last executing test programs: 10m43.850179826s ago: executing program 2 (id=33): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40002002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 10m43.73135875s ago: executing program 2 (id=34): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0xc000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) signalfd4(r1, &(0x7f0000000340)={[0xfffffffffffffffe]}, 0x8, 0x800) 10m43.162293737s ago: executing program 2 (id=38): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='9d', 0x2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r1, &(0x7f0000000240)=""/85, 0x55, 0x100, 0x0, 0x0) 10m43.021252751s ago: executing program 2 (id=40): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 10m41.999800963s ago: executing program 2 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 10m41.019266883s ago: executing program 2 (id=51): openat$nullb(0xffffffffffffff9c, 0x0, 0x185042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = shmat(0x0, &(0x7f00001bd000/0x2000)=nil, 0x4000) shmdt(r0) 10m25.605931914s ago: executing program 32 (id=51): openat$nullb(0xffffffffffffff9c, 0x0, 0x185042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==") sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = shmat(0x0, &(0x7f00001bd000/0x2000)=nil, 0x4000) shmdt(r0) 8m34.467836966s ago: executing program 3 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019c80)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac14141608000740000000050800048004000380080008400000a90224000f8008000140000005d5080003400000000e08000240000000e5070003"], 0x98}}, 0x4004000) 8m33.800566677s ago: executing program 3 (id=836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xc, r3, 0x16}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="f2", 0x1}], 0x1}, 0x44) 8m31.392609851s ago: executing program 3 (id=844): syz_open_dev$video(0x0, 0x3ff, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 8m30.193899378s ago: executing program 3 (id=851): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x20000020, 0x0) 8m29.80431833s ago: executing program 3 (id=852): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 8m28.535114668s ago: executing program 3 (id=858): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full', 0x20, 0x20, 0x20, 0xfffffffffffffffe}, 0x2f) sendmsg$kcm(r2, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x40080) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c810) 8m12.746602062s ago: executing program 33 (id=858): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full', 0x20, 0x20, 0x20, 0xfffffffffffffffe}, 0x2f) sendmsg$kcm(r2, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x40080) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c810) 5m1.390310282s ago: executing program 4 (id=1374): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) memfd_create(&(0x7f0000000680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xf2w\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) splice(r0, 0x0, r1, 0x0, 0x10, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x3, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m0.747745582s ago: executing program 4 (id=1377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x0, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x2, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x10003, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x4, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x8000, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0xd2bf, 0x200, 0x6]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {0x5}, {0xa, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x10) 4m58.896741507s ago: executing program 4 (id=1380): r0 = socket$unix(0x1, 0x1, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) close(r0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000240)=0x80, 0x4) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 4m56.629177635s ago: executing program 4 (id=1386): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0) 4m54.946322006s ago: executing program 4 (id=1389): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580)) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x62040200) 4m52.451311761s ago: executing program 4 (id=1398): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) recvfrom(r1, &(0x7f00000004c0)=""/233, 0xe9, 0x40002000, &(0x7f00000005c0)=@hci={0x1f, 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448fa, &(0x7f0000000000)="3a4da9bc2810fb3b8123087bd1c3a90a3c53dd5d8262b8fbc4e55edeea5caf5d74a0d20e6813107c11092c4b9f671a7ba95781b3195e68c443385889a3d2bc991fb68e38f08253b6ed4f11b0e49133ebdacf8a85c09050517b3c7e66f10170dbd8badd42b4b3005240027f4bce0a2048fc07ea82a7") 4m35.933646967s ago: executing program 34 (id=1398): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) recvfrom(r1, &(0x7f00000004c0)=""/233, 0xe9, 0x40002000, &(0x7f00000005c0)=@hci={0x1f, 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448fa, &(0x7f0000000000)="3a4da9bc2810fb3b8123087bd1c3a90a3c53dd5d8262b8fbc4e55edeea5caf5d74a0d20e6813107c11092c4b9f671a7ba95781b3195e68c443385889a3d2bc991fb68e38f08253b6ed4f11b0e49133ebdacf8a85c09050517b3c7e66f10170dbd8badd42b4b3005240027f4bce0a2048fc07ea82a7") 9.526609753s ago: executing program 6 (id=2093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda108000000000026010000f8ffffffb702000008000000b703000000000000850000007b00000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.737797627s ago: executing program 1 (id=2097): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) close(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 6.65000517s ago: executing program 6 (id=2099): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r1, r1}, &(0x7f00000000c0)=""/47, 0x2f, &(0x7f0000000040)={&(0x7f0000000280)={'crct10dif-generic\x00'}}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x8, 0x0, 0x8, 0x8, 0x8, 0x4c, 0x2, 0x6, 0x4, 0x4, 0x3, 0x1, 0xa6}, {0x7ff, 0x6, 0x6, 0x1, 0x2, 0x4, 0x9, 0x8, 0x9, 0xee, 0xfd, 0x4, 0x3}, {0x9, 0xa, 0x9, 0x1, 0xff, 0x63, 0x6, 0x5, 0x2, 0x9, 0x3, 0x3, 0x2870}], 0xc2}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x4, 0x5, 0x0, 0x3, 0x4], 0x1, 0x202}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000100)={[{0x5, 0x7, 0x23, 0x9, 0x4, 0x4, 0x3, 0x0, 0xf8, 0x1, 0x42, 0xf8, 0xfffffffffffffff7}, {0xb9, 0x9, 0x8, 0xdb, 0xf3, 0x9, 0x1, 0x40, 0x9, 0xe4, 0x9, 0xf2, 0xc27e}, {0x101, 0xc, 0x40, 0x9, 0x7, 0x2, 0xc0, 0x6, 0x4, 0x36, 0x1, 0xd, 0x6b}], 0x6}) r2 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f00000015c0), 0x42001, 0x0) write$damon_monitor_on(r2, &(0x7f0000001600), 0x20001603) ioctl$KVM_RUN(r0, 0xae80, 0x0) 6.460988425s ago: executing program 6 (id=2100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r5) close(r3) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r6, &(0x7f0000001480)=0x2, 0x12) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) 5.807675305s ago: executing program 1 (id=2102): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) setfsuid(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x4}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) 5.766753096s ago: executing program 5 (id=2103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x2, 0x244}) io_uring_enter(r2, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) 5.513119844s ago: executing program 0 (id=2104): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000100)={[{@user_xattr}, {@noquota}, {@mb_optimize_scan}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1f}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1cc4}}]}, 0x5, 0x7eb, &(0x7f00000004c0)="$eJzs3c9rXFsdAPDvnUx+mLYmgmDrKiBooGRiamwVXFRciGChoGvbYTINNZNMyUxKEwK1iOBG0OJC0E3XVevOrT+2+i/oRkRaqqbltbzFI487P5KZZCad9E1m3ms+H7jJOffHnPO9P849yT3cCeDUmkl/ZCIuRMTPk4ipxvwkIkZrqWzE1fp6r3a2C+mUxO7u9/6X1NZ5ubNdiJZtYnIyzjQy5yPiLz+JuJg5XG5lc2slXyoV1xv5+erqnfnK5tbc7dX8cnG5uHZ5YXHx0pWvXhnvX6zv/X3r7LNffPtLv7/6/o8/9+Rnf03iapxtLGuNo19mYqa+T2I03YVtvtXvwoYsGXYFeCvppTlSv8rjQkxlY6z3bbMnWTEA4MTcj4hdAOCUSdz/AeCUaf4f4OXOdiGddu8P9/8Rg/b8mxExUY+/+XyzviTbeGY3UXsOOvkyaXvekUTEdB/Kn4mI3/zxB79Npzih55AAnfzoQUTcnJ5ptv/77U9yaMxCXe8DMr7cTBwxOGDmQF77B4Pzp7T/87X9/t/+9ZfZ6/9Eh/7PeIdr923MRPuIk8PXf+ZpH4rpKu3/fWN0f2zbq5b4G6ZHGrlztT7faHLrdqmYtm2fjojZGB1P8wudP742vGz2xQcv2ua2RNza//v/wx8+TstPf++vkXmaPdDkLuWr+X7Ennr+IOLz2U7xJ3vHP+nS/73eYxnf+fpPf91tWRp/Gm9zao//5EeV7T6K+GJ0jr8paYxPbB6GtvGJl+drp8N886To4A//+tVkt/Jbj386peXX/xY4199Au0iP/+TR8U8nreM1K8cv42+Ppv4ce+NJ23WPv6nz+T+WfL+Wbl5K9/LV6vpCxFjy3cPzL+1v28w310/jn/1C5+v/qPM/jeVmj/Fnn/33d92W7cXfnHEo/oaJHgs7pjT+pWMd/46J9E/hLovypSevVka6ld/b8V9MEyOzjTm9tH9da5ovlcZa1nnrHQcAAAAAAAAAAAAAAAAAAAAAAAAAx5CpvaQ0yeT20plMLhe17/D+bExmSuVK9eKt8sbaUv1lptMxOh4RtVddTrW8D3Wh8T78Zv7SgfxXIuIzEfHL8U/V8rlCubQ07OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOFMl+//T/1nvP779VBrCACciIk3rvGiOJCKAAAD8+b7f0SMn3w9AIDB6en+DwC8U9z/AeD0mcgMuwYAwKBNRGSHXQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADeadevXUun3dc724U0v3R3c2OlfHduqVhZya1uFHKF8vqd3HK5vFwq5grl1ZZN/9Hp80rl8p3FWNu4N18tVqrzlc2tG6vljbXqjdur+eXijeLowCIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN5VNrdW8qVScb2ReDwZ0T5nQImRRoX6+clzZwcdxSASu1P1PfVxqU/fExMH5/x77p/nj9rq4aHTWOIjJ4bZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8cnwYAAD//0ldFl4=") r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001a00010029bd7000000000000220200000000000002000000800", @ANYRES32, @ANYBLOB="08000500ac1414aa0800"], 0x3c}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'bond0\x00', 0xa}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)="43210098") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) openat(0xffffffffffffff9c, 0x0, 0x4a242, 0x1a1) write$FUSE_GETXATTR(r3, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x6f}}, 0x18) 5.241916252s ago: executing program 0 (id=2105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 4.938108631s ago: executing program 6 (id=2106): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc8001, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x0, 0x2, 0xffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.368398318s ago: executing program 1 (id=2107): ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000800)=ANY=[@ANYBLOB="20040000f303080026bd7000ffdbdf251000000001000000030000000400000080000000400000000002000001000000060000000000"], 0x420}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 4.315207s ago: executing program 5 (id=2108): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x8, &(0x7f0000000540)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) close(0x3) r5 = accept$alg(r4, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 4.009300779s ago: executing program 0 (id=2109): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x48001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xd}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x8, 0x2, 0xc000, 0x6, 'syz0\x00', 0xfffffffa}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0x8, 0x4, 0x7, 0x6, 'syz0\x00', 0x9}, 0x2, 0x20, 0x5, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2025, &(0x7f00000002c0)={[{@uid}, {@session={'session', 0x3d, 0xd685}}, {@type={'type', 0x3d, ' qs!'}}, {@barrier}, {@uid}, {@force}, {@nls={'nls', 0x3d, 'macromanian'}}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@nobarrier}, {@creator={'creator', 0x3d, "ef6a7415"}}], [{@pcr={'pcr', 0x3d, 0x1b}}, {@measure}, {@subj_role={'subj_role', 0x3d, 'nobarrier'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '%'}}]}, 0xfc, 0x6e0, &(0x7f0000000580)="$eJzs3c1vHGcdB/Dv7K7fUtE4bdIWVImoEQURkfhFKQQJJSCEfKhQBAckbiZxGiubtLJdcCME4f3aQ/+A9pAbJyTuQeUMFwRHi1MlRC+cfFs0s7Prje111nESx/D5VLPzzDzvv52Z3dnUmgD/txbOpnU/RRbOvrlebm/cm29v3JufqLPbScp0I2l1VyluJ8XHyeV0l3y23FmXL4b188Hyxe/9/T8bn3S3WvVSlW/srPfzTpIvjD6Lu/WS00ma9XqnsW3bE8nkw9u7OrS9fit9u8+/6OeUATvTCxwcts4Od/dTfej5DhwdRb7xmd32TyfH0v2YrD7n6qtD4+mO7vHb11UOAAAADtnCv0/N7af8VL0+vpnNrB/523gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4qoqk2V1VS6OXPp2i9/z/8Xpf6vSRdv+wBwAAAAAAAAAAO4w9sDWeZKK3cWn3Gp/fzGbW83xvu1NU/+b/WrVxsnp9Lu9mNUtZybmsZzFrWctKZpNMD3a2vri2tjI7Qs25XWvOPTiu5mgTnhytGAAAAAAAAAD8z/tlFrb+/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4FRdLsrqrlZC89nUYryWSS8bLc3eSvvfQRUey28/7THwcAAAAcyOQj1Dm+mc2s5/nedqeo7vlfqu6XJ/Nubmcty1lLO0u5Vt9Dl3f9jY178+2Ne/O3yuXAQ69aTPe3h917fqUqMZXrWa72nMvVajDX0qhqlv6Z5FZvTDvH9YtPy7Yvdf1kxJFdq9dlZ+/3fkWYOPCEH4PppNXIWD8iM9XYugfBicEo7IzENz8d1ujl7qq1vacM9jSbRv+Xn5PdHsrkQ2N+acSZHavX5Xx+O+yXm8dtcqvTu0ML9SPRSBWJuYGj76W9Y5588Y+/f/9G+/bNG9dXzz6VKT1J24+J+YFIvDxCJH7wzEaitXd2Y/uOmWrnqd7mR88l+X7O5nSuZCXL+XEWs5alFPVMF+vjuXyd3jtSlx/YujJkAH3j9fvSrMv1x5SFfGfXMZ3Ot6vUYl6r6j6f5RR5O9eylDeq/+Yym6/mQi7k4sA7fGrouKu5VWd9Y39n/Zkv1YmpJL+r14ete1Eo43piIK6D19zpKm9rz9hAlF7Y+93deW18+JRbn6sTZR+/2vNoeNq2R2J2IBIv7h2Jjzrl62r79s2VG4vv7PLp2inGqvXfziSdTnff63VeecT95uFff/500Pk9xMB1rDxeXshkfSU5kbHu0Jq9vBf7V5kqXuOD9U728x78xB3PZHk+N7o9dc/U7w49U8fr73A7W5qr8l7eNW++yntlIG/w+1bydtr970MAPMOOffnY+NS/pv4y9eHUr6duTL05+a2Jr028Op6xP499vTXTfL3xavGHfJifbd3/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj271vTs3F9vtpZXdE43m0KwhiXTu3FzsPcln1FpZLeon6eyrr8NK9B/584yM54kkih17yhk/ni56Tz7aX62ZnUfU5cMM1D/2WyuTA1NuDi18rE50jnejtK8uprcfmcmQwhPdYDaHnKf1W/QoDxcFjoTza7feOb/63p2vLN9afGvpraXbYxcuXJy5eOGN+fPXl9tLM93Xwx4l8CRsfW8HAAAAAAAAAAAAjooR/67gyg9/VP0fgo/09xKHPUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaFs4m9b9FJmdOTdTbm/cm2+XSy+9VbKVpNFIip8mxcfJ5XSXTA80Vwzr54Pli80kn2y11eqVb+xRrzMx0izu1ktOJ2nW6wN4oL2rB26v6M+wDNiZXuDgsP03AAD//9ev6fg=") mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) 3.925605872s ago: executing program 6 (id=2110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xffff68e8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002f0000000000000018020000", @ANYRES32, @ANYBLOB="00000000000000009500000c0000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.064990577s ago: executing program 1 (id=2111): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.96900335s ago: executing program 0 (id=2112): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.96434833s ago: executing program 5 (id=2113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() sigaltstack(&(0x7f0000000000)={&(0x7f00000020c0)=""/4099, 0x80000000, 0xfffffffffffffefe}, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 1.884511993s ago: executing program 5 (id=2114): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="13000000", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.884219353s ago: executing program 0 (id=2115): r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x1400037e) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x33df, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000040)}, 0x20) 1.305140861s ago: executing program 1 (id=2116): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) r0 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000001f80)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, 0x0, 0x0, 0x36, 0x0, 0x0, r0}]) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{0x0, 0x1c}], 0x1}, 0x4000080) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.192623334s ago: executing program 5 (id=2117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) memfd_secret(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 1.122651836s ago: executing program 6 (id=2118): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a00000000000073112c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000002a40)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x205, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xfffffff8}]}, 0x28}}, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb2ec73c79280986dd606410a60008000000000000000000000000ffff00000000fe8000000000000000000000000000aa330001000000ff05fc35ff57755f0f2290cca9c8d95af8ca47a4c56a6ac55db1d67346d2583398769a9c04ba78852242c896fa3407923111519c8f4f16bea8da0008fa36b762088cb2eb191dfd452a63990d75dde6310478e5463ae42f25a26b7645aa7357a59f19f163f37f09e1c18829f5005d970a08964142f68176a6e0db"], 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2300021, &(0x7f00000002c0)='\x17\xec\xa5Y\xf0\xcc\xda\x84y\xb5\xb2Fm\xa4\xef\x90\x8a\x11\xa9\x81\xab\xb1\bZ\xc91\xd8(O[\xbd\xc5\n^\xa5\xc6\x7f+E\xef\xf3\xaa\xd8]0rQ#\x8f\x1c\x01\xcd\x1f\xf3\x11{\x01\xd8\xcc\x8e\xcec\xc4p\xe76;\x1f\xe6\xb0:\xaaP\x9fr\xeff\xe8\x98l\xbf\xed\xd0IG>\x8e\xe1\x10\xa6?