from 0 to 32768 [ 219.286002][ T5512] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 219.813459][ T26] audit: type=1800 audit(1789166240.342:14): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.345" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 223.331358][ T5554] loop4: detected capacity change from 0 to 32768 [ 223.394986][ T5554] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.349 (5554) [ 223.404106][ T5584] loop2: detected capacity change from 0 to 256 [ 223.459101][ T5580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.506200][ T5584] FAT-fs (loop2): Unrecognized mount option "uid=" or missing value [ 223.531786][ T5554] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 223.558057][ T5554] BTRFS info (device loop4): force clearing of disk cache [ 223.566567][ T5554] BTRFS info (device loop4): setting nodatacow, compression disabled [ 223.600526][ T5554] BTRFS info (device loop4): enabling auto defrag [ 223.741088][ T5554] BTRFS info (device loop4): max_inline at 0 [ 223.761058][ T5554] BTRFS info (device loop4): enabling disk space caching [ 223.767292][ T5580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.806053][ T5554] BTRFS info (device loop4): disk space caching is enabled [ 223.838782][ T5554] BTRFS info (device loop4): has skinny extents [ 223.888004][ T5580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.014622][ T5554] BTRFS error (device loop4): open_ctree failed: -12 [ 224.233923][ T5580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.384549][ T5629] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 226.391433][ T5629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.400825][ T5629] vhci_hcd vhci_hcd.0: Device attached [ 226.412644][ T5630] vhci_hcd: connection closed [ 226.415549][ T4341] vhci_hcd: stop threads [ 226.537823][ T4341] vhci_hcd: release socket [ 226.613301][ T4341] vhci_hcd: disconnect device [ 226.702983][ T5580] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.718119][ T5580] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.735732][ T5580] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.751309][ T5580] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.834175][ T5637] loop1: detected capacity change from 0 to 512 [ 227.042415][ T5637] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 227.149860][ T5637] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.905544][ T5652] loop1: detected capacity change from 0 to 2048 [ 227.965666][ T5652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.332585][ T5661] kAFS: No cell specified [ 228.425679][ T5666] loop1: detected capacity change from 0 to 256 [ 228.478382][ T5666] exfat: Deprecated parameter 'namecase' [ 228.565489][ T5666] exfat: Unknown parameter 'keep_last_dots' [ 229.645928][ T5676] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 229.719703][ T5676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.370'. [ 232.182394][ T4299] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 232.480072][ T5700] Cannot find del_set index 4 as target [ 232.553675][ T5702] overlayfs: conflicting options: nfs_export=on,index=off [ 232.751340][ T4299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.211335][ T4299] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.241180][ T4299] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 233.250169][ T4299] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.726400][ T4299] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 234.756459][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.801379][ T4299] usb 2-1: can't set config #1, error -71 [ 234.831985][ T4299] usb 2-1: USB disconnect, device number 5 [ 235.221364][ T4299] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 235.491220][ T4299] usb 2-1: Using ep0 maxpacket: 8 [ 235.670654][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.817642][ T4299] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 235.837228][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.867234][ T4299] usb 2-1: Product: syz [ 235.876225][ T4299] usb 2-1: Manufacturer: syz [ 235.888857][ T4299] usb 2-1: SerialNumber: syz [ 235.916880][ T4299] usb 2-1: config 0 descriptor?? [ 235.942059][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.973666][ T4299] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 236.054080][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.159363][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.424067][ T5715] chnl_net:caif_netlink_parms(): no params data found [ 236.650989][ T5728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 236.731092][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.923021][ T5728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.093019][ T5715] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.124528][ T5715] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.169088][ T5715] device bridge_slave_0 entered promiscuous mode [ 237.183100][ T5715] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.241306][ T5715] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.261321][ T5715] device bridge_slave_1 entered promiscuous mode [ 237.326822][ T5715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.365088][ T5715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.497416][ T5715] team0: Port device team_slave_0 added [ 237.538177][ T5715] team0: Port device team_slave_1 added [ 237.571324][ T5618] Bluetooth: hci0: command 0x0409 tx timeout [ 237.618766][ T5715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.646193][ T5715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.703730][ T5715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.759257][ T5715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.772910][ T5715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.851304][ T5715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.834814][ T4235] usb 2-1: USB disconnect, device number 6 [ 238.884583][ T5759] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 238.997367][ T5759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.025855][ T5768] syz.1.390 uses obsolete (PF_INET,SOCK_PACKET) [ 239.054727][ T5715] device hsr_slave_0 entered promiscuous mode [ 239.081996][ T5715] device hsr_slave_1 entered promiscuous mode [ 239.139431][ T5715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.171016][ T5715] Cannot create hsr debugfs directory [ 239.231418][ T5760] bond1: (slave geneve2): making interface the new active one [ 239.243625][ T5760] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 239.347217][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 239.705857][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 240.516925][ T9] device bond0 left promiscuous mode [ 240.546144][ T9] device bond_slave_0 left promiscuous mode [ 240.575897][ T9] device bond_slave_1 left promiscuous mode [ 240.629950][ T9] device bridge0 left promiscuous mode [ 240.666999][ T9] device hsr_slave_0 left promiscuous mode [ 240.722219][ T9] device hsr_slave_1 left promiscuous mode [ 240.768271][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.776133][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.848977][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.866940][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.922775][ T9] device bridge_slave_1 left promiscuous mode [ 240.930556][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.023037][ T9] device bridge_slave_0 left promiscuous mode [ 241.029241][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.154815][ T9] device veth1_macvtap left promiscuous mode [ 241.188224][ T9] device veth0_macvtap left promiscuous mode [ 241.631485][ T9] device veth1_vlan left promiscuous mode [ 241.637710][ T9] device veth0_vlan left promiscuous mode [ 242.728908][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 244.162641][ T5802] loop2: detected capacity change from 0 to 512 [ 244.273047][ T5802] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 244.280733][ T5802] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 244.365527][ T5802] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 244.541047][ T5802] EXT4-fs (loop2): 1 truncate cleaned up [ 244.592012][ T5802] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue. Quota mode: none. [ 244.749133][ T9] team0 (unregistering): Port device team_slave_1 removed [ 244.802463][ T9] team0 (unregistering): Port device team_slave_0 removed [ 244.901701][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.985892][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.092456][ T5820] netlink: 'syz.3.404': attribute type 29 has an invalid length. [ 245.113350][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 245.155567][ T9] bond0 (unregistering): Released all slaves [ 245.257082][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 245.273695][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.984961][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 246.009368][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.040714][ T5820] netlink: 'syz.3.404': attribute type 29 has an invalid length. [ 246.060978][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 246.204635][ T5715] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.391472][ T5715] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.511072][ T5715] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.177510][ T5715] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.438079][ T5715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.497182][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.520103][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.574539][ T5715] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.643785][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.708600][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.770838][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.777988][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.987197][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.040872][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.110710][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.161575][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.168657][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.220001][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.275529][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.331308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.365350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.406425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.433265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.481809][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.517868][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.573208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.589642][ T5715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.624972][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.640746][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.650057][ T5866] loop4: detected capacity change from 0 to 2048 [ 249.901078][ T5866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.606788][ T5879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.415'. [ 251.030035][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.048306][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.203932][ T5715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.260188][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.271862][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.343783][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.392471][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.450895][ T5715] device veth0_vlan entered promiscuous mode [ 252.499730][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.521343][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.549647][ T5715] device veth1_vlan entered promiscuous mode [ 252.652423][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.686601][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.726296][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.747487][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.790364][ T5715] device veth0_macvtap entered promiscuous mode [ 252.813530][ T5715] device veth1_macvtap entered promiscuous mode [ 252.892285][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.965899][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.006346][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.087016][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.124630][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.181218][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.191038][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.521267][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.554747][ T5715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.602338][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.614327][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.678147][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.721812][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.799702][ T5715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.829221][ T5715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.882430][ T5715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.941656][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.970640][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.018962][ T5715] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.081259][ T5715] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.090085][ T5715] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.180169][ T5715] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.412802][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.419200][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.456588][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.478412][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.516343][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.555079][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.574139][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.607608][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.795139][ T5944] ubi7: attaching mtd0 [ 255.799523][ T5944] ubi7 error: ubi_attach_mtd_dev: bad VID header (131081) or data offsets (131145) [ 255.948974][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 258.671305][ T4231] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 259.260828][ T6003] loop2: detected capacity change from 0 to 512 [ 259.271378][ T4231] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.305210][ T4231] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.409974][ T4231] usb 2-1: config 0 interface 0 has no altsetting 0 [ 259.431619][ T4231] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 259.449817][ T6003] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.422: invalid block [ 259.471218][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.518636][ T4231] usb 2-1: config 0 descriptor?? [ 259.595958][ T6003] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.422: invalid indirect mapped block 10 (level 1) [ 260.883149][ T5990] loop1: detected capacity change from 0 to 512 [ 260.895931][ T6003] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.422: invalid indirect mapped block 8 (level 1) [ 261.031570][ T6003] EXT4-fs (loop2): 1 truncate cleaned up [ 261.056382][ T6019] x86/PAT: syz.1.431:6019 freeing invalid memtype [mem 0xfe004000-0xfe006fff] [ 261.076079][ T6003] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 261.550578][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 261.600215][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.192128][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.271300][ T4231] usbhid 2-1:0.0: can't add hid device: -71 [ 264.277436][ T4231] usbhid: probe of 2-1:0.0 failed with error -71 [ 264.691571][ T4231] usb 2-1: USB disconnect, device number 7 [ 268.077102][ T6083] netlink: 'syz.5.446': attribute type 1 has an invalid length. [ 268.291901][ T6083] netlink: 224 bytes leftover after parsing attributes in process `syz.5.446'. [ 269.743451][ T6094] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 270.559037][ T26] audit: type=1800 audit(1789166291.082:15): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.445" name="addr_trtype" dev="configfs" ino=36767 res=0 errno=0 [ 270.614086][ T6103] nvmet_tcp: address family 255 not supported [ 270.638877][ T26] audit: type=1800 audit(1789166291.142:16): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.445" name="addr_trsvcid" dev="configfs" ino=36768 res=0 errno=0 [ 270.789488][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 272.905882][ T6139] loop2: detected capacity change from 0 to 8 [ 272.928794][ T6142] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 273.028094][ T6142] netlink: 224 bytes leftover after parsing attributes in process `syz.1.457'. [ 273.055102][ T6139] SQUASHFS error: Unable to read directory block [631:26] [ 274.999107][ T26] audit: type=1800 audit(1789166295.522:17): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.463" name="addr_trtype" dev="configfs" ino=37916 res=0 errno=0 [ 275.042883][ T6164] nvmet_tcp: address family 255 not supported [ 275.103028][ T26] audit: type=1800 audit(1789166295.572:18): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.463" name="addr_trsvcid" dev="configfs" ino=37917 res=0 errno=0 [ 275.377811][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 277.571226][ T4299] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 277.668652][ T6221] netlink: 'syz.4.475': attribute type 10 has an invalid length. [ 277.714470][ T6221] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 277.764618][ T6221] team0: Failed to send options change via netlink (err -105) [ 277.798447][ T6221] team0: Port device netdevsim0 added [ 277.971441][ T4299] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.992742][ T4299] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.021213][ T4299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 278.031422][ T4299] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 278.733517][ T6232] loop4: detected capacity change from 0 to 16 [ 280.332999][ T6232] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 280.534296][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.552911][ T4299] usb 2-1: config 0 descriptor?? [ 280.631282][ T4299] usb 2-1: can't set config #0, error -71 [ 280.642414][ T4299] usb 2-1: USB disconnect, device number 8 [ 281.081305][ T4299] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 282.730672][ T4299] usb 2-1: Using ep0 maxpacket: 32 [ 284.741711][ T4299] usb 2-1: device descriptor read/all, error -71 [ 288.315121][ T6293] Invalid ELF header magic: != ELF [ 288.903980][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 288.926268][ T6309] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 288.963525][ T6309] netlink: 224 bytes leftover after parsing attributes in process `syz.2.493'. [ 290.661398][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 290.971921][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 291.116210][ T4232] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 291.136111][ T4232] usb 3-1: config 0 has no interface number 0 [ 291.165814][ T4232] usb 3-1: config 0 interface 12 has no altsetting 0 [ 291.405535][ T4232] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 292.249669][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.259559][ T4232] usb 3-1: Product: syz [ 292.264049][ T4232] usb 3-1: Manufacturer: syz [ 292.268681][ T4232] usb 3-1: SerialNumber: syz [ 292.283976][ T4232] usb 3-1: config 0 descriptor?? [ 294.980561][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 295.066620][ T4232] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 295.078531][ T4232] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 295.117208][ T4232] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 295.146351][ T4232] f81534: probe of 3-1:0.12 failed with error -71 [ 295.215531][ T4232] usb 3-1: USB disconnect, device number 4 [ 296.676767][ T6433] Invalid ELF header magic: != ELF [ 298.074117][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 299.880456][ T6478] kAFS: No cell specified [ 301.122594][ T6474] loop1: detected capacity change from 0 to 32768 [ 301.164914][ T6474] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop1 scanned by syz.1.519 (6474) [ 302.376807][ T6474] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 302.529351][ T6474] BTRFS info (device loop1): using free space tree [ 302.561190][ T6474] BTRFS info (device loop1): has skinny extents [ 302.783501][ T6474] BTRFS error (device loop1): open_ctree failed: -12 [ 303.227357][ T6528] Invalid ELF header magic: != ELF [ 304.501687][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.529'. [ 305.404946][ T26] audit: type=1800 audit(1789166325.932:19): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.531" name="addr_trtype" dev="configfs" ino=38249 res=0 errno=0 [ 305.431951][ T6544] nvmet_tcp: address family 255 not supported [ 305.560268][ T26] audit: type=1800 audit(1789166325.962:20): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.531" name="addr_trsvcid" dev="configfs" ino=38250 res=0 errno=0 [ 305.771460][ T6556] kAFS: No cell specified [ 310.705253][ T6592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'. [ 311.766065][ T6601] Invalid ELF header magic: != ELF [ 313.495026][ T26] audit: type=1800 audit(1789166334.022:21): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.550" name="addr_trtype" dev="configfs" ino=39313 res=0 errno=0 [ 313.671252][ T4232] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 314.669024][ T6623] nvmet_tcp: address family 255 not supported [ 316.119049][ T26] audit: type=1800 audit(1789166335.192:22): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.550" name="addr_trsvcid" dev="configfs" ino=39318 res=0 errno=0 [ 316.351236][ T4232] usb 6-1: Using ep0 maxpacket: 32 [ 316.451328][ T4232] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 316.459036][ T4232] usb 6-1: can't read configurations, error -71 [ 316.722292][ T6642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.554'. [ 316.858966][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.871978][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.700433][ T6658] Invalid ELF header magic: != ELF [ 318.876496][ T6664] kAFS: No cell specified [ 321.075474][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.567'. [ 321.086433][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.567'. [ 323.139226][ T6701] kAFS: No cell specified [ 324.524094][ T4295] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 324.831258][ T4295] usb 2-1: Using ep0 maxpacket: 32 [ 324.981459][ T4295] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 324.989867][ T4295] usb 2-1: config 0 has no interface number 0 [ 325.103830][ T4295] usb 2-1: config 0 interface 12 has no altsetting 0 [ 325.912930][ T4295] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 325.925231][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.972744][ T4295] usb 2-1: Product: syz [ 326.013281][ T4295] usb 2-1: Manufacturer: syz [ 326.053218][ T4295] usb 2-1: SerialNumber: syz [ 326.085185][ T4295] usb 2-1: config 0 descriptor?? [ 326.241207][ T4295] usb 2-1: can't set config #0, error -71 [ 326.248473][ T4295] usb 2-1: USB disconnect, device number 11 [ 326.352323][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.580'. [ 328.493846][ T26] audit: type=1800 audit(1789166349.012:23): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.576" name="addr_trtype" dev="configfs" ino=39453 res=0 errno=0 [ 328.535014][ T26] audit: type=1800 audit(1789166349.012:24): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.576" name="addr_trsvcid" dev="configfs" ino=39454 res=0 errno=0 [ 329.091529][ T6731] nvmet_tcp: address family 255 not supported [ 330.321548][ T6746] kAFS: No cell specified [ 335.524810][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.592'. [ 335.540009][ T6766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'. [ 335.792855][ T6768] 9pnet: Insufficient options for proto=fd [ 338.284739][ T26] audit: type=1800 audit(1789166358.812:25): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.597" name="addr_trtype" dev="configfs" ino=39500 res=0 errno=0 [ 338.324200][ T6781] nvmet_tcp: address family 255 not supported [ 338.360846][ T6788] kAFS: bad VL server IP address [ 338.367297][ T26] audit: type=1800 audit(1789166358.852:26): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.597" name="addr_trsvcid" dev="configfs" ino=39501 res=0 errno=0 [ 338.389713][ T6788] kAFS: No cell specified [ 342.228536][ T6802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.604'. [ 342.238114][ T6802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.604'. [ 344.969450][ T6828] Invalid ELF header magic: != ELF [ 346.468925][ T26] audit: type=1800 audit(1789166366.992:27): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.614" name="addr_trtype" dev="configfs" ino=38604 res=0 errno=0 [ 346.508870][ T26] audit: type=1800 audit(1789166367.032:28): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.614" name="addr_trsvcid" dev="configfs" ino=38605 res=0 errno=0 [ 346.523124][ T6838] nvmet_tcp: address family 255 not supported [ 354.675903][ T6887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.618'. [ 354.685410][ T6887] netlink: 32 bytes leftover after parsing attributes in process `syz.2.618'. [ 354.696503][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.618'. [ 358.589409][ T6913] Invalid ELF header magic: != ELF [ 358.950601][ T26] audit: type=1800 audit(1789166379.472:29): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.636" name="addr_trtype" dev="configfs" ino=39662 res=0 errno=0 [ 359.041710][ T26] audit: type=1800 audit(1789166379.572:30): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.636" name="addr_trsvcid" dev="configfs" ino=39667 res=0 errno=0 [ 359.052816][ T6915] nvmet_tcp: address family 255 not supported [ 360.320418][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 361.945054][ T6930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.639'. [ 361.954606][ T6930] netlink: 32 bytes leftover after parsing attributes in process `syz.5.639'. [ 366.664250][ T26] audit: type=1800 audit(1789166387.192:31): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.649" name="addr_trtype" dev="configfs" ino=38769 res=0 errno=0 [ 366.722795][ T6961] nvmet_tcp: address family 255 not supported [ 366.743966][ T26] audit: type=1800 audit(1789166387.252:32): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.649" name="addr_trsvcid" dev="configfs" ino=39709 res=0 errno=0 [ 367.909789][ T6978] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 369.358046][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.651'. [ 369.367435][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'. [ 369.378291][ T6989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.651'. [ 370.505392][ T6996] Invalid ELF header magic: != ELF [ 373.892587][ T26] audit: type=1800 audit(1789166394.422:33): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.664" name="addr_trtype" dev="configfs" ino=39765 res=0 errno=0 [ 373.922579][ T7026] jffs2: notice: (7026) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 373.947038][ T7019] nvmet_tcp: address family 255 not supported [ 373.972745][ T26] audit: type=1800 audit(1789166394.452:34): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.664" name="addr_trsvcid" dev="configfs" ino=39766 res=0 errno=0 [ 378.295329][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.303583][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.794287][ T7069] loop1: detected capacity change from 0 to 164 [ 380.773132][ T7087] Invalid ELF header magic: != ELF [ 384.389842][ T26] audit: type=1800 audit(1789166404.912:35): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.691" name="addr_trtype" dev="configfs" ino=39879 res=0 errno=0 [ 384.416196][ T7117] nvmet_tcp: address family 255 not supported [ 384.498632][ T26] audit: type=1800 audit(1789166404.942:36): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.691" name="addr_trsvcid" dev="configfs" ino=39880 res=0 errno=0 [ 384.694002][ T7124] ubi7: attaching mtd0 [ 384.699214][ T7124] ubi7 error: ubi_attach_mtd_dev: bad VID header (131081) or data offsets (131145) [ 384.915138][ T7128] tipc: Enabling of bearer rejected, failed to enable media [ 388.101265][ T1325] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 388.364107][ T7156] device syzkaller0 entered promiscuous mode [ 388.384169][ T7156] tipc: Started in network mode [ 388.762183][ T1325] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.792147][ T1325] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.836980][ T7156] tipc: Node identity 121ecf54de4a, cluster identity 4711 [ 388.856141][ T1325] usb 2-1: config 0 interface 0 has no altsetting 0 [ 388.896837][ T1325] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 388.896872][ T7156] tipc: Enabled bearer , priority 0 [ 388.944701][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.991308][ T1325] usb 2-1: config 0 descriptor?? [ 389.030962][ T7156] tipc: Resetting bearer [ 389.080907][ T7155] tipc: Resetting bearer [ 389.170674][ T7155] tipc: Disabling bearer [ 389.269051][ T7148] loop1: detected capacity change from 0 to 512 [ 389.561265][ T4299] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 389.651339][ T1325] usbhid 2-1:0.0: can't add hid device: -71 [ 389.661285][ T1325] usbhid: probe of 2-1:0.0 failed with error -71 [ 389.685762][ T1325] usb 2-1: USB disconnect, device number 12 [ 389.694743][ T7174] loop2: detected capacity change from 0 to 4096 [ 389.801191][ T4299] usb 6-1: Using ep0 maxpacket: 32 [ 390.012718][ T4299] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 390.185411][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.296232][ T4299] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 392.006612][ T4299] gspca_nw80x: reg_r err -110 [ 392.084245][ T4299] nw80x: probe of 6-1:3.0 failed with error -110 [ 393.330311][ T1325] usb 6-1: USB disconnect, device number 4 [ 397.038489][ T7231] loop1: detected capacity change from 0 to 16 [ 398.875141][ T7231] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 399.726422][ T7238] netlink: 96 bytes leftover after parsing attributes in process `syz.1.728'. [ 401.234682][ T26] audit: type=1800 audit(1789166421.762:37): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.730" name="addr_trtype" dev="configfs" ino=41041 res=0 errno=0 [ 401.349481][ T7243] nvmet_tcp: address family 255 not supported [ 401.371120][ T26] audit: type=1800 audit(1789166421.872:38): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.730" name="addr_trsvcid" dev="configfs" ino=41042 res=0 errno=0 [ 401.957835][ T7253] ubi7: attaching mtd0 [ 401.995997][ T7253] ubi7 error: ubi_attach_mtd_dev: bad VID header (131081) or data offsets (131145) [ 403.826513][ T7266] Cannot find add_set index 0 as target [ 403.838708][ T7266] overlayfs: missing 'lowerdir' [ 408.084104][ T7294] loop4: detected capacity change from 0 to 16 [ 408.135849][ T7294] erofs: (device loop4): mounted with root inode @ nid 36. [ 408.437247][ T7294] Invalid ELF header magic: != ELF [ 408.476424][ T7301] Invalid ELF header magic: != ELF [ 408.819354][ T7308] ubi7: attaching mtd0 [ 408.841246][ T7308] ubi7 error: ubi_attach_mtd_dev: bad VID header (131081) or data offsets (131145) [ 410.558748][ T26] audit: type=1800 audit(1789166431.082:39): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.744" name="addr_trtype" dev="configfs" ino=41118 res=0 errno=0 [ 410.567661][ T7333] nvmet_tcp: address family 255 not supported [ 410.645552][ T26] audit: type=1800 audit(1789166431.082:40): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.744" name="addr_trsvcid" dev="configfs" ino=41119 res=0 errno=0 [ 412.931273][ T4269] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 413.572098][ T7359] loop4: detected capacity change from 0 to 16 [ 413.771233][ T4269] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.226709][ T7359] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 415.425057][ T4269] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.437915][ T4269] usb 3-1: config 0 interface 0 has no altsetting 0 [ 415.444573][ T4269] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 415.453699][ T4269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.480531][ T4269] usb 3-1: config 0 descriptor?? [ 415.631276][ T4269] usb 3-1: can't set config #0, error -71 [ 415.703304][ T4269] usb 3-1: USB disconnect, device number 5 [ 417.479231][ T7386] netlink: 'syz.5.774': attribute type 1 has an invalid length. [ 417.547685][ T7389] loop2: detected capacity change from 0 to 16 [ 417.554620][ T7386] netlink: 224 bytes leftover after parsing attributes in process `syz.5.774'. [ 417.870162][ T7389] erofs: (device loop2): mounted with root inode @ nid 36. [ 419.384647][ T7398] loop1: detected capacity change from 0 to 32768 [ 419.483137][ T7398] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.776 (7398) [ 419.563041][ T7398] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 419.581205][ T7398] BTRFS info (device loop1): setting nodatasum [ 419.587408][ T7398] BTRFS info (device loop1): force zlib compression, level 3 [ 419.622958][ T26] audit: type=1800 audit(1789166440.152:41): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.779" name="addr_trtype" dev="configfs" ino=40336 res=0 errno=0 [ 419.643788][ T7398] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 419.657210][ T7408] nvmet_tcp: address family 255 not supported [ 419.708420][ T7398] BTRFS info (device loop1): use lzo compression, level 0 [ 419.715716][ T26] audit: type=1800 audit(1789166440.182:42): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.779" name="addr_trsvcid" dev="configfs" ino=40337 res=0 errno=0 [ 419.731584][ T7398] BTRFS info (device loop1): turning on flush-on-commit [ 419.778143][ T7398] BTRFS info (device loop1): use zlib compression, level 3 [ 420.600280][ T7398] BTRFS info (device loop1): max_inline at 7 [ 420.623142][ T7398] BTRFS info (device loop1): using free space tree [ 420.671146][ T7398] BTRFS info (device loop1): has skinny extents [ 420.745267][ T7419] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 420.772724][ T7419] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 422.044380][ T7398] BTRFS error (device loop1): open_ctree failed: -22 [ 422.056541][ T6805] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (6805) [ 422.074421][ T7448] Invalid ELF header magic: != ELF [ 425.011547][ T4235] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 425.461361][ T4235] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.517569][ T4235] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.537236][ T4235] usb 5-1: config 0 interface 0 has no altsetting 0 [ 425.544822][ T4235] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 425.576249][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.597641][ T4235] usb 5-1: config 0 descriptor?? [ 426.464575][ T7440] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 426.502777][ T7475] loop4: detected capacity change from 0 to 512 [ 426.911403][ T4235] usbhid 5-1:0.0: can't add hid device: -71 [ 426.960920][ T4235] usbhid: probe of 5-1:0.0 failed with error -71 [ 427.018472][ T4235] usb 5-1: USB disconnect, device number 3 [ 427.685549][ T7440] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 427.696672][ T7500] loop5: detected capacity change from 0 to 128 [ 427.705908][ T7440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.370854][ T7440] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 428.380141][ T7440] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 428.614310][ T7506] loop4: detected capacity change from 0 to 32768 [ 428.633186][ T7440] usb 2-1: Manufacturer: syz [ 428.640688][ T7440] usb 2-1: config 0 descriptor?? [ 429.590546][ T7440] usb 2-1: can't set config #0, error -71 [ 429.609963][ T7440] usb 2-1: USB disconnect, device number 13 [ 429.718807][ T7506] XFS (loop4): Mounting V5 Filesystem [ 429.818388][ T7523] loop1: detected