\xcf\x85-\x03H\"\x92&\x1eF\xfe)\x16\xf0!I\x88|.z') syz_usb_connect$uac1(0x2, 0xb4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 916.598203ms ago: executing program 1 (id=2119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, r4, 0x333, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4048055}, 0x0) 791.915626ms ago: executing program 0 (id=2120): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x141000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000206030000000300686173683a69000000000100000000000900020073797a311b000097cc26afc28057001400078008001340000017e508001240000000090000000000"], 0x48}}, 0x4080) socket(0x1, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x48000, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1000, 0xffff8000) 0s ago: executing program 5 (id=2121): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x25c08}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) kernel console output (not intermixed with test programs): 096711][ T8477] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 203.895029][ T8490] tipc: Started in network mode [ 203.921859][ T8490] tipc: Node identity ac1414aa, cluster identity 4711 [ 203.928733][ T8490] tipc: Enabling of bearer rejected, failed to enable media [ 204.030763][ T8490] tipc: Enabled bearer , priority 0 [ 204.854685][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.828'. [ 205.143817][ T5810] tipc: Node number set to 2886997162 [ 206.933163][ T8520] bond3: entered allmulticast mode [ 207.015148][ T8524] bond3: (slave ip6gretap1): no link monitoring support [ 207.074824][ T8524] ip6gretap1: entered allmulticast mode [ 207.116078][ T8524] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 207.310570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 207.765986][ T8531] netlink: 'syz.3.832': attribute type 3 has an invalid length. [ 208.283394][ T8544] syzkaller0: entered promiscuous mode [ 208.288916][ T8544] syzkaller0: entered allmulticast mode [ 208.401893][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'. [ 208.460472][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 208.495558][ T28] audit: type=1326 audit(1781868433.487:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7fc00000 [ 208.586458][ T28] audit: type=1326 audit(1781868433.487:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4830d9ce59 code=0x7fc00000 [ 209.804774][ T28] audit: type=1326 audit(1781868433.487:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7fc00000 [ 209.913076][ T28] audit: type=1326 audit(1781868433.487:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7fc00000 [ 210.036234][ T28] audit: type=1326 audit(1781868433.487:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7fc00000 [ 210.140600][ T28] audit: type=1326 audit(1781868433.487:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7fc00000 [ 210.229195][ T28] audit: type=1326 audit(1781868433.497:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7fc00000 [ 210.346980][ T28] audit: type=1326 audit(1781868433.497:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7fc00000 [ 210.474824][ T28] audit: type=1326 audit(1781868433.497:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7fc00000 [ 210.523500][ T8568] ref_ctr increment failed for inode: 0x328 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805aaeb900 [ 210.566520][ T28] audit: type=1326 audit(1781868433.497:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7fc00000 [ 211.011344][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 213.056502][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 213.654489][ T8610] (null): rxe_set_mtu: Set mtu to 4096 [ 213.745596][ T8610] lo speed is unknown, defaulting to 1000 [ 213.787508][ T8620] loop4: detected capacity change from 0 to 512 [ 213.909528][ T8620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.941438][ T8620] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.031159][ T8610] lo speed is unknown, defaulting to 1000 [ 214.049718][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 214.049731][ T28] audit: type=1800 audit(1781868439.077:909): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.863" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 214.141520][ T8610] lo speed is unknown, defaulting to 1000 [ 214.153422][ T28] audit: type=1800 audit(1781868439.137:910): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.863" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 214.231496][ T8628] EXT4-fs (loop4): shut down requested (2) [ 214.634453][ T6282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.605534][ T8639] binder: BINDER_SET_CONTEXT_MGR already set [ 216.669132][ T27] lo speed is unknown, defaulting to 1000 [ 216.681031][ T8639] binder: 8636:8639 ioctl 4018620d 200000000240 returned -16 [ 216.730487][ T8610] infiniband sz1: set down [ 216.736698][ T8610] infiniband sz1: added lo [ 216.742412][ T8640] binder: BINDER_SET_CONTEXT_MGR already set [ 216.749456][ T8640] binder: 8636:8640 ioctl 4018620d 200000000040 returned -16 [ 216.875084][ T8610] sz1: rxe_create_cq: returned err = -12 [ 216.971563][ T8610] infiniband sz1: Couldn't create ib_mad CQ [ 217.101123][ T8610] infiniband sz1: Couldn't open port 1 [ 217.480992][ T8647] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 217.598300][ T8610] RDS/IB: sz1: added [ 217.733931][ T8610] smc: adding ib device sz1 with port count 1 [ 217.802121][ T8610] smc: ib device sz1 port 1 has pnetid [ 217.906561][ T5810] lo speed is unknown, defaulting to 1000 [ 218.010044][ T8610] lo speed is unknown, defaulting to 1000 [ 219.311698][ T8671] tmpfs: Bad value for 'mpol' [ 219.332336][ T8671] mmap: syz.1.878 (8671): VmData 175874048 exceed data ulimit 1129. Update limits or use boot option ignore_rlimit_data. [ 221.089646][ T8610] lo speed is unknown, defaulting to 1000 [ 222.070980][ T5780] Bluetooth: hci4: command 0x0406 tx timeout [ 223.051232][ T8698] loop4: detected capacity change from 0 to 2048 [ 223.265805][ T8698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.226425][ T8610] lo speed is unknown, defaulting to 1000 [ 228.030549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 228.090575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 228.510548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 229.946349][ T8610] lo speed is unknown, defaulting to 1000 [ 230.203230][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 230.274564][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 230.321298][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 230.332073][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 230.388234][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 230.470850][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 230.561057][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 230.611855][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 230.661494][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 230.730881][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 230.833012][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.847269][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.860996][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.891534][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.912483][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.921268][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.500424][ T8744] lo speed is unknown, defaulting to 1000 [ 233.050156][ T5780] Bluetooth: hci3: command tx timeout [ 233.480219][ T8744] chnl_net:caif_netlink_parms(): no params data found [ 233.810834][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.819185][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.828003][ T8744] bridge_slave_0: entered allmulticast mode [ 233.839377][ T8744] bridge_slave_0: entered promiscuous mode [ 233.852805][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.861233][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.869850][ T8744] bridge_slave_1: entered allmulticast mode [ 233.886523][ T8744] bridge_slave_1: entered promiscuous mode [ 235.908965][ T5780] Bluetooth: hci3: command tx timeout [ 235.974406][ T8744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.097063][ T8744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.463779][ T8744] team0: Port device team_slave_0 added [ 236.544777][ T8744] team0: Port device team_slave_1 added [ 236.742214][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.750295][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.834619][ T8744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.850778][ T8780] loop4: detected capacity change from 0 to 1024 [ 236.878860][ T8780] EXT4-fs: Ignoring removed bh option [ 236.911271][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.929618][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.009966][ T8780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.017235][ T8744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.304629][ T8744] hsr_slave_0: entered promiscuous mode [ 237.322450][ T8744] hsr_slave_1: entered promiscuous mode [ 237.333862][ T8744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.350830][ T8744] Cannot create hsr debugfs directory [ 237.555403][ T6282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.991165][ T5780] Bluetooth: hci3: command tx timeout [ 238.590873][ T8744] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.656343][ T8744] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.705243][ T8744] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.743442][ T8744] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.354494][ T8744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.440315][ T8744] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.589839][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.598227][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.630571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 239.704760][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.713120][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.072455][ T5780] Bluetooth: hci3: command tx timeout [ 240.272906][ T8819] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 240.521522][ T8819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.644997][ T8823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.655537][ T8823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.701037][ T8823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.753492][ T8823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.926844][ T8823] bond1: (slave geneve2): making interface the new active one [ 241.055573][ T8823] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 242.251867][ T8744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.098823][ T8744] veth0_vlan: entered promiscuous mode [ 244.223012][ T8744] veth1_vlan: entered promiscuous mode [ 244.437428][ T8744] veth0_macvtap: entered promiscuous mode [ 244.490545][ T8744] veth1_macvtap: entered promiscuous mode [ 244.638525][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.718485][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.832850][ T8744] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.898120][ T8744] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.909000][ T8849] mmap: syz.4.936 (8849) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 244.926174][ T8744] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.963655][ T8744] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.381721][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.450809][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.582269][ T8866] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 245.797008][ T8866] bond3: entered allmulticast mode [ 245.892432][ T8867] ip6gretap1: entered promiscuous mode [ 245.958991][ T8867] ip6gretap1: entered allmulticast mode [ 245.966954][ T8867] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 246.023150][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.043236][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.193722][ T8881] lo speed is unknown, defaulting to 1000 [ 247.238982][ T8888] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 250.811586][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 250.818924][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 250.898030][ T8926] ceph: No mds server is up or the cluster is laggy [ 251.051610][ T28] audit: type=1804 audit(1781868476.077:911): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.962" name="file0" dev="ramfs" ino=17971 res=1 errno=0 [ 251.234337][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 251.241721][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 251.782960][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 251.817494][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 251.853047][ T8938] sctp: [Deprecated]: syz.0.964 (pid 8938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.853047][ T8938] Use struct sctp_sack_info instead [ 252.954540][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 252.973348][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 253.854249][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.873884][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.886235][ T28] audit: type=1326 audit(1781868478.917:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 253.968517][ T8943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.980765][ T28] audit: type=1326 audit(1781868478.917:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 254.039923][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 254.053982][ T28] audit: type=1326 audit(1781868478.957:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 254.195307][ T28] audit: type=1326 audit(1781868478.957:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 254.286696][ T28] audit: type=1326 audit(1781868478.957:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 254.374716][ T28] audit: type=1326 audit(1781868478.957:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 254.404189][ T28] audit: type=1326 audit(1781868478.957:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 254.432586][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'. [ 254.471485][ T28] audit: type=1326 audit(1781868478.977:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 254.499562][ T28] audit: type=1326 audit(1781868478.977:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 254.932120][ T8960] netlink: 'syz.4.971': attribute type 10 has an invalid length. [ 254.958175][ T8960] syz_tun: entered promiscuous mode [ 255.047047][ T8960] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 255.404261][ T5813] Process accounting resumed [ 255.836739][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.844353][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.873849][ T9005] netlink: 'syz.1.988': attribute type 7 has an invalid length. [ 262.898433][ T9005] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.909109][ T9005] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.919327][ T9005] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.929618][ T9005] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.057983][ T9005] netlink: 'syz.1.988': attribute type 7 has an invalid length. [ 263.104153][ T9005] netlink: 'syz.1.988': attribute type 7 has an invalid length. [ 263.937503][ T9010] Invalid ELF header len 7 [ 266.851615][ T9031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.997'. [ 266.962343][ T9031] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 267.391125][ T9033] netlink: 40 bytes leftover after parsing attributes in process `syz.1.997'. [ 267.490810][ T9033] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 270.142531][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 270.142563][ T28] audit: type=1326 audit(1781868495.167:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.1002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 270.282129][ T28] audit: type=1326 audit(1781868495.167:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.1002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 270.385681][ T28] audit: type=1326 audit(1781868495.167:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.1002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 270.560775][ T28] audit: type=1326 audit(1781868495.167:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.1002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 270.712063][ T28] audit: type=1326 audit(1781868495.177:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.1002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 270.860141][ T28] audit: type=1326 audit(1781868495.247:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.1002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4830d9ce59 code=0x7ffc0000 [ 270.999845][ T28] audit: type=1326 audit(1781868495.247:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.1002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4830d5d68e code=0x7ffc0000 [ 271.119874][ T28] audit: type=1326 audit(1781868495.247:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.1002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4830d5d68e code=0x7ffc0000 [ 271.250814][ T28] audit: type=1326 audit(1781868495.247:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.1002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4830d5d68e code=0x7ffc0000 [ 271.531129][ T28] audit: type=1326 audit(1781868495.247:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.1002" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4830d5d68e code=0x7ffc0000 [ 273.543341][ T9077] erspan0: left promiscuous mode [ 273.582492][ T9077] batadv_slave_1: left promiscuous mode [ 273.951903][ T9077] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.962560][ T9077] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.987290][ T9077] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.998413][ T9077] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.143540][ T9077] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.154352][ T9077] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.164762][ T9077] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.175483][ T9077] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.514835][ T9084] syz.4.1014 (9084): attempted to duplicate a private mapping with mremap. This is not supported. [ 274.929665][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 275.394137][ T9098] netlink: 'syz.4.1018': attribute type 4 has an invalid length. [ 275.523901][ T9098] netlink: 'syz.4.1018': attribute type 4 has an invalid length. [ 276.180680][ T5810] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 276.450935][ T5810] usb 6-1: Using ep0 maxpacket: 16 [ 276.473217][ T5810] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.507631][ T5810] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.518494][ T9118] loop4: detected capacity change from 0 to 512 [ 276.555822][ T9118] EXT4-fs: quotafile must be on filesystem root [ 276.591291][ T5810] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.621987][ T5810] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 276.633963][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.745750][ T5810] usb 6-1: config 0 descriptor?? [ 277.287583][ T5810] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 277.339760][ T5810] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 277.370727][ T5810] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 277.379535][ T5810] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 277.422198][ T5810] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 277.522155][ T5810] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 277.592708][ T5966] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 277.832802][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 277.881689][ T5966] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 277.918004][ T5966] usb 5-1: config 0 has no interface number 0 [ 277.956276][ T5966] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 278.017882][ T5966] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 278.078540][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 278.085749][ T5966] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 278.119173][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.159574][ T5966] usb 5-1: Product: syz [ 278.179925][ T5966] usb 5-1: Manufacturer: syz [ 278.190086][ T5966] usb 5-1: SerialNumber: syz [ 278.223416][ T5966] usb 5-1: config 0 descriptor?? [ 278.231971][ T9127] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 278.250947][ T9127] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 278.565132][ T9127] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 278.579998][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1031'. [ 278.611178][ T9127] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 278.801710][ T5810] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 278.847693][ T5966] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 279.012678][ T9138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1031'. [ 279.299346][ T9145] tipc: Failed to remove unknown binding: 66,0,0/0:1549544326/1549544328 [ 279.309497][ T9145] tipc: Failed to remove unknown binding: 66,0,0/0:1549544326/1549544327 [ 279.325651][ T9145] tipc: Failed to remove unknown binding: 66,0,0/0:1549544326/1549544328 [ 279.356388][ T9145] tipc: Failed to remove unknown binding: 66,0,0/0:1549544326/1549544327 [ 280.813473][ T5966] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 280.872425][ T5966] asix: probe of 5-1:0.34 failed with error -71 [ 280.956042][ T5966] usb 5-1: USB disconnect, device number 8 [ 281.560539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 281.740540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 281.860538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 281.920538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 282.040540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 282.268052][ T9] usb 6-1: USB disconnect, device number 2 [ 284.211577][ T9190] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 284.671661][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 284.671716][ T28] audit: type=1804 audit(1781868509.617:978): pid=9194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1052" name="bus" dev="ramfs" ino=19841 res=1 errno=0 [ 284.920800][ T28] audit: type=1804 audit(1781868509.637:979): pid=9194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1052" name="bus" dev="ramfs" ino=19841 res=1 errno=0 [ 285.872673][ T9200] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1053'. [ 293.613928][ T5966] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 293.662420][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'. [ 293.788948][ T9249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.820670][ T5966] usb 5-1: Using ep0 maxpacket: 8 [ 293.835484][ T9252] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 293.846713][ T5966] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 293.856452][ T5966] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.868215][ T5966] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.880373][ T5966] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.892153][ T5966] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.907466][ T5966] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 293.918284][ T9252] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 293.928509][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.267304][ T5966] usb 5-1: GET_CAPABILITIES returned 0 [ 294.284937][ T5966] usbtmc 5-1:16.0: can't read capabilities [ 294.621272][ T5966] usb 5-1: USB disconnect, device number 9 [ 294.905055][ T5780] Bluetooth: hci1: Malformed Event: 0x02 [ 295.319523][ T9249] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 295.404056][ T9249] bond4 (unregistering): Released all slaves [ 295.793155][ T9271] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 296.888066][ T9279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'. [ 297.201637][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'. [ 298.849231][ T9296] syzkaller0: entered promiscuous mode [ 298.923810][ T9296] syzkaller0: entered allmulticast mode [ 300.403033][ T9312] vlan2: entered promiscuous mode [ 300.409031][ T9312] bridge0: entered promiscuous mode [ 300.443898][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 300.511245][ T9312] vlan2: entered allmulticast mode [ 300.517366][ T9312] bridge0: entered allmulticast mode [ 300.701503][ T9317] bond0: (slave syz_tun): Releasing backup interface [ 300.780181][ T9317] bridge_slave_0: left allmulticast mode [ 300.807532][ T9317] bridge_slave_0: left promiscuous mode [ 300.831294][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.879496][ T9317] bridge_slave_1: left allmulticast mode [ 300.909381][ T9317] bridge_slave_1: left promiscuous mode [ 300.933069][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.955853][ T9317] bond0: (slave bond_slave_0): Releasing backup interface [ 300.984750][ T9317] bond0: (slave bond_slave_1): Releasing backup interface [ 301.046627][ T9317] team0: Port device team_slave_1 removed [ 301.057430][ T9317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.088266][ T9317] bond1: (slave wlan0): Releasing active interface [ 301.126180][ T9317] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 301.170941][ T9317] batadv1: entered promiscuous mode [ 301.278490][ T9317] bond1: (slave batadv1): Releasing active interface [ 301.301099][ T9317] batadv1: left promiscuous mode [ 302.301905][ T9317] bond2: (slave veth5): Releasing active interface [ 302.456644][ T9317] bond3: (slave veth7): Releasing active interface [ 302.895383][ T9337] overlayfs: failed to clone upperpath [ 304.014644][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1105'. [ 305.554521][ T9367] netlink: 'syz.5.1110': attribute type 4 has an invalid length. [ 305.703852][ T9368] netlink: 'syz.5.1110': attribute type 4 has an invalid length. [ 308.983114][ T9393] overlayfs: failed to clone upperpath [ 310.357641][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 311.166184][ T9406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.268876][ T9406] bond3: (slave bond4): Enslaving as an active interface with an up link [ 311.435437][ T9408] bond3 (unregistering): (slave bond4): Releasing backup interface [ 311.645717][ T9408] bond3 (unregistering): Released all slaves [ 314.655689][ T9439] trusted_key: encrypted_key: insufficient parameters specified [ 318.364608][ T9446] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-:/": -EINTR [ 318.663269][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.737722][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.434317][ T9483] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.1147'. [ 332.431386][ T9543] overlayfs: failed to clone upperpath [ 334.188141][ T9552] syz.0.1168(9552): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 335.804858][ T9569] Invalid ELF header magic: != ELF [ 340.470123][ T9596] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 340.500697][ T9596] CIFS mount error: No usable UNC path provided in device string! [ 340.500697][ T9596] [ 340.512917][ T9596] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 346.063132][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1197'. [ 346.133977][ T9630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.218093][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 346.657468][ T9632] macvlan2: entered promiscuous mode [ 346.695209][ T9632] macvlan2: entered allmulticast mode [ 346.705114][ T9639] loop4: detected capacity change from 0 to 128 [ 346.838081][ T9603] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 346.850842][ T9642] loop5: detected capacity change from 0 to 16 [ 346.870454][ T9637] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 346.914202][ T9642] erofs: (device loop5): mounted with root inode @ nid 36. [ 347.152081][ T9642] syz.5.1199: attempt to access beyond end of device [ 347.152081][ T9642] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 347.299077][ T9642] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -32 in[55, 4041] out[4096] [ 347.373365][ T28] audit: type=1800 audit(1781868572.397:980): pid=9642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1199" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 347.867460][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 348.191942][ T9652] team0: entered promiscuous mode [ 348.222245][ T9652] team0: entered allmulticast mode [ 348.253705][ T9652] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.326031][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1204'. [ 348.520933][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 349.418645][ T9655] team1: entered promiscuous mode [ 349.464488][ T9655] team1: entered allmulticast mode [ 349.502071][ T9655] 8021q: adding VLAN 0 to HW filter on device team1 [ 350.384474][ T9674] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 350.384474][ T9674] The task syz.0.1202 (9674) triggered the difference, watch for misbehavior. [ 350.647122][ T9675] : renamed from bond0 [ 353.284600][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.623472][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.955451][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.248662][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.363511][ T9713] netlink: 'syz.5.1226': attribute type 1 has an invalid length. [ 354.535849][ T9713] bond1: entered promiscuous mode [ 354.542078][ T9713] bond1: entered allmulticast mode [ 354.548362][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1226'. [ 354.754425][ T9714] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 354.838209][ T9714] bond1: (slave bridge2): making interface the new active one [ 354.890737][ T9714] bridge2: entered promiscuous mode [ 354.921535][ T9714] bridge2: entered allmulticast mode [ 354.965121][ T9714] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 355.102295][ T9715] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1226'. [ 355.208568][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 355.256675][ T9715] bond1: left promiscuous mode [ 355.263457][ T9715] bridge2: left promiscuous mode [ 355.269847][ T9715] bond1: left allmulticast mode [ 355.275609][ T9715] bridge2: left allmulticast mode [ 355.285178][ T9715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.677524][ T12] bond3: (slave ip6gretap1): Releasing backup interface [ 358.742767][ T12] ip6gretap1 (unregistering): left allmulticast mode [ 363.824523][ T9820] lo speed is unknown, defaulting to 1000 [ 364.450475][ T12] bond0: (slave wlan1): Releasing backup interface [ 364.716780][ T9820] lo speed is unknown, defaulting to 1000 [ 365.011475][ T9820] lo speed is unknown, defaulting to 1000 [ 365.035595][ T9820] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 365.091704][ T9834] fuse: Bad value for 'fd' [ 365.465092][ T9820] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 366.084663][ T9820] lo speed is unknown, defaulting to 1000 [ 366.181853][ T9820] lo speed is unknown, defaulting to 1000 [ 366.205480][ T9820] lo speed is unknown, defaulting to 1000 [ 366.450962][ T12] hsr_slave_0: left promiscuous mode [ 366.538813][ T12] hsr_slave_1: left promiscuous mode [ 366.603522][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.654224][ T12] bridge_slave_1: left allmulticast mode [ 366.730959][ T12] bridge_slave_1: left promiscuous mode [ 366.789285][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.153101][ T12] bridge_slave_0: left allmulticast mode [ 368.180859][ T12] bridge_slave_0: left promiscuous mode [ 368.187927][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.505964][ T12] bond3 (unregistering): Released all slaves [ 368.664699][ T12] bond2 (unregistering): Released all slaves [ 369.279208][ T12] bond1 (unregistering): Released all slaves [ 371.511567][ T12] team0 (unregistering): Port device team_slave_1 removed [ 371.617833][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.714696][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.450892][ T12] bond0 (unregistering): Released all slaves [ 372.561647][ T9820] lo speed is unknown, defaulting to 1000 [ 372.586920][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1255'. [ 372.598474][ T42] smc: removing ib device syz0 [ 373.057574][ T9869] tipc: Enabling of bearer rejected, failed to enable media [ 375.320771][ T28] audit: type=1326 audit(1781868600.337:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.0.1272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x0 [ 378.162621][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'. [ 378.452726][ T9934] 8021q: adding VLAN 0 to HW filter on device bond5 [ 378.605701][ T9941] macvlan3: entered promiscuous mode [ 378.667426][ T9941] bond5: entered promiscuous mode [ 378.684181][ T9941] macvlan3: entered allmulticast mode [ 378.734570][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.745482][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.755156][ T9941] bond5: entered allmulticast mode [ 378.822493][ T9941] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 381.412227][ T9973] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 384.820925][ T9997] lo speed is unknown, defaulting to 1000 [ 394.631640][T10063] 9pnet_fd: p9_fd_create_tcp (10063): problem connecting socket to 127.0.0.1 [ 394.659420][T10071] lo speed is unknown, defaulting to 1000 [ 394.810810][ T5810] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 395.196537][ T5810] usb 6-1: config 0 has no interfaces? [ 395.213519][ T5810] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.295631][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.438442][ T5810] usb 6-1: config 0 descriptor?? [ 396.093983][T10071] netlink: 63 bytes leftover after parsing attributes in process `syz.5.1310'. [ 396.177841][ T5813] usb 6-1: USB disconnect, device number 3 [ 397.539191][T10110] netlink: 'syz.5.1318': attribute type 1 has an invalid length. [ 397.919804][T10110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.330340][T10114] bond2: (slave veth0_to_bond): making interface the new active one [ 398.450992][T10128] ubi16: attaching mtd0 [ 398.527018][T10114] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 398.612217][T10133] Device name cannot be null; rc = [-22] [ 398.901104][T10128] ubi16: scanning is finished [ 398.951117][T10128] ubi16: empty MTD device detected [ 399.051848][T10119] bond2: entered promiscuous mode [ 399.057976][T10119] veth0_to_bond: entered promiscuous mode [ 399.202448][T10119] bond2: entered allmulticast mode [ 399.317209][T10119] veth0_to_bond: entered allmulticast mode [ 399.511467][T10128] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 399.592923][T10128] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 399.710792][T10128] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 399.730747][T10128] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 399.739531][T10128] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 399.849861][T10128] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 399.920744][T10128] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1287328913 [ 399.993918][T10128] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 400.044651][T10136] ubi16: background thread "ubi_bgt16d" started, PID 10136 [ 401.729567][T10168] loop4: detected capacity change from 0 to 256 [ 402.044020][T10168] FAT-fs (loop4): Directory bread(block 64) failed [ 402.081539][T10168] FAT-fs (loop4): Directory bread(block 65) failed [ 402.131283][T10168] FAT-fs (loop4): Directory bread(block 66) failed [ 402.139045][T10168] FAT-fs (loop4): Directory bread(block 67) failed [ 402.206415][T10168] FAT-fs (loop4): Directory bread(block 68) failed [ 402.266547][T10168] FAT-fs (loop4): Directory bread(block 69) failed [ 402.321400][T10168] FAT-fs (loop4): Directory bread(block 70) failed [ 402.329136][T10168] FAT-fs (loop4): Directory bread(block 71) failed [ 402.418700][T10168] FAT-fs (loop4): Directory bread(block 72) failed [ 402.418837][T10168] FAT-fs (loop4): Directory bread(block 73) failed [ 402.933104][ T28] audit: type=1800 audit(1781868627.957:982): pid=10168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1331" name="file1" dev="loop4" ino=1048639 res=0 errno=0 [ 403.217411][T10184] lo speed is unknown, defaulting to 1000 [ 404.262253][T10203] loop4: detected capacity change from 0 to 128 [ 404.414191][T10203] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.598357][T10203] ext4 filesystem being mounted at /277/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 405.155698][ T6282] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.411271][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1345'. [ 408.340248][T10241] xt_hashlimit: size too large, truncated to 1048576 [ 413.725151][T10277] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 414.549648][T10279] bond6: (slave veth7): Enslaving as an active interface with a down link [ 414.736527][T10280] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 416.187339][T10297] IPVS: Scheduler module ip_vs_ not found [ 416.333228][T10308] xt_TCPMSS: Only works on TCP SYN packets [ 418.494189][T10337] bridge_slave_0: left allmulticast mode [ 418.562056][T10337] bridge_slave_0: left promiscuous mode [ 418.601328][T10337] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.666551][T10337] bridge_slave_1: left allmulticast mode [ 418.684804][T10337] bridge_slave_1: left promiscuous mode [ 418.791599][T10337] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.917495][T10337] bond0: (slave bond_slave_0): Releasing backup interface [ 419.072325][T10337] bond0: (slave bond_slave_1): Releasing backup interface [ 419.769097][T10337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.909578][T10337] bond1: (slave geneve2): Releasing active interface [ 420.026464][T10337] bond6: (slave veth7): Releasing active interface [ 420.091013][ T5810] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 420.342652][ T5810] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 420.458614][ T5810] usb 6-1: config 0 interface 0 has no altsetting 0 [ 420.542776][ T5810] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 420.608834][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 420.673748][ T5810] usb 6-1: Product: syz [ 420.678735][ T5810] usb 6-1: Manufacturer: syz [ 420.686403][T10356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.741938][ T5810] usb 6-1: SerialNumber: syz [ 420.791942][ T5810] usb 6-1: config 0 descriptor?? [ 420.876463][ T5810] usb 6-1: selecting invalid altsetting 0 [ 421.107550][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1373'. [ 422.384715][ T5810] usb 6-1: USB disconnect, device number 4 [ 425.517495][T10415] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1385'. [ 425.554662][T10410] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1385'. [ 425.639560][T10411] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1385'. [ 427.036574][T10417] loop5: detected capacity change from 0 to 256 [ 427.208050][T10417] loop5: detected capacity change from 0 to 512 [ 427.306329][T10417] EXT4-fs (loop5): 1 truncate cleaned up [ 427.338471][T10417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.367572][T10428] lo speed is unknown, defaulting to 1000 [ 427.460338][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 427.876597][ T8744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.480670][T10444] team_slave_0: entered promiscuous mode [ 428.488064][T10444] team_slave_1: entered promiscuous mode [ 428.601424][T10444] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 428.726530][T10444] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 429.031313][T10451] bridge0: port 3(vlan2) entered blocking state [ 429.141491][T10451] bridge0: port 3(vlan2) entered disabled state [ 429.149422][T10451] vlan2: entered allmulticast mode [ 429.233050][T10451] bond0: entered allmulticast mode [ 429.300189][T10451] bond_slave_0: entered allmulticast mode [ 429.420974][T10451] bond_slave_1: entered allmulticast mode [ 429.465050][T10451] macvlan2: entered allmulticast mode [ 429.491984][T10451] team0: entered allmulticast mode [ 429.498105][T10451] team_slave_0: entered allmulticast mode [ 429.556081][T10451] team_slave_1: entered allmulticast mode [ 429.601368][T10451] vlan2: entered promiscuous mode [ 429.630009][T10451] bond0: entered promiscuous mode [ 429.656518][T10451] bond_slave_0: entered promiscuous mode [ 429.676047][T10451] bond_slave_1: entered promiscuous mode [ 429.701248][T10451] macvlan2: entered promiscuous mode [ 429.718054][T10451] team0: entered promiscuous mode [ 430.911310][T10477] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1399'. [ 431.070830][T10473] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1399'. [ 431.216813][T10474] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1399'. [ 434.890059][T10516] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 436.457226][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 440.228671][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.250862][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.229361][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.245485][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.257021][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.276262][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.309100][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 454.335175][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.942270][T10598] lo speed is unknown, defaulting to 1000 [ 456.391173][ T51] Bluetooth: hci0: command tx timeout [ 456.681344][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1434'. [ 458.474068][ T51] Bluetooth: hci0: command tx timeout [ 459.679837][T10598] chnl_net:caif_netlink_parms(): no params data found [ 460.274006][T10641] bridge0: port 1(veth0_to_bridge) entered blocking state [ 460.332168][T10641] bridge0: port 1(veth0_to_bridge) entered disabled state [ 460.400459][T10641] veth0_to_bridge: entered allmulticast mode [ 460.537754][T10641] veth0_to_bridge: entered promiscuous mode [ 460.547328][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1437'. [ 460.551099][ T51] Bluetooth: hci0: command tx timeout [ 460.732347][T10645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1439'. [ 461.298105][T10598] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.348173][T10598] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.401225][T10598] bridge_slave_0: entered allmulticast mode [ 461.434215][T10598] bridge_slave_0: entered promiscuous mode [ 461.614979][T10658] xt_policy: output policy not valid in PREROUTING and INPUT [ 461.882758][T10651] veth5: entered allmulticast mode [ 462.266717][T10598] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.330951][T10598] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.339429][T10598] bridge_slave_1: entered allmulticast mode [ 462.485385][T10598] bridge_slave_1: entered promiscuous mode [ 462.648601][ T51] Bluetooth: hci0: command tx timeout [ 462.871438][T10598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.889362][T10598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.118772][T10598] team0: Port device team_slave_0 added [ 463.190082][T10598] team0: Port device team_slave_1 added [ 463.457929][T10598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.501388][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.680611][T10598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.715928][T10598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.741614][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.890687][T10598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.392481][T10598] hsr_slave_0: entered promiscuous mode [ 464.499535][T10598] hsr_slave_1: entered promiscuous mode [ 467.380028][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 467.461350][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 467.560150][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 469.820889][T10715] tipc: Enabling of bearer rejected, failed to enable media [ 469.958197][T10598] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 470.073674][T10598] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 470.162019][T10721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.163187][T10598] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 470.360829][T10721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.430420][T10598] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 470.672882][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1453'. [ 470.771423][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1453'. [ 470.919413][T10728] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.930214][T10728] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.940510][T10728] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.950718][T10728] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.066858][T10732] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.140462][T10732] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.749994][T10598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.967882][T10598] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.098986][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.107341][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.233404][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.241729][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.358258][T10747] syzkaller0: entered promiscuous mode [ 472.412890][T10747] syzkaller0: entered allmulticast mode [ 473.485714][T10762] syzkaller0: entered promiscuous mode [ 473.492551][T10762] syzkaller0: entered allmulticast mode [ 479.545846][T10598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.653511][T10845] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 484.735074][T10840] macvtap1: entered promiscuous mode [ 484.761099][T10840] macvtap1: entered allmulticast mode [ 484.783973][T10840] veth1_vlan: entered allmulticast mode [ 484.931761][T10843] macvtap2: entered promiscuous mode [ 484.938042][T10843] macvtap2: entered allmulticast mode [ 485.241749][T10850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 485.251157][T10850] IPv6: NLM_F_CREATE should be set when creating new route [ 485.745436][ T28] audit: type=1326 audit(1781868710.777:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.1.1476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5379ce59 code=0x7fc00000 [ 485.872683][ T28] audit: type=1326 audit(1781868710.807:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.1.1476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efc5379ce59 code=0x7fc00000 [ 486.764629][T10851] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.775434][T10851] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.806793][T10851] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.818337][T10851] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.512343][T10598] veth0_vlan: entered promiscuous mode [ 