capacity change from 0 to 2048 [ 429.906364][ T7506] XFS (loop4): Ending clean mount [ 429.913929][ T7523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.733742][ T4189] XFS (loop4): Unmounting Filesystem [ 433.016721][ T1325] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 434.820189][ T1325] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.832049][ T1325] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.844879][ T1325] usb 6-1: config 0 interface 0 has no altsetting 0 [ 434.851751][ T1325] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 434.860814][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.870566][ T1325] usb 6-1: config 0 descriptor?? [ 436.171322][ T1325] usbhid 6-1:0.0: can't add hid device: -71 [ 436.177321][ T1325] usbhid: probe of 6-1:0.0 failed with error -71 [ 436.214291][ T1325] usb 6-1: USB disconnect, device number 5 [ 436.538653][ T7566] loop4: detected capacity change from 0 to 32768 [ 436.647746][ T7566] (syz.4.811,7566,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 436.670947][ T7566] (syz.4.811,7566,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 437.786871][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.821'. [ 438.534409][ T7597] batman_adv: batadv0: Adding interface: ip6gretap1 [ 438.541014][ T7597] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.566823][ T7597] batman_adv: batadv0: Interface activated: ip6gretap1 [ 439.733335][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.739787][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.538769][ T4269] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 441.609147][ T7622] loop1: detected capacity change from 0 to 512 [ 441.625846][ T7620] netlink: 'syz.4.829': attribute type 10 has an invalid length. [ 441.658934][ T7622] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 441.685073][ T7620] team0: Port device dummy0 added [ 441.911480][ T4269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.991476][ T4269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.143568][ T4269] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 442.219037][ T4269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.250396][ T4269] usb 6-1: config 0 descriptor?? [ 442.863412][ T4269] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 442.871637][ T4269] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 443.227102][ T4269] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 443.234798][ T4269] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 443.242530][ T4269] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 443.334503][ T7654] udc-core: couldn't find an available UDC or it's busy [ 443.562075][ T7654] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 443.583114][ T4269] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 443.611416][ T7611] udc-core: couldn't find an available UDC or it's busy [ 443.618891][ T7611] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 443.640834][ T7611] udc-core: couldn't find an available UDC or it's busy [ 443.738267][ T7611] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 443.831317][ T4269] playstation 0003:054C:0DF2.0001: Invalid byte count transferred, expected 20 got 3 [ 443.891412][ T7660] loop2: detected capacity change from 0 to 32768 [ 443.943386][ T4269] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 443.967008][ T7660] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.842 (7660) [ 444.016432][ T4269] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 444.066837][ T4269] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 444.103447][ T7666] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 444.132564][ T4269] playstation: probe of 0003:054C:0DF2.0001 failed with error -22 [ 444.231397][ T4269] usb 6-1: USB disconnect, device number 6 [ 444.290420][ T7660] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 444.299336][ T7660] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 444.308799][ T7660] BTRFS info (device loop2): use zstd compression, level 3 [ 444.316020][ T7660] BTRFS info (device loop2): force clearing of disk cache [ 444.323188][ T7660] BTRFS info (device loop2): enabling disk space caching [ 444.330204][ T7660] BTRFS info (device loop2): disk space caching is enabled [ 444.337407][ T7660] BTRFS info (device loop2): has skinny extents [ 444.547510][ T7682] FAULT_INJECTION: forcing a failure. [ 444.547510][ T7682] name failslab, interval 1, probability 0, space 0, times 0 [ 444.596418][ T7675] fido_id[7675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 444.612870][ T7682] CPU: 0 PID: 7682 Comm: syz.1.846 Not tainted syzkaller #0 [ 444.620178][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.630258][ T7682] Call Trace: [ 444.633551][ T7682] [ 444.636524][ T7682] dump_stack_lvl+0x188/0x250 [ 444.641246][ T7682] ? show_regs_print_info+0x20/0x20 [ 444.646482][ T7682] ? load_image+0x410/0x410 [ 444.651026][ T7682] ? __might_sleep+0xf0/0xf0 [ 444.655635][ T7682] ? __lock_acquire+0x7b50/0x7b50 [ 444.660684][ T7682] should_fail+0x383/0x4b0 [ 444.665130][ T7682] should_failslab+0x5/0x20 [ 444.669652][ T7682] slab_pre_alloc_hook+0x51/0xc0 [ 444.674615][ T7682] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 444.680356][ T7682] ? sbitmap_queue_init_node+0x201/0xa60 [ 444.686020][ T7682] sbitmap_queue_init_node+0x201/0xa60 [ 444.691602][ T7682] blk_mq_init_tags+0x179/0x370 [ 444.696482][ T7682] blk_mq_alloc_rq_map+0x7f/0x1a0 [ 444.701531][ T7682] blk_mq_init_sched+0x1fe/0x1080 [ 444.706614][ T7682] elevator_switch+0x2ff/0x930 [ 444.711419][ T7682] elv_iosched_store+0x34e/0x3f0 [ 444.716380][ T7682] ? elevator_switch+0x930/0x930 [ 444.721353][ T7682] queue_attr_store+0x8a/0xc0 [ 444.726058][ T7682] ? sysfs_kf_read+0x350/0x350 [ 444.730851][ T7682] kernfs_fop_write_iter+0x3a8/0x500 [ 444.736261][ T7682] vfs_write+0x748/0xd70 [ 444.740561][ T7682] ? file_end_write+0x250/0x250 [ 444.745453][ T7682] ? mutex_lock_nested+0x17/0x20 [ 444.750410][ T7682] ? __fdget_pos+0x2bf/0x370 [ 444.755018][ T7682] ? ksys_write+0x70/0x260 [ 444.759463][ T7682] ksys_write+0x153/0x260 [ 444.763823][ T7682] ? __ia32_sys_read+0x80/0x80 [ 444.768617][ T7682] ? lockdep_hardirqs_on+0x94/0x140 [ 444.773850][ T7682] do_syscall_64+0x4c/0xa0 [ 444.778277][ T7682] ? clear_bhb_loop+0x30/0x80 [ 444.782998][ T7682] ? clear_bhb_loop+0x30/0x80 [ 444.787691][ T7682] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.793597][ T7682] RIP: 0033:0x7fd3c4f09159 [ 444.798048][ T7682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.817683][ T7682] RSP: 002b:00007fd3c3161028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 444.826116][ T7682] RAX: ffffffffffffffda RBX: 00007fd3c5190fa0 RCX: 00007fd3c4f09159 [ 444.834141][ T7682] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 444.842128][ T7682] RBP: 00007fd3c4fa003b R08: 0000000000000000 R09: 0000000000000000 [ 444.850116][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.858103][ T7682] R13: 00007fd3c5191038 R14: 00007fd3c5190fa0 R15: 00007ffd987ef638 [ 444.866113][ T7682] [ 445.797694][ T7660] BTRFS info (device loop2): enabling ssd optimizations [ 445.809703][ T7660] BTRFS info (device loop2): clearing free space tree [ 445.818233][ T7660] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 445.828211][ T7660] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 447.358660][ T7724] loop4: detected capacity change from 0 to 512 [ 448.783945][ T7724] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 448.841275][ T7724] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 448.861514][ T7724] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 448.977770][ T7724] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 449.033262][ T7724] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 449.056719][ T7724] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 449.167911][ T7724] EXT4-fs (loop4): orphan cleanup on readonly fs [ 450.175521][ T7724] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.857: bad orphan inode 13 [ 450.205028][ T7724] ext4_test_bit(bit=12, block=1) = 0 [ 450.210865][ T7724] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 450.643551][ T26] audit: type=1800 audit(1789166471.172:43): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.867" name="addr_trtype" dev="configfs" ino=41530 res=0 errno=0 [ 450.669282][ T7749] nvmet_tcp: address family 255 not supported [ 450.681673][ T7750] x_tables: duplicate underflow at hook 3 [ 450.700275][ T26] audit: type=1800 audit(1789166471.202:44): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.867" name="addr_trsvcid" dev="configfs" ino=41531 res=0 errno=0 [ 452.025154][ T7763] mmap: syz.3.872 (7763) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 455.601681][ T7777] page:ffffea0001280400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a010 [ 456.617102][ T7777] head:ffffea0001280400 order:3 compound_mapcount:0 compound_pincount:0 [ 456.671403][ T7777] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 456.689802][ T7777] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42140 [ 457.314416][ T7777] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 457.853610][ T7777] page dumped because: unmovable page [ 457.869408][ T7777] page_owner tracks the page as allocated [ 457.876485][ T7777] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4235, ts 408192261628, free_ts 408166916709 [ 457.921436][ T7777] get_page_from_freelist+0x24f6/0x2670 [ 457.927017][ T7777] __alloc_pages+0x1ee/0x480 [ 457.967883][ T7777] new_slab+0xc0/0x4b0 [ 457.982381][ T7777] ___slab_alloc+0x807/0xdd0 [ 457.989253][ T7777] __kmalloc_node_track_caller+0x13d/0x3a0 [ 458.000503][ T7777] __alloc_skb+0x22c/0x750 [ 458.044563][ T7777] nsim_dev_trap_report_work+0x25c/0xab0 [ 458.050224][ T7777] process_one_work+0x867/0xff0 [ 458.084892][ T7777] worker_thread+0xad7/0x12a0 [ 458.117789][ T7777] kthread+0x42e/0x520 [ 458.153475][ T7777] ret_from_fork+0x1f/0x30 [ 458.181092][ T7777] page last free stack trace: [ 458.218371][ T7777] free_unref_page_prepare+0x637/0x6c0 [ 458.238352][ T7777] free_unref_page_list+0x119/0x830 [ 458.248254][ T7777] release_pages+0x185f/0x1bd0 [ 458.266058][ T7777] __pagevec_release+0x6d/0xe0 [ 458.282402][ T7777] truncate_inode_pages_range+0x335/0xf90 [ 458.300657][ T7777] evict+0x4c9/0x8b0 [ 458.317230][ T7777] __dentry_kill+0x412/0x630 [ 458.328650][ T7777] shrink_dentry_list+0x388/0x680 [ 458.346137][ T7777] shrink_dcache_parent+0xae/0x3d0 [ 458.363531][ T7777] do_one_tree+0x23/0xe0 [ 458.401073][ T7777] shrink_dcache_for_umount+0x65/0x110 [ 458.410249][ T7777] generic_shutdown_super+0x63/0x300 [ 458.424506][ T7777] kill_litter_super+0x72/0xa0 [ 458.435935][ T7777] deactivate_locked_super+0x93/0xf0 [ 458.446895][ T7777] cleanup_mnt+0x426/0x4d0 [ 458.465877][ T7777] task_work_run+0x125/0x1a0 [ 462.406870][ T7826] ubi7: attaching mtd0 [ 462.411005][ T7826] ubi7 error: ubi_attach_mtd_dev: bad VID header (131081) or data offsets (131145) [ 464.991154][ T7440] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 465.342063][ T26] audit: type=1800 audit(1789166485.872:45): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.893" name="addr_trtype" dev="configfs" ino=41655 res=0 errno=0 [ 465.364342][ T7848] nvmet_tcp: address family 255 not supported [ 465.424747][ T26] audit: type=1800 audit(1789166485.902:46): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.893" name="addr_trsvcid" dev="configfs" ino=41656 res=0 errno=0 [ 466.450729][ T7440] usb 2-1: unable to get BOS descriptor or descriptor too short [ 466.641170][ T7440] usb 2-1: config 1 has an invalid interface number: 163 but max is 0 [ 466.649383][ T7440] usb 2-1: config 1 has no interface number 0 [ 466.661194][ T7440] usb 2-1: config 1 interface 163 has no altsetting 0 [ 467.491206][ T7440] usb 2-1: string descriptor 0 read error: -71 [ 467.497479][ T7440] usb 2-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 467.630350][ T7869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.654978][ T7440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.891261][ T7440] usb 2-1: can't set config #1, error -71 [ 467.912368][ T7440] usb 2-1: USB disconnect, device number 14 [ 468.279904][ T7869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.689985][ T7869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.833816][ T7869] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.506352][ T7869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.614873][ T7869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.184411][ T7869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.303032][ T7869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.192160][ T7945] Invalid ELF header magic: != ELF [ 476.835337][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.926'. [ 476.851772][ T7954] netlink: 1148 bytes leftover after parsing attributes in process `syz.5.926'. [ 477.757036][ T7961] netlink: 'syz.1.928': attribute type 1 has an invalid length. [ 477.831899][ T7961] netlink: 224 bytes leftover after parsing attributes in process `syz.1.928'. [ 478.127044][ T7967] loop5: detected capacity change from 0 to 32768 [ 478.448466][ T7967] XFS (loop5): Mounting V5 Filesystem [ 479.088132][ T7967] XFS (loop5): Ending clean mount [ 479.834367][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.931'. [ 480.030412][ T5715] XFS (loop5): Unmounting Filesystem [ 480.269776][ T7996] loop2: detected capacity change from 0 to 16 [ 480.301828][ T7996] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 481.882945][ T8008] Invalid ELF header magic: != ELF [ 485.142835][ T8022] loop5: detected capacity change from 0 to 2048 [ 485.435262][ T8022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.001463][ T4231] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 486.167897][ T8031] netlink: 'syz.1.944': attribute type 1 has an invalid length. [ 486.198168][ T8031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.944'. [ 486.261144][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 486.412790][ T4231] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.441839][ T4231] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.747806][ T4231] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 486.758788][ T4231] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 486.768040][ T4231] usb 3-1: Product: syz [ 486.773030][ T4231] usb 3-1: Manufacturer: syz [ 488.321547][ T4231] hub 3-1:4.0: USB hub found [ 488.425319][ T8050] loop5: detected capacity change from 0 to 16 [ 488.502805][ T8050] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 489.582454][ T4231] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 490.651969][ T4231] usb 3-1: USB disconnect, device number 6 [ 492.176307][ T8075] loop4: detected capacity change from 0 to 128 [ 492.676338][ T8075] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 492.709020][ T8075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.512904][ T8087] loop4: detected capacity change from 0 to 16 [ 494.551641][ T8087] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 494.600458][ T8094] netlink: 'syz.5.964': attribute type 1 has an invalid length. [ 494.639555][ T8094] netlink: 224 bytes leftover after parsing attributes in process `syz.5.964'. [ 494.896719][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.949'. [ 497.106755][ T6520] Bluetooth: hci0: command 0x0c3a tx timeout [ 498.836260][ T8122] loop1: detected capacity change from 0 to 2048 [ 498.903535][ T8124] loop5: detected capacity change from 0 to 512 [ 500.253531][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 500.272154][ T8122] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 501.175060][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.181405][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.250797][ T8139] loop2: detected capacity change from 0 to 512 [ 501.502257][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 501.511652][ T8139] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 501.600207][ T8139] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.498066][ T8163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'. [ 503.817373][ T8171] 9pnet: Insufficient options for proto=fd [ 508.427714][ T8217] loop1: detected capacity change from 0 to 4096 [ 508.947619][ T8233] 9pnet: Insufficient options for proto=fd [ 509.389193][ T8217] EXT4-fs (loop1): Test dummy encryption mode enabled [ 509.421614][ T8217] EXT4-fs (loop1): inline encryption not supported [ 509.458464][ T8217] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 509.533870][ T8217] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 509.542541][ T8217] System zones: 0-5 [ 509.566609][ T8217] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 509.709226][ T26] audit: type=1800 audit(1789166530.232:47): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.999" name="syzkaller0" dev="sda1" ino=2049 res=0 errno=0 [ 510.771351][ T7445] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 510.985076][ T8217] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 512.176662][ T8258] crypto_alloc_aead failed rc=-2 [ 513.951135][ T7445] usb 5-1: unable to read config index 0 descriptor/all [ 513.958187][ T7445] usb 5-1: can't read configurations, error -71 [ 516.100749][ T8314] loop4: detected capacity change from 0 to 64 [ 520.836266][ T8352] loop5: detected capacity change from 0 to 32768 [ 520.954483][ T8352] JBD2: Ignoring recovery information on journal [ 520.998734][ T8352] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 521.224800][ T8352] OCFS2: ERROR (device loop5): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 521.242006][ T8352] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 521.251977][ T8352] OCFS2: File system is now read-only. [ 521.257520][ T8352] (syz.5.1029,8352,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 521.266151][ T8352] (syz.5.1029,8352,0):ocfs2_reserve_cluster_bitmap_bits:1155 ERROR: status = -30 [ 521.275507][ T8352] (syz.5.1029,8352,0):ocfs2_reserve_clusters_with_limit:1224 ERROR: status = -30 [ 521.284900][ T8352] (syz.5.1029,8352,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 521.294525][ T8352] (syz.5.1029,8352,0):ocfs2_block_group_alloc:697 ERROR: status = -30 [ 521.302950][ T8352] (syz.5.1029,8352,0):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 521.311227][ T8352] (syz.5.1029,8352,0):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 521.319940][ T8352] (syz.5.1029,8352,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 521.328598][ T8352] (syz.5.1029,8352,0):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 521.338054][ T8352] (syz.5.1029,8352,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 521.347789][ T8352] (syz.5.1029,8352,0):ocfs2_expand_inline_dir:2840 ERROR: status = -30 [ 521.356309][ T8352] (syz.5.1029,8352,0):ocfs2_extend_dir:3204 ERROR: status = -30 [ 521.364570][ T8352] (syz.5.1029,8352,0):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -30 [ 521.373359][ T8352] (syz.5.1029,8352,0):ocfs2_link:762 ERROR: status = -30 [ 521.380460][ T8352] (syz.5.1029,8352,0):ocfs2_link:839 ERROR: status = -30 [ 522.793960][ T5715] ocfs2: Unmounting device (7,5) on (node local) [ 527.871096][ T8409] loop1: detected capacity change from 0 to 16 [ 528.822249][ T8409] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 530.965700][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 534.255757][ T8474] netlink: 'syz.5.1043': attribute type 1 has an invalid length. [ 534.306666][ T8474] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1043'. [ 536.450047][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 541.889141][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'. [ 544.650189][ T8582] loop2: detected capacity change from 0 to 16 [ 545.721605][ T8582] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 546.734736][ T8595] netlink: 'syz.2.1095': attribute type 1 has an invalid length. [ 546.769357][ T8595] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1095'. [ 547.076258][ T8586] loop4: detected capacity change from 0 to 40427 [ 547.136413][ T8586] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 547.200058][ T8586] F2FS-fs (loop4): invalid crc value [ 547.247200][ T8586] F2FS-fs (loop4): invalid crc value [ 547.273890][ T8586] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 547.935890][ T8607] Invalid ELF header magic: != ELF [ 552.387206][ T8629] loop1: detected capacity change from 0 to 16 [ 552.563363][ T8629] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 552.795014][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 553.719554][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1106'. [ 554.317595][ T8655] 9pnet: Could not find request transport: fd0x0000000000000005 [ 558.507095][ T8682] loop5: detected capacity change from 0 to 16 [ 558.603652][ T8682] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 560.537404][ T8674] loop1: detected capacity change from 0 to 40427 [ 560.842179][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1120'. [ 562.684610][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.690947][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.725333][ T8674] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 562.767890][ T8674] F2FS-fs (loop1): invalid crc value [ 562.794786][ T8674] F2FS-fs (loop1): invalid crc value [ 562.829842][ T8674] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 565.874623][ T8735] 9pnet: Could not find request transport: fd0x0000000000000005 [ 567.490275][ T8747] Invalid ELF header magic: != ELF [ 570.817461][ T8758] loop5: detected capacity change from 0 to 40427 [ 570.947842][ T8758] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 571.001914][ T8758] F2FS-fs (loop5): invalid crc value [ 571.048779][ T8758] F2FS-fs (loop5): invalid crc value [ 571.055003][ T8758] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 571.937674][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1133'. [ 572.558690][ T8785] 9pnet: Could not find request transport: fd0x0000000000000005 [ 583.576665][ T8851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1154'. [ 588.255804][ T8878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1170'. [ 589.604904][ T8888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1172'. [ 589.615845][ T8888] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1172'. [ 591.902665][ T8912] 9pnet: Insufficient options for proto=fd [ 592.915338][ T8917] ubi7: attaching mtd0 [ 592.919463][ T8917] ubi7 error: ubi_attach_mtd_dev: bad VID header (131081) or data offsets (131145) [ 596.691956][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1184'. [ 596.702901][ T8946] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1184'. [ 598.544426][ T8947] loop5: detected capacity change from 0 to 32768 [ 599.225898][ T8947] (syz.5.1186,8947,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 599.243055][ T8947] (syz.5.1186,8947,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 599.304243][ T8947] JBD2: Ignoring recovery information on journal [ 599.778008][ T8947] JBD2: recovery failed [ 599.937316][ T8947] (syz.5.1186,8947,1):ocfs2_journal_load:1106 ERROR: Failed to load journal! [ 599.981919][ T8947] (syz.5.1186,8947,1):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5 [ 600.777397][ T8947] (syz.5.1186,8947,1):ocfs2_check_volume:2491 ERROR: status = -5 [ 600.799319][ T8947] (syz.5.1186,8947,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 601.893839][ T8947] (syz.5.1186,8947,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 603.398299][ T8979] loop5: detected capacity change from 0 to 16 [ 603.410530][ T8979] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 609.343157][ T9004] loop1: detected capacity change from 0 to 40427 [ 609.405811][ T9004] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 609.415636][ T9004] F2FS-fs (loop1): invalid crc value [ 609.421479][ T9004] F2FS-fs (loop1): invalid crc value [ 609.426834][ T9004] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 611.273368][ T5618] Bluetooth: hci5: command 0x0409 tx timeout [ 611.632143][ T9013] 9pnet: Insufficient options for proto=fd [ 613.421131][ T1325] Bluetooth: hci5: command 0x041b tx timeout [ 613.491362][ T9020] ubi7: attaching mtd0 [ 613.495479][ T9020] ubi7 error: ubi_attach_mtd_dev: bad VID header (131081) or data offsets (131145) [ 614.128390][ T8994] chnl_net:caif_netlink_parms(): no params data found [ 614.348852][ T4341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.665118][ T4341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.134806][ T9035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1198'. [ 615.145823][ T9035] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1198'. [ 615.622744][ T4341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.731362][ T8994] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.738491][ T8994] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.767517][ T8994] device bridge_slave_0 entered promiscuous mode [ 615.805137][ T4269] Bluetooth: hci5: command 0x040f tx timeout [ 615.864380][ T8994] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.881144][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.920129][ T8994] device bridge_slave_1 entered promiscuous mode [ 615.962820][ T4341] team0: Port device netdevsim0 removed [ 615.994768][ T4341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.106355][ T4269] Bluetooth: hci2: command 0x0409 tx timeout [ 616.141275][ T9042] netlink: 'syz.1.1207': attribute type 1 has an invalid length. [ 616.151399][ T8994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.192098][ T9042] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1207'. [ 616.803837][ T8994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.847198][ T9023] chnl_net:caif_netlink_parms(): no params data found [ 617.018130][ T8994] team0: Port device team_slave_0 added [ 617.092563][ T8994] team0: Port device team_slave_1 added [ 617.357363][ T9058] loop1: detected capacity change from 0 to 16 [ 617.662997][ T9058] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 617.947800][ T7446] Bluetooth: hci5: command 0x0419 tx timeout [ 618.191012][ T8994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.198101][ T8994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.211156][ T7446] Bluetooth: hci2: command 0x041b tx timeout [ 618.372248][ T8994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.518359][ T8994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.525599][ T8994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.587385][ T8994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.013290][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.083164][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.138995][ T9023] device bridge_slave_0 entered promiscuous mode [ 619.193104][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.200208][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.236271][ T9023] device bridge_slave_1 entered promiscuous mode [ 619.446640][ T8994] device hsr_slave_0 entered promiscuous mode [ 619.457183][ T8994] device hsr_slave_1 entered promiscuous mode [ 619.486567][ T8994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.508173][ T8994] Cannot create hsr debugfs directory [ 619.520818][ T9076] ubi7: attaching mtd0 [ 619.544303][ T9023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.555776][ T9076] ubi7 error: ubi_attach_mtd_dev: bad VID header (131081) or data offsets (131145) [ 619.609830][ T9023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.797792][ T9079] 9pnet: Insufficient options for proto=fd [ 620.301461][ T7444] Bluetooth: hci2: command 0x040f tx timeout [ 620.377434][ T9023] team0: Port device team_slave_0 added [ 620.426189][ T9023] team0: Port device team_slave_1 added [ 620.550548][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.571665][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.612737][ T9023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.632923][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.639908][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.701077][ T9023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.838404][ T9023] device hsr_slave_0 entered promiscuous mode [ 620.852300][ T9023] device hsr_slave_1 entered promiscuous mode [ 620.880768][ T9023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.901758][ T9023] Cannot create hsr debugfs directory [ 620.908776][ T8994] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 620.952401][ T8994] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 621.007573][ T8994] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 621.082093][ T8994] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 622.158155][ T4341] device hsr_slave_0 left promiscuous mode [ 622.197842][ T4341] device hsr_slave_1 left promiscuous mode [ 622.219496][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.231532][ T9109] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 622.239293][ T9109] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1219'. [ 622.266840][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.289313][ T4341] device veth0 left promiscuous mode [ 622.308902][ T4341] bridge0: port 3(veth0) entered disabled state [ 622.329747][ T4341] device bridge_slave_1 left promiscuous mode [ 622.352657][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.371167][ T7445] Bluetooth: hci2: command 0x0419 tx timeout [ 622.410498][ T4341] device bridge_slave_0 left promiscuous mode [ 622.426266][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.500461][ T4341] device veth1_macvtap left promiscuous mode [ 622.509162][ T4341] device veth0_macvtap left promiscuous mode [ 622.540578][ T4341] device veth1_vlan left promiscuous mode [ 622.579994][ T4341] device veth0_vlan left promiscuous mode [ 624.193716][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.200201][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.395114][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 624.696812][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 624.728260][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.801382][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.169041][ T9143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1226'. [ 625.180557][ T9143] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1226'. [ 625.405430][ T4341] team0 (unregistering): Port device dummy0 removed [ 625.759699][ T4341] bond0 (unregistering): Released all slaves [ 626.065541][ T9023] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 626.112011][ T9023] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 626.165822][ T8994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.208667][ T9023] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 626.924574][ T8994] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.951863][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 626.982744][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 626.990547][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 627.066839][ T9161] loop1: detected capacity change from 0 to 16 [ 627.102833][ T9161] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 627.318318][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 627.449844][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.456998][ T8981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.634532][ T9023] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 627.747285][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 627.776854][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 627.785929][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 627.794445][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.801542][ T8981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.826794][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 627.845507][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 627.981111][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 628.055890][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 628.064529][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 628.073771][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 628.082408][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 628.096580][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 628.111735][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 628.202912][ T9173] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1231'. [ 628.883118][ T8994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.929264][ T9179] netlink: 'syz.5.1233': attribute type 1 has an invalid length. [ 628.958301][ T8994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 628.974446][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 628.989922][ T9179] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1233'. [ 628.995199][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.234871][ T9023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.869623][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 629.899657][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 629.948543][ T9023] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.990244][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 630.008359][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 630.037977][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.045123][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.093447][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 630.136092][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 630.156332][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 630.169137][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.176272][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.206896][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 630.241553][ T8994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.389649][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 630.946930][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 631.018064][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 631.153637][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 631.329407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 631.978989][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 632.011941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 632.202195][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 632.232968][ T9224] loop5: detected capacity change from 0 to 8192 [ 632.269914][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.337230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.413511][ T9023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.500698][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 632.601227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.639804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.779012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 632.849862][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 633.071811][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 633.110759][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 633.183930][ T8994] device veth0_vlan entered promiscuous mode [ 633.192655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 633.242859][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 633.280095][ T8994] device veth1_vlan entered promiscuous mode [ 633.365177][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 633.383474][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 633.465378][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 633.492506][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 633.524320][ T8994] device veth0_macvtap entered promiscuous mode [ 633.967249][ T9023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.335729][ T8994] device veth1_macvtap entered promiscuous mode [ 634.384123][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 634.402052][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 634.456463][ T9266] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 634.460484][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 634.474881][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 634.507994][ T9266] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1246'. [ 634.524487][ T8994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.560275][ T8994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.689174][ T8994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.776097][ T8994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.861150][ T8994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.931758][ T8994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.991147][ T8994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.035323][ T8994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.047733][ T8994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.058083][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 635.110855][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 635.159539][ T8994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.201107][ T8994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.242138][ T8994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.249959][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 635.271619][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 635.283953][ T8994] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.400910][ T8994] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.422061][ T8994] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.430794][ T8994] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.795100][ T9284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1248'. [ 635.806180][ T9284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1248'. [ 636.372040][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.387192][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.564637][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 636.579290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 636.594501][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 637.396575][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 637.426609][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.488514][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.570680][ T9302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1251'. [ 637.733756][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.934515][ T9023] device veth0_vlan entered promiscuous mode [ 638.153537][ T9023] device veth1_vlan entered promiscuous mode [ 638.270360][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 638.282443][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 638.331626][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.339569][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.407495][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 638.488377][ T9023] device veth0_macvtap entered promiscuous mode [ 638.567302][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 638.682773][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 638.707853][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 639.027594][ T9023] device veth1_macvtap entered promiscuous mode [ 639.138648][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.229187][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.239504][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.262082][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.281091][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.291808][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.329069][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.363037][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.396969][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.442840][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.497404][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.570633][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 639.629830][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 639.770897][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 639.913499][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.021500][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.193074][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.395527][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.428452][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.658462][ T9023] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.889438][ T9340] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1258'. [ 640.900412][ T9340] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1258'. [ 641.305034][ T9023] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.481032][ T9023] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.549956][ T9023] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.676498][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 641.686821][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 642.113482][ T4341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.184813][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.203111][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.236968][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 642.313188][ T4341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.381055][ T1224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.403417][ T1224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.432673][ T4341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.470887][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 642.522942][ T4341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.961672][ T4341] tipc: Left network mode [ 644.985949][ T9358] Invalid ELF header magic: != ELF [ 646.163833][ T4341] device hsr_slave_0 left promiscuous mode [ 646.247333][ T4341] device hsr_slave_1 left promiscuous mode [ 647.668395][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.898874][ T9443] loop7: detected capacity change from 0 to 32768 [ 647.939944][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.949830][ T4341] device bridge_slave_1 left promiscuous mode [ 647.987444][ T9443] (syz.7.1280,9443,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 648.009391][ T9443] (syz.7.1280,9443,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 648.046945][ T9443] JBD2: Ignoring recovery information on journal [ 648.112564][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.169240][ T9443] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 648.211954][ T4341] device bridge_slave_0 left promiscuous mode [ 648.232139][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.362945][ T4341] device veth1_macvtap left promiscuous mode [ 648.371934][ T4341] device veth0_macvtap left promiscuous mode [ 648.378033][ T4341] device veth1_vlan left promiscuous mode [ 648.414148][ T9023] ocfs2: Unmounting device (7,7) on (node local) [ 648.527538][ T4341] device veth0_vlan left promiscuous mode [ 648.996299][ T9466] Invalid ELF header magic: != ELF [ 650.849154][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 650.923497][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 651.002250][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.062250][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.368876][ T4341] bond0 (unregistering): Released all slaves [ 651.891172][ T9475] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 651.898945][ T9475] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1288'. [ 655.330690][ T9551] Invalid ELF header magic: != ELF [ 655.975954][ T9569] netlink: 'syz.1.1307': attribute type 1 has an invalid length. [ 656.110471][ T9569] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1307'. [ 657.295990][ T26] audit: type=1800 audit(1789166677.822:48): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1310" name="addr_trtype" dev="configfs" ino=46661 res=0 errno=0 [ 657.325062][ T9594] nvmet_tcp: address family 255 not supported [ 658.247546][ T26] audit: type=1800 audit(1789166677.862:49): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1310" name="addr_trsvcid" dev="configfs" ino=46662 res=0 errno=0 [ 661.985351][ T4299] FS-Cache: Duplicate cookie detected [ 661.990860][ T4299] FS-Cache: O-cookie c=00000009 [p=00000006 fl=222 nc=0 na=1] [ 661.998558][ T4299] FS-Cache: O-cookie d=ffffffff8c747d80{AFS.cell} n=ffff888017a17000 [ 662.006656][ T4299] FS-Cache: O-key=[4] '73797a30' [ 662.011630][ T4299] FS-Cache: N-cookie c=0000000a [p=00000006 fl=2 nc=0 na=1] [ 662.018923][ T4299] FS-Cache: N-cookie d=ffffffff8c747d80{AFS.cell} n=ffff88807a161000 [ 662.027006][ T4299] FS-Cache: N-key=[4] '73797a30' [ 662.059689][ T9650] netlink: 'syz.1.1322': attribute type 1 has an invalid length. [ 662.225744][ T9650] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1322'. [ 666.560859][ T9710] Invalid ELF header magic: != ELF [ 670.789684][ T26] audit: type=1800 audit(1789166691.312:50): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1343" name="addr_trtype" dev="configfs" ino=46937 res=0 errno=0 [ 670.817795][ T9779] nvmet_tcp: address family 255 not supported [ 671.560870][ T26] audit: type=1800 audit(1789166691.342:51): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1343" name="addr_trsvcid" dev="configfs" ino=46938 res=0 errno=0 [ 674.016994][ T9817] loop1: detected capacity change from 0 to 512 [ 674.111978][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1350'. [ 674.744427][ T9817] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 677.066132][ T26] audit: type=1800 audit(1789166697.592:52): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1357" name="addr_trtype" dev="configfs" ino=47893 res=0 errno=0 [ 677.094859][ T9842] nvmet_tcp: address family 255 not supported [ 677.796728][ T26] audit: type=1800 audit(1789166697.622:53): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1357" name="addr_trsvcid" dev="configfs" ino=47895 res=0 errno=0 [ 681.777136][ T9886] loop1: detected capacity change from 0 to 16 [ 681.833018][ T9886] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 682.672454][ T9889] loop7: detected capacity change from 0 to 512 [ 682.696062][ T9889] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 683.671351][ T4299] FS-Cache: Duplicate cookie detected [ 683.676904][ T4299] FS-Cache: O-cookie c=00000009 [p=00000006 fl=222 nc=0 na=1] [ 683.684685][ T4299] FS-Cache: O-cookie d=ffffffff8c747d80{AFS.cell} n=ffff888017a17000 [ 683.693078][ T9902] kAFS: No cell specified [ 683.697678][ T4299] FS-Cache: O-key=[4] '73797a30' [ 683.703001][ T4299] FS-Cache: N-cookie c=0000000b [p=00000006 fl=2 nc=0 na=1] [ 683.710307][ T4299] FS-Cache: N-cookie d=ffffffff8c747d80{AFS.cell} n=ffff88807797b000 [ 683.718423][ T4299] FS-Cache: N-key=[4] '73797a30' [ 683.843511][ T26] audit: type=1800 audit(1789166704.372:54): pid=9907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1370" name="addr_trtype" dev="configfs" ino=47972 res=0 errno=0 [ 683.874446][ T9907] nvmet_tcp: address family 255 not supported [ 684.817244][ T26] audit: type=1800 audit(1789166704.402:55): pid=9907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1370" name="addr_trsvcid" dev="configfs" ino=47973 res=0 errno=0 [ 685.494078][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.500647][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.419884][ T9947] loop7: detected capacity change from 0 to 512 [ 688.465862][ T9947] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 689.372547][ T9964] netlink: 'syz.7.1383': attribute type 1 has an invalid length. [ 689.401240][ T9964] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1383'. [ 689.849050][ T9974] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1384'. [ 689.860186][ T9974] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1384'. [ 694.510536][T10038] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 694.545131][T10038] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1398'. [ 696.455172][T10071] loop6: detected capacity change from 0 to 512 [ 697.632573][T10071] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 698.368159][T10091] netlink: 'syz.6.1411': attribute type 1 has an invalid length. [ 698.406979][T10091] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1411'. [ 698.693473][T10102] o2cb: This node has not been configured. [ 698.706811][T10102] o2cb: Cluster check failed. Fix errors before retrying. [ 698.740101][T10102] (syz.7.1414,10102,0):user_dlm_register:675 