487.595780][T10598] veth1_vlan: entered promiscuous mode [ 487.794256][ T28] audit: type=1326 audit(1781868712.827:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5379ce59 code=0x7ffc0000 [ 487.961214][ T28] audit: type=1326 audit(1781868712.827:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5379ce59 code=0x7ffc0000 [ 488.139772][ T28] audit: type=1326 audit(1781868712.827:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5379ce59 code=0x7ffc0000 [ 488.379739][ T28] audit: type=1326 audit(1781868712.827:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc5379ce59 code=0x7ffc0000 [ 488.511666][ T28] audit: type=1326 audit(1781868712.887:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 488.540071][ T28] audit: type=1326 audit(1781868712.897:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 488.635673][ T28] audit: type=1326 audit(1781868712.907:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 490.690097][ T28] audit: type=1326 audit(1781868712.927:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 491.090784][ T28] audit: type=1326 audit(1781868712.937:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 491.109728][T10598] veth0_macvtap: entered promiscuous mode [ 491.121733][ T28] audit: type=1326 audit(1781868712.947:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 491.121779][ T28] audit: type=1326 audit(1781868712.947:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 491.178741][ T28] audit: type=1326 audit(1781868712.957:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 491.375873][ T28] audit: type=1326 audit(1781868712.967:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 491.442106][T10885] netlink: 'syz.0.1484': attribute type 10 has an invalid length. [ 491.463769][T10885] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 491.591131][ T28] audit: type=1326 audit(1781868712.977:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 491.682652][T10598] veth1_macvtap: entered promiscuous mode [ 491.699738][ T28] audit: type=1326 audit(1781868712.987:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 491.760815][ T28] audit: type=1326 audit(1781868712.997:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 491.971131][ T28] audit: type=1326 audit(1781868713.037:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 492.141987][ T28] audit: type=1326 audit(1781868713.047:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5375d68e code=0x7ffc0000 [ 492.267680][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.348852][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.414030][T10598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.690795][T10905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1489'. [ 496.762154][T10598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.890438][T10598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.032233][T10598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.180085][T10598] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.376344][T10598] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.521600][T10598] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.646197][T10598] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.203363][T10932] bridge_slave_0: left allmulticast mode [ 500.265877][T10932] bridge_slave_0: left promiscuous mode [ 500.324369][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.459077][T10932] bridge_slave_1: left allmulticast mode [ 500.497717][T10932] bridge_slave_1: left promiscuous mode [ 500.504627][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.525337][T10932] bond2: (slave veth0_to_bond): Releasing active interface [ 500.540719][T10932] veth0_to_bond: left promiscuous mode [ 500.547333][T10932] veth0_to_bond: left allmulticast mode [ 500.708818][T10932] bond0: (slave bond_slave_0): Releasing backup interface [ 500.734109][T10932] bond_slave_0: left promiscuous mode [ 500.771669][T10932] bond_slave_0: left allmulticast mode [ 500.859161][T10932] bond0: (slave bond_slave_1): Releasing backup interface [ 500.896225][T10932] bond_slave_1: left promiscuous mode [ 500.903697][T10932] bond_slave_1: left allmulticast mode [ 500.929488][T10932] team_slave_0: left allmulticast mode [ 500.942977][T10932] team_slave_0: left promiscuous mode [ 501.000486][T10932] team0: Port device team_slave_0 removed [ 501.014262][T10932] team_slave_1: left allmulticast mode [ 501.022667][T10932] team_slave_1: left promiscuous mode [ 501.051050][T10932] team0: Port device team_slave_1 removed [ 501.068189][T10932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.077624][T10932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.090016][T10932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.098839][T10932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.137264][T10932] bond1: (slave bridge2): Releasing active interface [ 501.192387][T10932] bond0: (slave macvlan2): Releasing backup interface [ 501.216274][T10932] macvlan2: left promiscuous mode [ 501.222998][T10932] team0: left promiscuous mode [ 501.229677][T10932] macvlan2: left allmulticast mode [ 501.236002][T10932] team0: left allmulticast mode [ 501.253867][T10932] vlan2: left allmulticast mode [ 501.259634][T10932] bond0: left allmulticast mode [ 501.265568][T10932] vlan2: left promiscuous mode [ 501.271762][T10932] bond0: left promiscuous mode [ 501.278242][T10932] bridge0: port 3(vlan2) entered disabled state [ 501.310389][T10933] team0: Mode changed to "activebackup" [ 501.383860][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1497'. [ 501.402209][T10936] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 501.604755][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.623828][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.700014][T10930] lo speed is unknown, defaulting to 1000 [ 501.830112][ T76] hsr_slave_0: left promiscuous mode [ 501.847669][ T76] hsr_slave_1: left promiscuous mode [ 502.265115][ T76] bond3 (unregistering): Released all slaves [ 503.135716][ T76] bond2 (unregistering): Released all slaves [ 503.899444][ T76] bond1 (unregistering): Released all slaves [ 505.103469][T10968] loop5: detected capacity change from 0 to 256 [ 505.181003][T10968] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 507.703926][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 507.727670][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 507.736458][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 507.822383][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 507.852556][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 507.862664][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 508.218653][ T76]  (unregistering): Released all slaves [ 508.700337][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1504'. [ 508.886622][T10981] lo speed is unknown, defaulting to 1000 [ 509.990900][ T51] Bluetooth: hci4: command tx timeout [ 510.908311][T10981] chnl_net:caif_netlink_parms(): no params data found [ 511.183869][ T76] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.593074][ T76] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.868619][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 511.996408][ T76] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.081017][ T51] Bluetooth: hci4: command tx timeout [ 512.183232][T10981] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.236890][T10981] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.264633][T10981] bridge_slave_0: entered allmulticast mode [ 512.295507][T10981] bridge_slave_0: entered promiscuous mode [ 512.347520][ T76] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.380791][T10981] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.400172][T10981] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.408781][T10981] bridge_slave_1: entered allmulticast mode [ 512.426923][T10981] bridge_slave_1: entered promiscuous mode [ 512.574111][T10981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.624093][T10981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.858483][T10981] team0: Port device team_slave_0 added [ 512.915626][T10981] team0: Port device team_slave_1 added [ 513.801305][T10981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.848888][T10981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.021192][T10981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.112381][T10981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.132462][T10981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.161214][ T51] Bluetooth: hci4: command tx timeout [ 514.214848][T10981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.786578][T10981] hsr_slave_0: entered promiscuous mode [ 514.821052][T10981] hsr_slave_1: entered promiscuous mode [ 514.857696][T10981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.887138][T10981] Cannot create hsr debugfs directory [ 516.231130][ T51] Bluetooth: hci4: command tx timeout [ 516.458029][T11074] netlink: 'syz.1.1522': attribute type 27 has an invalid length. [ 516.551736][T11074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.566047][T11074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.150768][T11096] netlink: 'syz.1.1525': attribute type 4 has an invalid length. [ 517.356923][T11096] netlink: 'syz.1.1525': attribute type 4 has an invalid length. [ 517.581743][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 517.581795][ T28] audit: type=1326 audit(1781868742.607:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.5.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bd39ce59 code=0x7fc00000 [ 517.634228][T10981] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 517.713226][ T28] audit: type=1326 audit(1781868742.607:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.5.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f69bd39ce59 code=0x7fc00000 [ 517.776217][ T76] hsr_slave_0: left promiscuous mode [ 517.810228][ T76] hsr_slave_1: left promiscuous mode [ 517.824316][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.849484][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.894339][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.915655][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.945433][ T76] bridge_slave_1: left allmulticast mode [ 517.965700][ T76] bridge_slave_1: left promiscuous mode [ 517.997050][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.043833][ T76] bridge_slave_0: left allmulticast mode [ 518.056793][ T76] bridge_slave_0: left promiscuous mode [ 518.076192][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.285065][ T76] veth1_macvtap: left promiscuous mode [ 518.308684][ T76] veth0_macvtap: left promiscuous mode [ 518.321500][ T76] veth1_vlan: left promiscuous mode [ 518.339286][ T76] veth0_vlan: left promiscuous mode [ 520.071261][ T76] team0 (unregistering): Port device team_slave_1 removed [ 520.164879][ T76] team0 (unregistering): Port device team_slave_0 removed [ 520.273988][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.377331][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.232663][ T76] bond0 (unregistering): Released all slaves [ 521.407407][T10981] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 521.451880][T10981] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 521.604947][T10981] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 521.980889][T10981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.371293][T10871] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 522.547412][T10981] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.608546][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.615792][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.706938][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.714269][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.970758][T10871] usb 6-1: Using ep0 maxpacket: 8 [ 523.006093][T11161] bond7: entered allmulticast mode [ 523.080755][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1535'. [ 523.199901][T11167] bridge6: entered allmulticast mode [ 523.223759][T11167] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 523.320714][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1535'. [ 523.435138][T10871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.442619][T11161] bridge7: entered allmulticast mode [ 523.449852][T10871] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 523.461970][T10871] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 523.464971][T11161] bond7: (slave bridge7): Enslaving as an active interface with a down link [ 523.547264][T11175] xt_HMARK: spi-set and port-set can't be combined [ 524.199462][T11181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.252440][T11181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.280795][T11181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.309949][T11181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.378011][T11181] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.396636][T11181] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.436822][T11181] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.472742][T11181] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.600664][T10871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.631468][T10871] usb 6-1: config 0 descriptor?? [ 524.647259][T10981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.824760][ T9] usb 6-1: USB disconnect, device number 5 [ 525.042696][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1540'. [ 525.322700][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1540'. [ 526.586408][T10981] veth0_vlan: entered promiscuous mode [ 526.652898][T10981] veth1_vlan: entered promiscuous mode [ 526.795658][T10981] veth0_macvtap: entered promiscuous mode [ 526.845691][T10981] veth1_macvtap: entered promiscuous mode [ 526.936254][T10981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.013057][T10981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.084165][T10981] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.125601][T10981] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.160708][T10981] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.191380][T10981] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.500930][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.537109][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.645297][T11211] loop5: detected capacity change from 0 to 32768 [ 527.682835][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.716309][T11211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1542 (11211) [ 527.740735][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.800987][T11211] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 527.865714][T11211] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 527.899892][T11211] BTRFS info (device loop5): setting nodatacow, compression disabled [ 527.946522][T11211] BTRFS info (device loop5): turning on flush-on-commit [ 527.978210][T11211] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 528.016287][T11211] BTRFS info (device loop5): use lzo compression, level 0 [ 528.051966][T11211] BTRFS info (device loop5): setting nodatasum [ 528.059071][T11234] bridge_slave_0: left allmulticast mode [ 528.088650][T11211] BTRFS info (device loop5): use no compression [ 528.089024][T11234] bridge_slave_0: left promiscuous mode [ 528.110081][T11211] BTRFS info (device loop5): trying to use backup root at mount time [ 528.140395][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.155862][T11211] BTRFS info (device loop5): max_inline at 0 [ 528.194763][T11211] BTRFS info (device loop5): using free space tree [ 528.234363][T11234] bridge_slave_1: left allmulticast mode [ 528.293759][T11234] bridge_slave_1: left promiscuous mode [ 528.299600][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.407538][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 528.457576][T11234] bond0: (slave bond_slave_0): Releasing backup interface [ 528.516902][T11211] BTRFS warning (device loop5): couldn't read tree root [ 528.575922][T11211] BTRFS warning (device loop5): try to load backup roots slot 1 [ 528.635712][ T76] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 528.661120][T11234] bond0: (slave bond_slave_1): Releasing backup interface [ 528.709950][T11211] BTRFS warning (device loop5): couldn't read tree root [ 528.724803][T11234] team0: Failed to send options change via netlink (err -105) [ 528.740993][T11211] BTRFS warning (device loop5): try to load backup roots slot 2 [ 528.761005][T11234] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 528.773330][ T76] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 528.822129][T11234] team0: Port device team_slave_0 removed [ 528.830277][T11211] BTRFS warning (device loop5): couldn't read tree root [ 528.865612][T11211] BTRFS warning (device loop5): try to load backup roots slot 3 [ 528.891053][T11234] team0: Failed to send options change via netlink (err -105) [ 528.942332][T11234] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 528.981425][T11211] BTRFS info (device loop5): enabling ssd optimizations [ 528.988431][T11211] BTRFS info (device loop5): auto enabling async discard [ 529.007940][T11234] team0: Port device team_slave_1 removed [ 529.037990][T11234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.046215][T11211] BTRFS info (device loop5): rebuilding free space tree [ 529.121838][T11268] loop6: detected capacity change from 0 to 256 [ 529.143085][T11211] BTRFS info (device loop5): checking UUID tree [ 529.172002][T11234] bond0: (slave netdevsim0): Releasing backup interface [ 529.259291][T11268] FAT-fs (loop6): Directory bread(block 64) failed [ 529.299858][T11268] FAT-fs (loop6): Directory bread(block 65) failed [ 529.316646][T11234] bond1: (slave veth7): Releasing active interface [ 529.324244][T11268] FAT-fs (loop6): Directory bread(block 66) failed [ 529.352137][T11268] FAT-fs (loop6): Directory bread(block 67) failed [ 529.391887][T11234] bond2: (slave geneve2): Removing an active aggregator [ 529.403998][T11268] FAT-fs (loop6): Directory bread(block 68) failed [ 529.437410][T11268] FAT-fs (loop6): Directory bread(block 69) failed [ 529.445588][T11234] bond2: (slave geneve2): Releasing backup interface [ 529.461930][T11268] FAT-fs (loop6): Directory bread(block 70) failed [ 529.467216][ T8744] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 529.468516][T11268] FAT-fs (loop6): Directory bread(block 71) failed [ 529.468627][T11268] FAT-fs (loop6): Directory bread(block 72) failed [ 529.468653][T11268] FAT-fs (loop6): Directory bread(block 73) failed [ 529.523985][T11234] bond3: (slave ip6gretap1): Releasing backup interface [ 529.552312][T11234] ip6gretap1: left allmulticast mode [ 529.582270][T11241] team0: Mode changed to "activebackup" [ 529.987221][T11277] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1548'. [ 530.304364][T11282] syz.6.1549 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 530.333153][ T28] audit: type=1326 audit(1781868755.337:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.6.1549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 530.454564][ T28] audit: type=1326 audit(1781868755.337:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.6.1549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 530.638526][ T28] audit: type=1326 audit(1781868755.337:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.6.1549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 530.981474][ T28] audit: type=1326 audit(1781868755.337:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.6.1549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 531.049374][ T28] audit: type=1326 audit(1781868755.337:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.6.1549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 533.272802][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 533.470654][ T28] audit: type=1326 audit(1781868755.337:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.6.1549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 533.661750][ T28] audit: type=1326 audit(1781868755.337:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.6.1549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 533.788228][ T28] audit: type=1326 audit(1781868755.337:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.6.1549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 533.816798][ T28] audit: type=1326 audit(1781868755.427:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.6.1549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 533.844906][ T28] audit: type=1326 audit(1781868755.427:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.6.1549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 534.050740][ T3063] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 534.257985][ T3063] usb 7-1: unable to get BOS descriptor or descriptor too short [ 534.282204][ T3063] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.317613][ T3063] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.523428][ T3063] usb 7-1: string descriptor 0 read error: -22 [ 534.529808][ T3063] usb 7-1: New USB device found, idVendor=0039, idProduct=3fb0, bcdDevice= 0.40 [ 534.559079][ T3063] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.619993][ T3063] usb 7-1: 0:1 : does not exist [ 534.632052][ T3063] usb 7-1: 0:2 : does not exist [ 537.778208][ T3063] usb 7-1: 6:0: failed to get current value for ch 0 (-22) [ 537.798554][ T3063] usb 7-1: 6:0: cannot get min/max values for control 4 (id 6) [ 537.910096][ T3063] usb 7-1: USB disconnect, device number 2 [ 537.956283][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 538.622187][T11337] bond4: entered promiscuous mode [ 538.627308][T11337] bond4: entered allmulticast mode [ 539.010079][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1561'. [ 540.651330][T11360] netlink: 'syz.1.1574': attribute type 4 has an invalid length. [ 541.855064][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1567'. [ 543.822009][T11393] lo speed is unknown, defaulting to 1000 [ 545.851883][T10871] libceph: connect (1)[c::]:6789 error -101 [ 545.859103][T10871] libceph: mon0 (1)[c::]:6789 connect error [ 545.987999][T11397] ceph: No mds server is up or the cluster is laggy [ 546.122636][T11412] overlayfs: failed to clone upperpath [ 548.629677][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1586'. [ 551.299147][T11495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.419710][T11506] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 554.491064][T11504] loop5: detected capacity change from 0 to 256 [ 554.537925][T11504] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 554.629902][T11504] xt_hashlimit: size too large, truncated to 1048576 [ 556.054922][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 557.935065][T11577] vlan3: entered promiscuous mode [ 557.961137][T11577] bridge0: entered promiscuous mode [ 559.777393][T11601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1619'. [ 563.084762][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.100915][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.130933][T11645] dummy0: Caught tx_queue_len zero misconfig [ 564.223603][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 564.263241][T11659] syzkaller0: entered promiscuous mode [ 564.269690][T11659] syzkaller0: entered allmulticast mode [ 569.239697][T11692] loop5: detected capacity change from 0 to 4096 [ 569.293541][T11692] EXT4-fs: inline encryption not supported [ 569.322013][T11692] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 569.359179][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 569.369828][T11692] EXT4-fs (loop5): Test dummy encryption mode enabled [ 569.413899][T11692] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c0a8, mo2=0003] [ 569.476201][T11692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.555351][T11724] loop6: detected capacity change from 0 to 512 [ 571.187315][T11724] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1641: invalid indirect mapped block 2 (level 1) [ 571.210479][T11724] EXT4-fs (loop6): 1 truncate cleaned up [ 571.217592][T11724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.938478][T11692] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 571.996838][T10981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.302997][T11692] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 572.351266][T11692] overlayfs: upper fs does not support tmpfile. [ 572.444553][T11692] fscrypt (loop5): Error allocating 'xts(aes)' transform: -4 [ 572.630069][ T8744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.948859][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1657'. [ 574.549955][T11799] xt_CONNSECMARK: invalid mode: 0 [ 575.400860][T11813] xt_cgroup: invalid path, errno=-2 [ 575.468143][T11815] batman_adv: batadv0: Adding interface: dummy0 [ 575.496356][T11815] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.500301][T11807] can: request_module (can-proto-0) failed. [ 575.543834][T11815] batman_adv: batadv0: Interface activated: dummy0 [ 575.706530][T11807] batadv0: mtu less than device minimum [ 575.728984][T11807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 575.744355][T11807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 575.758889][T11807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 575.774365][T11807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 575.788945][T11807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 575.803633][T11807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 575.818234][T11807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 575.832818][T11807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 575.846498][T11807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 577.750800][T11850] syzkaller0: entered promiscuous mode [ 577.757380][T11850] syzkaller0: entered allmulticast mode [ 578.913352][T11878] SET target dimension over the limit! [ 579.424175][T11884] batman_adv: batadv0: Adding interface: dummy0 [ 579.474102][T11884] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.626077][T11884] batman_adv: batadv0: Interface activated: dummy0 [ 584.954858][T11939] geneve2: entered promiscuous mode [ 585.772965][T11957] batman_adv: batadv0: Adding interface: dummy0 [ 585.799703][T11957] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.869774][T11957] batman_adv: batadv0: Interface activated: dummy0 [ 586.434247][T11960] net_ratelimit: 30 callbacks suppressed [ 586.434265][T11960] batadv0: mtu less than device minimum [ 586.567752][T11960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.580255][T11960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.592630][T11960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.605098][T11960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.617533][T11960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.629939][T11960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.642299][T11960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.654785][T11960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.667278][T11960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.773576][T11963] netlink: 'syz.0.1697': attribute type 64 has an invalid length. [ 587.009196][T11967] syzkaller0: entered promiscuous mode [ 587.047589][T11967] syzkaller0: entered allmulticast mode [ 587.507312][T11988] netlink: 'syz.0.1705': attribute type 10 has an invalid length. [ 587.537322][T11988] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 587.634781][T11989] CIFS mount error: No usable UNC path provided in device string! [ 587.634781][T11989] [ 587.645460][T11989] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 589.227545][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1708'. [ 589.464355][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1707'. [ 589.652170][T12010] bond4: entered promiscuous mode [ 589.670076][T12010] bond4: entered allmulticast mode [ 589.698614][T12012] netlink: 8752 bytes leftover after parsing attributes in process `syz.6.1710'. [ 593.533942][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1727'. [ 594.330275][T10871] IPVS: starting estimator thread 0... [ 594.580824][T12110] IPVS: using max 18 ests per chain, 43200 per kthread [ 596.575957][T12131] tipc: Started in network mode [ 596.586588][T12131] tipc: Node identity ac1414aa, cluster identity 4711 [ 596.608139][T12131] tipc: Enabling of bearer rejected, failed to enable media [ 596.670411][T12131] tipc: Enabled bearer , priority 0 [ 596.856104][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1736'. [ 596.989279][T12138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1738'. [ 597.814831][T10871] tipc: Node number set to 2886997162 [ 597.849443][T12149] binder_alloc: 12148: pid 12148 spamming oneway? 2 buffers allocated for a total size of 5120 [ 597.981586][T12153] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1742'. [ 598.004984][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 598.015515][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1742'. [ 599.471190][T12176] tipc: Enabled bearer , priority 2 [ 599.496944][T12176] netdevsim netdevsim1 : renamed from netdevsim0 [ 599.540050][T12176] tipc: Disabling bearer [ 599.723492][T12184] netlink: 'syz.6.1753': attribute type 1 has an invalid length. [ 599.854772][T12189] bond1: (slave bridge2): making interface the new active one [ 599.903759][T12189] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 599.930755][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1753'. [ 600.003781][T12184] bond1: entered promiscuous mode [ 600.019628][T12184] bridge2: entered promiscuous mode [ 600.039695][T12184] bond1: entered allmulticast mode [ 600.058229][T12184] bridge2: entered allmulticast mode [ 600.079442][T12184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.145992][ T59] bond1: (slave bridge2): link status definitely down, disabling slave [ 600.192121][ T59] bridge2: left promiscuous mode [ 600.220967][ T59] bridge2: left allmulticast mode [ 600.258975][ T59] bond1: now running without any active interface! [ 600.723987][T12195] syzkaller0: entered promiscuous mode [ 600.749265][T12195] syzkaller0: entered allmulticast mode [ 602.840773][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 602.840789][ T28] audit: type=1326 audit(1781868827.837:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 603.092221][ T28] audit: type=1326 audit(1781868827.837:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 603.229381][ T28] audit: type=1326 audit(1781868827.847:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 603.359512][ T28] audit: type=1326 audit(1781868827.847:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 603.419739][ T28] audit: type=1326 audit(1781868827.847:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7ec9b9bcc7 code=0x7ffc0000 [ 603.518544][ T28] audit: type=1326 audit(1781868827.847:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 603.781148][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'. [ 603.813316][ T28] audit: type=1326 audit(1781868827.847:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 603.930828][ T28] audit: type=1326 audit(1781868827.847:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 603.955806][ T28] audit: type=1326 audit(1781868827.847:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 605.560787][ T28] audit: type=1326 audit(1781868827.847:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 605.690014][T12221] binder: BINDER_SET_CONTEXT_MGR already set [ 605.741868][T12221] binder: 12217:12221 ioctl 4018620d 2000000001c0 returned -16 [ 606.538155][T12232] tipc: Can't bind to reserved service type 1 [ 606.705829][T12241] loop6: detected capacity change from 0 to 16 [ 606.718294][T12232] loop5: detected capacity change from 0 to 128 [ 606.763882][T12241] erofs: (device loop6): mounted with root inode @ nid 36. [ 606.773371][T12232] FAT-fs (loop5): bogus number of reserved sectors [ 606.779915][T12232] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 606.797720][T12232] FAT-fs (loop5): Can't find a valid FAT filesystem [ 607.150883][ T5828] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 607.382484][ T5828] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.412635][ T5828] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.450783][ T5828] usb 7-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 607.480795][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.513561][ T5828] usb 7-1: config 0 descriptor?? [ 607.785809][T11228] usb 7-1: USB disconnect, device number 3 [ 608.560824][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1777'. [ 609.115457][T12270] netlink: 'syz.1.1782': attribute type 11 has an invalid length. [ 609.278206][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 610.343456][T12286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1788'. [ 610.375655][T12286] af_packet: tpacket_rcv: packet too big, clamped from 22 to 4294967272. macoff=96 [ 611.833309][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 611.833342][ T28] audit: type=1326 audit(1781868836.867:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 611.868914][ T28] audit: type=1326 audit(1781868836.867:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 611.951566][ T28] audit: type=1326 audit(1781868836.867:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 612.055168][T12305] netlink: 'syz.1.1795': attribute type 1 has an invalid length. [ 612.072782][ T28] audit: type=1326 audit(1781868836.867:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7ec9b9ce59 code=0x7ffc0000 [ 612.304296][ T28] audit: type=1326 audit(1781868836.957:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ec9b5d68e code=0x7ffc0000 [ 612.337691][ T28] audit: type=1326 audit(1781868836.957:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ec9b5d68e code=0x7ffc0000 [ 612.369447][ T28] audit: type=1326 audit(1781868836.957:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ec9b5d68e code=0x7ffc0000 [ 612.405966][ T28] audit: type=1326 audit(1781868836.957:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ec9b5d68e code=0x7ffc0000 [ 612.612839][T12312] loop5: detected capacity change from 0 to 8192 [ 612.771453][T12305] 8021q: adding VLAN 0 to HW filter on device bond8 [ 613.204471][T12309] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 613.225803][ T28] audit: type=1326 audit(1781868836.957:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ec9b5d68e code=0x7ffc0000 [ 613.340467][ T28] audit: type=1326 audit(1781868836.957:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.0.1791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ec9b5d68e code=0x7ffc0000 [ 613.382952][T12309] bond8: entered allmulticast mode [ 613.448901][T12310] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 613.796699][T12322] loop5: detected capacity change from 0 to 512 [ 616.536400][T12358] netlink: 'syz.6.1810': attribute type 1 has an invalid length. [ 616.670841][T12358] bond2: entered promiscuous mode [ 616.697839][T12358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.732862][T12362] vlan2: entered allmulticast mode [ 616.895097][T12362] bond2: entered allmulticast mode [ 616.977602][T12364] bond2: (slave bridge4): making interface the new active one [ 617.019944][T12364] bridge4: entered promiscuous mode [ 617.026579][T12364] bridge4: entered allmulticast mode [ 617.036296][T12364] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 621.718778][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 621.718793][ T28] audit: type=1326 audit(1781868846.727:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.6.1819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 621.750145][ T28] audit: type=1326 audit(1781868846.727:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.6.1819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 621.800730][ T28] audit: type=1326 audit(1781868846.727:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.6.1819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 621.876676][ T28] audit: type=1326 audit(1781868846.727:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.6.1819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 621.904999][ T28] audit: type=1326 audit(1781868846.727:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.6.1819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 622.355417][ T28] audit: type=1326 audit(1781868846.727:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.6.1819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 622.427727][ T28] audit: type=1326 audit(1781868846.737:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.6.1819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 622.547502][ T28] audit: type=1326 audit(1781868846.737:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.6.1819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 622.649145][ T28] audit: type=1326 audit(1781868846.737:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.6.1819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 622.718080][ T28] audit: type=1326 audit(1781868846.737:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.6.1819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4039ce59 code=0x7ffc0000 [ 624.613015][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.619380][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.762838][T12426] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 624.774058][T12426] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 626.925476][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1840'. [ 627.292929][T12466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1840'. [ 627.307980][T12466] veth11: entered promiscuous mode [ 627.316252][T12466] veth11: entered allmulticast mode [ 627.639340][T12472] syz_tun: entered allmulticast mode [ 630.035783][T12495] loop5: detected capacity change from 0 to 1024 [ 630.789103][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 630.789119][ T28] audit: type=1800 audit(1781868855.817:1247): pid=12495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1849" name="file2" dev="loop5" ino=22 res=0 errno=0 [ 631.162949][T12510] netlink: 'syz.0.1854': attribute type 1 has an invalid length. [ 631.728055][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 631.765034][T12511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 631.784674][T12511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 631.796722][T12511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 631.835672][T12511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 631.864824][T12511] bond5: (slave geneve3): making interface the new active one [ 632.714011][T12511] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 632.789066][T12521] syz_tun: entered allmulticast mode [ 632.820256][T12521] syz_tun: left allmulticast mode [ 636.347461][T12558] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1867'. [ 642.228623][T12631] smc: net device bond0 applied user defined pnetid SYZ2 [ 642.243062][T12629] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1885'. [ 643.036662][T12629] smc: removing net device bond0 with user defined pnetid SYZ2 [ 643.096048][T12629] bond0 (unregistering): Released all slaves [ 646.842394][T12673] loop5: detected capacity change from 0 to 512 [ 647.129813][T12673] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 649.760723][T12694] bridge0: entered promiscuous mode [ 649.765997][T12694] bridge0: entered allmulticast mode [ 649.940609][T12696] netlink: 'syz.0.1905': attribute type 1 has an invalid length. [ 650.056808][T12696] bond6: entered promiscuous mode [ 650.063591][T12696] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.519321][T12699] bond6: (slave bridge6): making interface the new active one [ 650.550322][T12699] bridge6: entered promiscuous mode [ 650.771750][T12699] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 655.424437][T12729] syzkaller0: entered promiscuous mode [ 655.429981][T12729] syzkaller0: entered allmulticast mode [ 656.533576][T12725] tipc: New replicast peer: 255.255.255.255 [ 656.568654][T12725] tipc: Enabled bearer , priority 10 [ 657.226424][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1921'. [ 659.149805][ T23] IPVS: starting estimator thread 0... [ 659.271252][T12763] IPVS: using max 24 ests per chain, 57600 per kthread [ 661.482412][ T28] audit: type=1326 audit(1781868886.517:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12791 comm="syz.5.1933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bd39ce59 code=0x7ffc0000 [ 661.611347][ T28] audit: type=1326 audit(1781868886.517:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12791 comm="syz.5.1933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bd39ce59 code=0x7ffc0000 [ 661.760677][ T28] audit: type=1326 audit(1781868886.537:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12791 comm="syz.5.1933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bd39ce59 code=0x7ffc0000 [ 661.831733][ T28] audit: type=1326 audit(1781868886.537:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12791 comm="syz.5.1933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bd39ce59 code=0x7ffc0000 [ 661.898622][ T28] audit: type=1326 audit(1781868886.557:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12791 comm="syz.5.1933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f69bd39ce59 code=0x7ffc0000 [ 661.929443][ T28] audit: type=1326 audit(1781868886.587:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12791 comm="syz.5.1933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bd39ce59 code=0x7ffc0000 [ 661.963132][ T28] audit: type=1326 audit(1781868886.587:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12791 comm="syz.5.1933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bd39ce59 code=0x7ffc0000 [ 662.009224][ T28] audit: type=1326 audit(1781868886.587:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12791 comm="syz.5.1933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bd39ce59 code=0x7ffc0000 [ 662.041368][ T28] audit: type=1326 audit(1781868886.587:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12791 comm="syz.5.1933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bd39ce59 code=0x7ffc0000 [ 662.099914][ T28] audit: type=1326 audit(1781868886.587:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12791 comm="syz.5.1933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f69bd39ce59 code=0x7ffc0000 [ 662.651982][T12819] syzkaller0: entered promiscuous mode [ 662.657520][T12819] syzkaller0: entered allmulticast mode [ 664.325769][T12837] batman_adv: batadv0: Interface deactivated: dummy0 [ 664.345617][T12837] batman_adv: batadv0: Removing interface: dummy0 [ 664.364514][T12837] bridge_slave_0: left allmulticast mode [ 664.373793][T12837] bridge_slave_0: left promiscuous mode [ 664.379611][T12837] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.399276][T12837] bridge_slave_1: left allmulticast mode [ 664.407440][T12837] bridge_slave_1: left promiscuous mode [ 664.417079][T12837] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.433133][T12837] bond0: (slave bond_slave_0): Releasing backup interface [ 664.466590][T12837] bond0: (slave bond_slave_1): Releasing backup interface [ 664.525920][T12837] team0: Port device team_slave_0 removed [ 664.569853][T12837] team0: Port device team_slave_1 removed [ 664.606550][T12837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.627616][T12837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.656530][T12837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.688713][T12837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.514084][T12837] bond1: (slave bridge2): Releasing active interface [ 665.612702][T12837] bond2: (slave bridge4): Releasing backup interface [ 665.622012][T12837] bridge4: left promiscuous mode [ 665.628177][T12837] bridge4: left allmulticast mode [ 665.718937][T12846] syzkaller0: entered promiscuous mode [ 665.736030][T12846] syzkaller0: entered allmulticast mode [ 665.957931][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1949'. [ 665.987158][T12850] loop6: detected capacity change from 0 to 256 [ 666.122368][T12850] tipc: Started in network mode [ 666.170949][T12850] tipc: Node identity 0000000000000000002e00000000407f, cluster identity 4711 [ 666.188489][T12853] bond7: entered promiscuous mode [ 666.211033][T12853] bond7: entered allmulticast mode [ 666.449902][T12856] loop5: detected capacity change from 0 to 4096 [ 666.498451][T12856] EXT4-fs: Ignoring removed orlov option [ 666.526843][T12856] EXT4-fs (loop5): Test dummy encryption mode enabled [ 666.677369][T12856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.948458][T12872] pim6reg99999991: entered allmulticast mode [ 667.580584][T12871] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 667.657862][T12871] File: /219/w5T)`)YFnA@T<3ڂ$rcnHwC" -8/file1 PID: 12871 Comm: syz.5.1950 [ 667.716489][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'. [ 667.828162][T12878] smc: adding net device bond0 with user defined pnetid SYZ2 [ 667.881880][T12883] bond0: entered promiscuous mode [ 667.887385][T12883] bond0: entered allmulticast mode [ 668.012110][ T8744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.147888][T12888] loop6: detected capacity change from 0 to 2048 [ 668.192314][T12888] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 668.224165][T12888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 668.333382][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'. [ 669.695144][T12916] net_ratelimit: 10 callbacks suppressed [ 669.695160][T12916] netlink: zone id is out of range [ 670.182017][T12916] netlink: zone id is out of range [ 670.194645][T12916] netlink: zone id is out of range [ 670.213551][T12916] netlink: zone id is out of range [ 670.237414][T12916] netlink: zone id is out of range [ 670.274501][T12916] netlink: zone id is out of range [ 670.303196][T12916] netlink: zone id is out of range [ 670.309380][T12916] netlink: zone id is out of range [ 670.317121][T12916] netlink: zone id is out of range [ 670.335405][T12916] netlink: zone id is out of range [ 670.623903][T12923] macvlan3: entered promiscuous mode [ 670.630327][T12923] macvlan3: entered allmulticast mode [ 670.769803][T12929] netlink: 'syz.0.1970': attribute type 1 has an invalid length. [ 670.804827][T12929] 8021q: adding VLAN 0 to HW filter on device bond8 [ 670.849162][T12929] bond8: entered allmulticast mode [ 670.883613][T12929] bond8: (slave ip6gretap2): making interface the new active one [ 670.891618][T12929] ip6gretap2: entered allmulticast mode [ 670.899260][T12929] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 671.619307][T12943] loop6: detected capacity change from 0 to 4096 [ 677.351185][T12980] bridge0: left promiscuous mode [ 677.367278][T12980] bridge0: left allmulticast mode [ 677.598650][T12980] batman_adv: batadv0: Interface deactivated: dummy0 [ 678.836077][T12980] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.846607][T12980] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.856536][T12980] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.991219][T12980] bond2: left promiscuous mode [ 678.996065][T12980] bond2: left allmulticast mode [ 679.028679][T12980] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.038654][T12980] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.048780][T12980] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.074164][T12980] veth1_vlan: left allmulticast mode [ 679.079882][T12980] macvtap1: left