ERROR: status = -22 [ 698.764705][T10102] (syz.7.1414,10102,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain1" [ 700.404368][T10130] loop6: detected capacity change from 0 to 512 [ 700.456195][T10130] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 700.497744][T10133] netlink: 'syz.7.1422': attribute type 1 has an invalid length. [ 700.526069][T10133] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1422'. [ 703.288422][T10181] loop5: detected capacity change from 0 to 16 [ 703.642170][T10181] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 704.421109][T10193] netlink: 'syz.5.1431': attribute type 1 has an invalid length. [ 704.461211][T10193] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1431'. [ 704.585976][T10169] loop7: detected capacity change from 0 to 8192 [ 707.151280][ T4235] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 707.612501][ T4235] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.691632][ T4235] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.750966][ T4235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 707.778837][ T4235] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 707.793899][ T4235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.852065][ T4235] usb 6-1: config 0 descriptor?? [ 708.821220][ T4235] usbhid 6-1:0.0: can't add hid device: -71 [ 708.829002][ T4235] usbhid: probe of 6-1:0.0 failed with error -71 [ 708.940391][ T4235] usb 6-1: USB disconnect, device number 7 [ 709.006764][T10281] loop7: detected capacity change from 0 to 512 [ 709.082618][T10281] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 710.135303][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1448'. [ 711.782029][T10304] netlink: 'syz.7.1451': attribute type 1 has an invalid length. [ 711.830550][T10304] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1451'. [ 712.679740][T10321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1454'. [ 714.223612][T10330] loop1: detected capacity change from 0 to 32768 [ 714.284300][T10330] (syz.1.1457,10330,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 714.299287][T10330] (syz.1.1457,10330,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 714.394418][T10330] JBD2: Ignoring recovery information on journal [ 714.625535][T10330] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 714.771288][T10330] [ 714.773697][T10330] ====================================================== [ 714.780726][T10330] WARNING: possible circular locking dependency detected [ 714.787824][T10330] syzkaller #0 Not tainted [ 714.792347][T10330] ------------------------------------------------------ [ 714.799383][T10330] syz.1.1457/10330 is trying to acquire lock: [ 714.805560][T10330] ffff88804b8eeab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x307/0x770 [ 714.814949][T10330] [ 714.814949][T10330] but task is already holding lock: [ 714.822330][T10330] ffff8880611d58e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 714.832662][T10330] [ 714.832662][T10330] which lock already depends on the new lock. [ 714.832662][T10330] [ 714.843078][T10330] [ 714.843078][T10330] the existing dependency chain (in reverse order) is: [ 714.852104][T10330] [ 714.852104][T10330] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 714.860637][T10330] down_read+0x44/0x2e0 [ 714.865417][T10330] ocfs2_start_trans+0x3a6/0x6f0 [ 714.870926][T10330] ocfs2_reserve_suballoc_bits+0x7a3/0x44b0 [ 714.877368][T10330] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 714.884255][T10330] ocfs2_extend_dir+0xd4a/0x4b90 [ 714.889755][T10330] ocfs2_prepare_dir_for_insert+0x2efd/0x52b0 [ 714.896372][T10330] ocfs2_mknod+0x876/0x2510 [ 714.901433][T10330] ocfs2_mkdir+0x192/0x420 [ 714.906391][T10330] vfs_mkdir+0x386/0x570 [ 714.911222][T10330] do_mkdirat+0x1dd/0x5c0 [ 714.916093][T10330] __x64_sys_mkdirat+0x85/0x90 [ 714.921412][T10330] do_syscall_64+0x4c/0xa0 [ 714.926400][T10330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 714.932850][T10330] [ 714.932850][T10330] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 714.940352][T10330] ocfs2_start_trans+0x2a7/0x6f0 [ 714.945866][T10330] ocfs2_xattr_set+0xe8b/0x1390 [ 714.951262][T10330] __vfs_setxattr+0x3d8/0x410 [ 714.956475][T10330] __vfs_setxattr_noperm+0x126/0x5e0 [ 714.962305][T10330] vfs_setxattr+0x167/0x2e0 [ 714.967347][T10330] setxattr+0x2cb/0x360 [ 714.972040][T10330] path_setxattr+0x147/0x290 [ 714.977175][T10330] __x64_sys_setxattr+0xb7/0xd0 [ 714.982570][T10330] do_syscall_64+0x4c/0xa0 [ 714.987536][T10330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 714.993966][T10330] [ 714.993966][T10330] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 715.004549][T10330] down_write+0x38/0x60 [ 715.009302][T10330] ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 715.015747][T10330] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 715.022623][T10330] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 715.028799][T10330] ocfs2_xattr_set+0xc68/0x1390 [ 715.034196][T10330] __vfs_setxattr+0x3d8/0x410 [ 715.039425][T10330] __vfs_setxattr_noperm+0x126/0x5e0 [ 715.045257][T10330] vfs_setxattr+0x167/0x2e0 [ 715.050298][T10330] setxattr+0x2cb/0x360 [ 715.054995][T10330] path_setxattr+0x147/0x290 [ 715.060123][T10330] __x64_sys_setxattr+0xb7/0xd0 [ 715.065510][T10330] do_syscall_64+0x4c/0xa0 [ 715.070467][T10330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 715.076902][T10330] [ 715.076902][T10330] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 715.084747][T10330] __lock_acquire+0x2c66/0x7b50 [ 715.090183][T10330] lock_acquire+0x19e/0x400 [ 715.095235][T10330] down_read+0x44/0x2e0 [ 715.099933][T10330] ocfs2_init_acl+0x307/0x770 [ 715.105149][T10330] ocfs2_mknod+0x15de/0x2510 [ 715.110282][T10330] ocfs2_create+0x192/0x420 [ 715.115327][T10330] path_openat+0x120a/0x2fb0 [ 715.120457][T10330] do_filp_open+0x1df/0x400 [ 715.125502][T10330] do_sys_openat2+0x14b/0x500 [ 715.130719][T10330] __x64_sys_openat+0x135/0x160 [ 715.136107][T10330] do_syscall_64+0x4c/0xa0 [ 715.141064][T10330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 715.147502][T10330] [ 715.147502][T10330] other info that might help us debug this: [ 715.147502][T10330] [ 715.157741][T10330] Chain exists of: [ 715.157741][T10330] &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier [ 715.157741][T10330] [ 715.171664][T10330] Possible unsafe locking scenario: [ 715.171664][T10330] [ 715.179126][T10330] CPU0 CPU1 [ 715.184510][T10330] ---- ---- [ 715.189924][T10330] lock(&journal->j_trans_barrier); [ 715.195229][T10330] lock(sb_internal#2); [ 715.202011][T10330] lock(&journal->j_trans_barrier); [ 715.209832][T10330] lock(&oi->ip_xattr_sem); [ 715.214438][T10330] [ 715.214438][T10330] *** DEADLOCK *** [ 715.214438][T10330] [ 715.222608][T10330] 8 locks held by syz.1.1457/10330: [ 715.227813][T10330] #0: ffff88814a846460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 715.237074][T10330] #1: ffff88804b8eed88 (&type->i_mutex_dir_key#24){++++}-{3:3}, at: path_openat+0x821/0x2fb0 [ 715.247381][T10330] #2: ffff8880707c2648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 715.261079][T10330] #3: ffff8880707c09c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 715.274764][T10330] #4: ffff8880707c6d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x11c/0x2630 [ 715.288714][T10330] #5: ffff88814a846650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xf70/0x2510 [ 715.297972][T10330] #6: ffff8880611d58e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 715.308754][T10330] #7: ffff8880433f2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 715.318482][T10330] [ 715.318482][T10330] stack backtrace: [ 715.324386][T10330] CPU: 1 PID: 10330 Comm: syz.1.1457 Not tainted syzkaller #0 [ 715.331864][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 715.342003][T10330] Call Trace: [ 715.345302][T10330] [ 715.348264][T10330] dump_stack_lvl+0x188/0x250 [ 715.352994][T10330] ? load_image+0x410/0x410 [ 715.357535][T10330] ? show_regs_print_info+0x20/0x20 [ 715.362760][T10330] ? print_circular_bug+0x12b/0x1a0 [ 715.367985][T10330] check_noncircular+0x296/0x330 [ 715.372959][T10330] ? add_chain_block+0x9b0/0x9b0 [ 715.377917][T10330] ? _find_first_zero_bit+0xd1/0xf0 [ 715.383185][T10330] ? add_lock_to_list+0x18d/0x280 [ 715.388486][T10330] __lock_acquire+0x2c66/0x7b50 [ 715.393381][T10330] ? from_kuid_munged+0x6e0/0x6e0 [ 715.398467][T10330] ? verify_lock_unused+0x140/0x140 [ 715.403699][T10330] ? __lock_acquire+0x7b50/0x7b50 [ 715.408745][T10330] ? do_raw_spin_lock+0x128/0x2f0 [ 715.413911][T10330] lock_acquire+0x19e/0x400 [ 715.418456][T10330] ? ocfs2_init_acl+0x307/0x770 [ 715.423368][T10330] ? __might_sleep+0xf0/0xf0 [ 715.428039][T10330] ? read_lock_is_recursive+0x10/0x10 [ 715.433453][T10330] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 715.440078][T10330] ? rcu_lock_release+0x5/0x20 [ 715.444907][T10330] down_read+0x44/0x2e0 [ 715.449092][T10330] ? ocfs2_init_acl+0x307/0x770 [ 715.453978][T10330] ocfs2_init_acl+0x307/0x770 [ 715.458684][T10330] ? ocfs2_mknod_locked+0x155/0x290 [ 715.463919][T10330] ? ocfs2_acl_chmod+0x330/0x330 [ 715.468893][T10330] ? dquot_alloc_inode+0x821/0x9b0 [ 715.474034][T10330] ? ocfs2_block_signals+0x97/0xe0 [ 715.479175][T10330] ? ocfs2_init_security_get+0x135/0x1a0 [ 715.484834][T10330] ocfs2_mknod+0x15de/0x2510 [ 715.489456][T10330] ? ocfs2_mkdir+0x420/0x420 [ 715.494077][T10330] ? lockdep_hardirqs_on+0x94/0x140 [ 715.499313][T10330] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 715.505233][T10330] ? release_firmware_map_entry+0x190/0x190 [ 715.511151][T10330] ? __wake_up_common+0x5b/0x4d0 [ 715.516121][T10330] ? ocfs2_inode_unlock+0xa1/0x140 [ 715.521255][T10330] ? __lock_acquire+0x7b50/0x7b50 [ 715.526307][T10330] ? __rwlock_init+0x140/0x140 [ 715.531101][T10330] ? do_raw_spin_unlock+0x11d/0x230 [ 715.536325][T10330] ? rcu_is_watching+0x11/0xa0 [ 715.541118][T10330] ? ocfs2_lookup+0x4a8/0x960 [ 715.545824][T10330] ocfs2_create+0x192/0x420 [ 715.550352][T10330] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 715.556614][T10330] ? ocfs2_lookup+0x960/0x960 [ 715.561306][T10330] ? HAS_UNMAPPED_ID+0x1c5/0x220 [ 715.566272][T10330] ? inode_permission+0xef/0x480 [ 715.571228][T10330] ? bpf_lsm_inode_create+0x5/0x10 [ 715.576389][T10330] ? security_inode_create+0xb3/0x100 [ 715.581806][T10330] ? ocfs2_lookup+0x960/0x960 [ 715.586502][T10330] path_openat+0x120a/0x2fb0 [ 715.591110][T10330] ? finish_lock_switch+0x12d/0x290 [ 715.596450][T10330] ? do_filp_open+0x400/0x400 [ 715.601165][T10330] ? mark_lock+0x94/0x320 [ 715.605518][T10330] do_filp_open+0x1df/0x400 [ 715.610040][T10330] ? vfs_tmpfile+0x300/0x300 [ 715.614642][T10330] ? preempt_schedule_common+0xa5/0xd0 [ 715.620133][T10330] ? _raw_spin_unlock+0x36/0x40 [ 715.625000][T10330] ? alloc_fd+0x59e/0x650 [ 715.629350][T10330] do_sys_openat2+0x14b/0x500 [ 715.634052][T10330] ? lockdep_hardirqs_on+0x94/0x140 [ 715.639280][T10330] ? do_sys_open+0xe0/0xe0 [ 715.643723][T10330] ? __x64_sys_openat+0x118/0x160 [ 715.648804][T10330] __x64_sys_openat+0x135/0x160 [ 715.653699][T10330] do_syscall_64+0x4c/0xa0 [ 715.658155][T10330] ? clear_bhb_loop+0x30/0x80 [ 715.662865][T10330] ? clear_bhb_loop+0x30/0x80 [ 715.667566][T10330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 715.673523][T10330] RIP: 0033:0x7fd3c4f09159 [ 715.677970][T10330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.697597][T10330] RSP: 002b:00007fd3c3140028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 715.706046][T10330] RAX: ffffffffffffffda RBX: 00007fd3c5191090 RCX: 00007fd3c4f09159 [ 715.714045][T10330] RDX: 00000000000c2741 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 715.722126][T10330] RBP: 00007fd3c4fa003b R08: 0000000000000000 R09: 0000000000000000 [ 715.730113][T10330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.738107][T10330] R13: 00007fd3c5191128 R14: 00007fd3c5191090 R15: 00007ffd987ef638 [ 715.746113][T10330] [ 715.749182][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.083019][ T4186] ocfs2: Unmounting device (7,1) on (node local)