promiscuous mode [ 679.085465][T12980] macvtap1: left allmulticast mode [ 679.100868][T12980] bond4: left promiscuous mode [ 679.107852][T12980] bond4: left allmulticast mode [ 679.173116][T11228] lo speed is unknown, defaulting to 1000 [ 679.178409][T13001] netlink: 'syz.0.1993': attribute type 1 has an invalid length. [ 679.191031][T13001] netlink: 'syz.0.1993': attribute type 4 has an invalid length. [ 679.200239][T13001] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1993'. [ 685.249455][T13043] syzkaller0: entered promiscuous mode [ 685.256253][T13043] syzkaller0: entered allmulticast mode [ 685.539685][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'. [ 685.941767][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.949265][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.920433][T13058] loop5: detected capacity change from 0 to 2048 [ 687.054275][T13058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.654672][T13070] net_ratelimit: 23 callbacks suppressed [ 687.654713][T13070] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 688.119453][ T8744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.550813][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 691.879415][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2026'. [ 692.045023][T13113] netlink: 'syz.5.2026': attribute type 5 has an invalid length. [ 692.080407][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2026'. [ 692.673992][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2029'. [ 693.717170][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2032'. [ 694.146775][T13143] netlink: 'syz.1.2035': attribute type 9 has an invalid length. [ 695.324389][T13157] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2040'. [ 695.346774][T13157] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2040'. [ 695.358666][T13157] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2040'. [ 695.467175][T13157] 8021q: adding VLAN 0 to HW filter on device bond5 [ 695.827072][T13148] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 698.372181][T13207] IPv6: Can't replace route, no match found [ 698.393577][T13207] IPv6: Can't replace route, no match found [ 699.495710][T13226] loop5: detected capacity change from 0 to 512 [ 699.524924][T13226] EXT4-fs (loop5): Test dummy encryption mode enabled [ 699.563743][T13226] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2060: inode has both inline data and extents flags [ 699.586395][T13226] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2060: couldn't read orphan inode 15 (err -117) [ 699.621825][T13226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.763159][T13226] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 699.967501][T13244] netlink: 'syz.1.2065': attribute type 5 has an invalid length. [ 700.169553][ T8744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.403170][T13249] loop5: detected capacity change from 0 to 512 [ 700.475285][T13002] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 700.546872][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 700.566727][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2068'. [ 702.954052][T13254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.016776][T13254] bond2: (slave bond0): making interface the new active one [ 703.073902][T13254] bond2: (slave bond0): Enslaving as an active interface with an up link [ 703.121454][T13256] netlink: 'syz.0.2068': attribute type 4 has an invalid length. [ 703.147021][T13256] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2068'. [ 703.317539][T13256] .`: renamed from bond0 (while UP) [ 703.462206][T13265] netlink: 'syz.6.2070': attribute type 1 has an invalid length. [ 704.044161][T13265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 704.083867][T13266] gretap1: entered promiscuous mode [ 704.133163][T13266] bond3: (slave gretap1): making interface the new active one [ 704.185690][T13266] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 704.268450][T13268] macvlan2: entered promiscuous mode [ 704.293651][T13268] macvlan2: entered allmulticast mode [ 704.314548][T13268] bond3: entered promiscuous mode [ 704.325088][T13268] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 704.334646][T13268] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 704.386918][T13268] bond3: left promiscuous mode [ 707.352377][T13307] loop6: detected capacity change from 0 to 4096 [ 707.417556][T13307] EXT4-fs: Ignoring removed nobh option [ 707.757282][T13307] EXT4-fs (loop6): Test dummy encryption mode enabled [ 707.894618][T13307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.618347][T10981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.611631][T13337] netlink: 'syz.0.2092': attribute type 1 has an invalid length. [ 712.187287][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 712.250307][T13347] bond0 (unregistering): Released all slaves [ 712.533836][ T3063] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 714.640301][ T3063] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 714.669484][ T3063] usb 6-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 714.706417][ T3063] usb 6-1: New USB device found, idVendor=03f0, idProduct=0f9b, bcdDevice=d2.cf [ 714.749771][ T3063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.775467][ T3063] usb 6-1: Product: syz [ 714.806198][ T3063] usb 6-1: Manufacturer: syz [ 714.820143][ T3063] usb 6-1: SerialNumber: syz [ 715.093302][T13367] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 715.287850][T11228] usb 6-1: USB disconnect, device number 6 [ 717.351967][T13394] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2106'. [ 717.437512][T13394] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2106'. [ 718.556810][T13401] nfs4: Unknown parameter 'uid' [ 718.710247][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'. [ 719.537898][T13422] netlink: 63 bytes leftover after parsing attributes in process `syz.1.2111'. [ 720.861170][T13437] netlink: 'syz.6.2118': attribute type 1 has an invalid length. [ 721.633960][T13437] loop6: detected capacity change from 0 to 512 [ 826.700491][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 826.707497][ C0] rcu: 1-...!: (1 GPs behind) idle=cb24/1/0x4000000000000000 softirq=54017/54018 fqs=8 [ 826.719235][ C0] rcu: (detected by 0, t=10505 jiffies, g=75001, q=335 ncpus=2) [ 826.726980][ C0] Sending NMI from CPU 0 to CPUs 1: [ 826.732196][ C1] NMI backtrace for cpu 1 [ 826.732212][ C1] CPU: 1 PID: 5141 Comm: udevd Not tainted syzkaller #0 [ 826.732225][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 826.732237][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x8/0x80 [ 826.732263][ C1] Code: 08 04 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 90 88 7c 7e 65 8b 15 91 88 7c 7e 81 e2 00 01 ff 00 74 [ 826.732275][ C1] RSP: 0018:ffffc900001f0d00 EFLAGS: 00000046 [ 826.732345][ C1] RAX: ffffffff8a78b7d8 RBX: ffff8880b8f2b990 RCX: ffff88807dfd5a00 [ 826.732356][ C1] RDX: 0000000000010000 RSI: ffff88807e4ba340 RDI: 0000000000000001 [ 826.732365][ C1] RBP: 1ffff1100fc97468 R08: ffffffff975a66bb R09: 1ffffffff2eb4cd7 [ 826.732375][ C1] R10: dffffc0000000000 R11: fffffbfff2eb4cd8 R12: ffff88807e4ba340 [ 826.732385][ C1] R13: dffffc0000000000 R14: ffff88807e4ba340 R15: 0000000000000001 [ 826.732395][ C1] FS: 00007fb16bc74880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 826.732407][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 826.732417][ C1] CR2: 0000001b2d920ff8 CR3: 000000001a6ce000 CR4: 00000000003506e0 [ 826.732429][ C1] Call Trace: [ 826.732440][ C1] [ 826.732445][ C1] timerqueue_del+0x48/0x100 [ 826.732480][ C1] __hrtimer_run_queues+0x37f/0xc40 [ 826.732495][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 826.732544][ C1] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 826.732568][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 826.732582][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 826.732603][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 826.732628][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 826.732647][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 826.732699][ C1] [ 826.732703][ C1] [ 826.732707][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 826.732770][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x199/0x1d0 [ 826.732788][ C1] Code: ff 4d 85 ed 75 16 e8 a6 14 8a ff eb 15 e8 9f 14 8a ff e8 8a 44 8b 08 4d 85 ed 74 ea e8 90 14 8a ff fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 43 c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 826.732799][ C1] RSP: 0018:ffffc90003337780 EFLAGS: 00000293 [ 826.732811][ C1] RAX: ffffffff81fd1700 RBX: 0000000000000000 RCX: ffff88807dfd5a00 [ 826.732821][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 826.732829][ C1] RBP: ffffc90003337828 R08: ffffffff911cd53f R09: 1ffffffff2239aa7 [ 826.732838][ C1] R10: dffffc0000000000 R11: fffffbfff2239aa8 R12: dffffc0000000000 [ 826.732848][ C1] R13: 0000000000000200 R14: ffffffff81fcf457 R15: 1ffff92000666ef0 [ 826.732858][ C1] ? prepend_path+0x107/0x960 [ 826.732874][ C1] ? seqcount_lockdep_reader_access+0x190/0x1d0 [ 826.732893][ C1] ? __ia32_sys_getcwd+0x60/0x60 [ 826.732919][ C1] prepend_path+0x107/0x960 [ 826.732933][ C1] ? prepend_path+0x4b/0x960 [ 826.732952][ C1] d_absolute_path+0xa2/0x140 [ 826.732968][ C1] tomoyo_realpath_from_path+0x2d9/0x5d0 [ 826.732991][ C1] tomoyo_path_perm+0x282/0x560 [ 826.733004][ C1] ? tomoyo_path_perm+0x250/0x560 [ 826.733017][ C1] ? tomoyo_path_permission+0x380/0x380 [ 826.733049][ C1] ? __might_fault+0xaa/0x120 [ 826.733065][ C1] security_inode_getattr+0xd3/0x120 [ 826.733086][ C1] vfs_statx+0x172/0x680 [ 826.733101][ C1] ? __phys_addr_symbol+0x2f/0x70 [ 826.733121][ C1] ? vfs_fstatat+0x1b0/0x1b0 [ 826.733137][ C1] ? getname_flags+0x20a/0x500 [ 826.733156][ C1] vfs_fstatat+0x12a/0x1b0 [ 826.733172][ C1] __x64_sys_newfstatat+0x149/0x1f0 [ 826.733190][ C1] ? __ia32_sys_newlstat+0x1e0/0x1e0 [ 826.733215][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 826.733235][ C1] do_syscall_64+0x55/0xb0 [ 826.733249][ C1] ? clear_bhb_loop+0x40/0x90 [ 826.733260][ C1] ? clear_bhb_loop+0x40/0x90 [ 826.733273][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.733291][ C1] RIP: 0033:0x7fb16b511b0a [ 826.733309][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 826.733319][ C1] RSP: 002b:00007ffe75dd2718 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 826.733332][ C1] RAX: ffffffffffffffda RBX: 00007ffe75dd2bb0 RCX: 00007fb16b511b0a [ 826.733342][ C1] RDX: 00007ffe75dd2720 RSI: 00007ffe75dd2bb0 RDI: 00000000ffffff9c [ 826.733352][ C1] RBP: 000055ed5035f910 R08: 0000000000000000 R09: 0000000000000000 [ 826.733360][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe75dd27b0 [ 826.733368][ C1] R13: 000055ed11d20100 R14: 0000000000000000 R15: 00007ffe75dd31d0 [ 826.733384][ C1] [ 826.734189][ C0] rcu: rcu_preempt kthread starved for 10465 jiffies! g75001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 827.195259][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 827.205244][ C0] rcu: RCU grace-period kthread stack dump: [ 827.211136][ C0] task:rcu_preempt state:R running task stack:27656 pid:17 ppid:2 flags:0x00004000 [ 827.221932][ C0] Call Trace: [ 827.225217][ C0] [ 827.228158][ C0] __schedule+0x1553/0x45a0 [ 827.232754][ C0] ? _raw_spin_unlock_irqrestore+0x41/0x120 [ 827.238661][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 827.244565][ C0] ? asan.module_dtor+0x20/0x20 [ 827.249424][ C0] ? enqueue_timer+0x23d/0x550 [ 827.254222][ C0] ? __mod_timer+0x984/0xdb0 [ 827.258847][ C0] schedule+0xbd/0x170 [ 827.262930][ C0] schedule_timeout+0x188/0x2d0 [ 827.267805][ C0] ? console_conditional_schedule+0x40/0x40 [ 827.273712][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 827.279619][ C0] ? update_process_times+0x1b0/0x1b0 [ 827.285007][ C0] ? prepare_to_swait_event+0x339/0x360 [ 827.290564][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 827.295438][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 827.301600][ C0] ? rcu_gp_init+0x1560/0x1560 [ 827.306375][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 827.311234][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.316444][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 827.321656][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 827.326256][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 827.331374][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 827.336324][ C0] ? __kthread_parkme+0x162/0x1c0 [ 827.341355][ C0] kthread+0x2fa/0x390 [ 827.345429][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 827.350550][ C0] ? kthread_blkcg+0xd0/0xd0 [ 827.355141][ C0] ret_from_fork+0x48/0x80 [ 827.359562][ C0] ? kthread_blkcg+0xd0/0xd0 [ 827.364161][ C0] ret_from_fork_asm+0x11/0x20 [ 827.368953][ C0] [ 827.371981][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 827.378299][ C0] CPU: 0 PID: 2901 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 827.385930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 827.396002][ C0] Workqueue: events_unbound toggle_allocation_gate [ 827.402532][ C0] RIP: 0010:smp_call_function_many_cond+0xdfe/0x1140 [ 827.409398][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 4b f7 0a 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 86 f3 0a 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 6a f3 [ 827.429013][ C0] RSP: 0018:ffffc9000b727780 EFLAGS: 00000293 [ 827.435086][ C0] RAX: ffffffff817c3826 RBX: 1ffff110171e827d RCX: ffff88802c2c0000 [ 827.443066][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 827.451042][ C0] RBP: ffffc9000b727900 R08: ffffffff911cd507 R09: 1ffffffff2239aa0 [ 827.459018][ C0] R10: dffffc0000000000 R11: fffffbfff2239aa1 R12: ffff8880b8f413e8 [ 827.466998][ C0] R13: dffffc0000000000 R14: ffff8880b8e3d1c8 R15: 0000000000000001 [ 827.474976][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 827.483907][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.490496][ C0] CR2: 00002000000015c0 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 827.498476][ C0] Call Trace: [ 827.501759][ C0] [ 827.504701][ C0] ? text_poke_sync+0x30/0x30 [ 827.509402][ C0] ? smp_call_function_many+0x40/0x40 [ 827.514784][ C0] ? text_poke+0xc0/0xc0 [ 827.519118][ C0] ? __mutex_trylock_common+0x159/0x260 [ 827.524672][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 827.530835][ C0] ? text_poke_sync+0x30/0x30 [ 827.535528][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 827.540736][ C0] ? kmem_cache_alloc_bulk+0x12a/0x5a0 [ 827.546213][ C0] text_poke_bp_batch+0x31e/0x990 [ 827.551250][ C0] ? text_poke_loc_init+0x880/0x880 [ 827.556451][ C0] ? mutex_lock_nested+0x20/0x20 [ 827.561394][ C0] ? text_poke_queue+0x140/0x190 [ 827.566338][ C0] ? arch_jump_label_transform_queue+0x93/0x100 [ 827.572607][ C0] text_poke_finish+0x30/0x50 [ 827.577289][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 827.583278][ C0] static_key_enable_cpuslocked+0x123/0x240 [ 827.589181][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 827.594999][ C0] static_key_enable+0x1a/0x20 [ 827.599769][ C0] toggle_allocation_gate+0xa8/0x260 [ 827.605069][ C0] ? show_object+0x70/0x70 [ 827.609492][ C0] ? read_lock_is_recursive+0x20/0x20 [ 827.614876][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 827.620601][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 827.626325][ C0] process_scheduled_works+0xa5d/0x15d0 [ 827.631903][ C0] ? worker_attach_to_pool+0x380/0x380 [ 827.637382][ C0] ? assign_work+0x3d2/0x5d0 [ 827.641984][ C0] worker_thread+0xa55/0xfc0 [ 827.646608][ C0] kthread+0x2fa/0x390 [ 827.650689][ C0] ? pr_cont_work+0x560/0x560 [ 827.655372][ C0] ? kthread_blkcg+0xd0/0xd0 [ 827.659969][ C0] ret_from_fork+0x48/0x80 [ 827.664389][ C0] ? kthread_blkcg+0xd0/0xd0 [ 827.668986][ C0] ret_from_fork_asm+0x11/0x20 [ 827.673774][ C0]