last executing test programs: 10m24.59711461s ago: executing program 32 (id=165): r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 10m12.414990013s ago: executing program 1 (id=198): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357}}, 0x3c) 10m11.29521715s ago: executing program 1 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x300000b, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x6a, 0x0, 0x0, 0x7, 0x8000004, 0x0, 0x106c, 0x2, 0x8, 0x80000004000084, 0x4e, 0x0, 0x2, 0x6, 0x0, 0x6], 0xdddd1000, 0x3c4210}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x2000, 0xd000, 0xe, 0x0, 0x8, 0xee, 0x11, 0xfe, 0x0, 0x0, 0x8, 0xeb}, {0x4, 0xeeef0000, 0xa, 0x7, 0x5, 0x7, 0x4, 0x14, 0x0, 0x5, 0x8, 0x3}, {0x5000, 0x2000, 0xb, 0xc, 0x23, 0x7, 0x81, 0x3, 0x80, 0xfb, 0x1, 0x70}, {0xdddd0000, 0x6000, 0x0, 0xfe, 0x6, 0xaa, 0xc3, 0xfb, 0x2, 0x2, 0x5, 0xe}, {0xc000, 0x80a0001, 0xa, 0xff, 0xc, 0x9, 0x4, 0x7, 0x5, 0x6, 0x28, 0xfc}, {0xffff1000, 0x10000, 0x9, 0xb9, 0x25, 0x5, 0x42, 0x7, 0xb0, 0x1, 0x0, 0x10}, {0x8080000, 0x0, 0xe, 0x1, 0xc, 0x8, 0x2, 0x62, 0xe4, 0x1, 0x14, 0x5}, {0xffff1000, 0xeeee8000, 0xa, 0x21, 0xc, 0x8, 0x9, 0x9, 0x6, 0x8, 0x43, 0x3}, {0x1000, 0x5}, {0x4000, 0x6}, 0x40000000, 0x0, 0xeeef0002, 0x200, 0x8, 0x801, 0xb000, [0x1, 0x1004, 0x5, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m10.776451842s ago: executing program 1 (id=201): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xaeea) r1 = accept4(r0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xd4a}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x1}) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x4}, &(0x7f0000000240)=0x8) 10m10.46940102s ago: executing program 1 (id=203): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0) fchdir(0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) write$uinput_user_dev(r0, &(0x7f0000005880)={'syz1\x00', {0x56, 0x8981, 0x50b9, 0x8}, 0x9, [0x9, 0x2, 0x5, 0x6, 0x66, 0x1ff, 0x8, 0x5, 0x32a, 0x6, 0x400, 0x6, 0x5, 0x3, 0xb, 0x80, 0xbdba, 0x400, 0x10000, 0xd, 0x4, 0x6, 0x6, 0x4, 0x2, 0x5, 0x1000, 0x2, 0x5d, 0x0, 0x3, 0xa, 0x6, 0x7, 0xbff1, 0x10001, 0xffff8000, 0x4, 0x8, 0x800, 0x2, 0x8, 0xfffff96e, 0xf8f4, 0x8, 0x6, 0x9, 0x3, 0xdd4, 0x6, 0x5, 0x9935, 0x76, 0xfffffffd, 0x8, 0xffff, 0x4, 0x3, 0x1, 0x7, 0x5, 0xfffff9d7, 0x8001, 0x7], [0xe2, 0xfff, 0x67, 0xffff, 0x200, 0x6, 0x7, 0x7, 0x9, 0xd, 0x5, 0x8, 0x8000, 0x6, 0x1, 0x1, 0x1, 0x9e, 0x4, 0x7, 0x5, 0x81, 0x8, 0x3, 0x1ff, 0x19, 0xffff5e25, 0x61, 0x4, 0xffffffff, 0x2, 0x79, 0xde, 0x1, 0x5, 0x0, 0x7, 0x4, 0xd20, 0x1000, 0x6, 0x85, 0x10001, 0x7fff, 0x2, 0x230, 0x9, 0x8, 0xc28, 0xfe000, 0x4, 0x4, 0x8000, 0x5, 0x3, 0x8, 0x5, 0x5, 0x7, 0x7fffffff, 0x1, 0x3, 0x53, 0x9], [0x3ff, 0x4, 0x40, 0x3, 0x3f47, 0xb, 0x9, 0xfffffffb, 0x3, 0xfffffffc, 0x9, 0x8, 0xfffffffa, 0x43, 0x0, 0xd9f, 0x3, 0x2, 0x0, 0xb, 0x7, 0x101, 0x6, 0x0, 0x9, 0x6, 0x7, 0xd69, 0x80000000, 0x142eccae, 0x1, 0x7, 0x8, 0x9, 0x7, 0x15c9, 0x6, 0x0, 0x8, 0xc6, 0x6, 0x3, 0x4, 0x3ff, 0x6, 0x7, 0x0, 0xffffffff, 0x80, 0x5, 0x5, 0x5, 0x4, 0x5, 0x7, 0xa1, 0x738, 0x400, 0x3, 0x8000, 0x1, 0x6, 0x4, 0x7], [0x3ff, 0x8, 0x4, 0x8, 0x80000001, 0xef, 0x1, 0xeee, 0x9, 0x0, 0x2, 0xfff, 0x100, 0x2, 0x80000000, 0x9, 0x9, 0x372, 0x9, 0x40, 0x0, 0x0, 0x7, 0x7, 0x4, 0xedcb, 0x8, 0xffff8001, 0x1, 0x2, 0x5, 0xa4ce, 0x2, 0x144, 0x4, 0x7f86, 0x8, 0x3de02d77, 0xd6b1, 0xd34b, 0x1, 0xf, 0x81, 0xc, 0x2, 0x4, 0x1, 0x31d, 0x4, 0x8d, 0x0, 0x401, 0xd, 0xdab, 0xa, 0x46ab, 0x2d2, 0xd, 0x7f, 0x6, 0x7, 0x7fff, 0x25f, 0xe6]}, 0x45c) 10m8.041617278s ago: executing program 1 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) 10m5.599434917s ago: executing program 33 (id=220): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f00000000c0)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000940)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x60700, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x60, r2}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 10m5.248829935s ago: executing program 1 (id=223): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r2, 0xb) 9m50.09332277s ago: executing program 34 (id=223): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r2, 0xb) 9m25.98645346s ago: executing program 6 (id=402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xab, &(0x7f0000000100)=""/171, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x3, 0xe5cf}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mount$tmpfs(0x0, 0x0, 0x0, 0x2e40ab, &(0x7f0000000140)=ANY=[@ANYBLOB='nr_inodf']) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="15000000652e"], 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) 9m25.771902965s ago: executing program 6 (id=404): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3600, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0xfffffffe, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, &(0x7f0000000280)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 9m25.189903479s ago: executing program 6 (id=408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="6b6701bac0da6623000000230000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x20000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x24008845}, 0x0) close(r3) 9m25.065194422s ago: executing program 6 (id=409): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 9m22.716920398s ago: executing program 6 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r3) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 9m19.412105447s ago: executing program 6 (id=436): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x4d0d) 9m3.915293951s ago: executing program 35 (id=436): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x4d0d) 5m56.670730994s ago: executing program 2 (id=1089): r0 = socket$inet6(0xa, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) io_uring_setup(0x742d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x54a10, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x5c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) write(r1, &(0x7f0000000100)='e&my_read_msr1 msr/r', 0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040010) 5m55.554243511s ago: executing program 2 (id=1092): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xb817, 0x0, 0x3, 0x257}, &(0x7f00000021c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0xa001, 0x2, 0x52, 0x0, r7}}], 0x1, &(0x7f0000000340)={0x2e, 0x7e2ddd887c5bdb4a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 5m53.683676316s ago: executing program 2 (id=1099): socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0xf) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffee}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r0, r2, 0x1f}, 0x14) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r4, 0x4, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5m53.10391362s ago: executing program 2 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000010001"], 0x48) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 5m51.783162521s ago: executing program 2 (id=1106): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/make-it-fail\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 5m50.865816394s ago: executing program 2 (id=1109): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m35.713502688s ago: executing program 36 (id=1109): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m32.93006563s ago: executing program 7 (id=1250): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x40084) 4m28.967087953s ago: executing program 7 (id=1255): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$tipc(r2, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r2, &(0x7f00000000c0)=@name, 0x10) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) 4m28.510665204s ago: executing program 7 (id=1257): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) unlinkat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) 4m27.600314286s ago: executing program 7 (id=1259): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @private2, 0x9}, 0x1c) listen(r0, 0x100101) r1 = accept4(r0, 0x0, 0x0, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x406, r3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) 4m27.316050243s ago: executing program 7 (id=1261): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x7c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x7ff, 0x5eb, 0x8, 0x0, 0xbffffffa, 0x410164, r3}) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}}], 0x1, 0x40) 4m26.172123519s ago: executing program 7 (id=1264): r0 = getpgid(0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 4m10.667757246s ago: executing program 37 (id=1264): r0 = getpgid(0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 3m50.260007s ago: executing program 4 (id=1320): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c80)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}}], 0x1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) 3m48.693024807s ago: executing program 4 (id=1323): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast1, 0x0, "028a3ffb0f0000e6d8451601000000000000000000000000000000000100", 0x80000001, 0x2, 0x7, 0x40000006}, 0x3c) close_range(r0, 0xffffffffffffffff, 0x0) 3m47.71109368s ago: executing program 4 (id=1327): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x14}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x40}]}}}]}, 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') 3m46.362072192s ago: executing program 4 (id=1331): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x2, 0x8b, 0x1b, 0x5, 0xffffffd0, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m45.20108392s ago: executing program 4 (id=1336): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x8001) read$alg(r2, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) 3m41.839328719s ago: executing program 4 (id=1343): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) close(0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x847c}, 0x94) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) connect$vsock_stream(r1, 0x0, 0x0) 3m26.318712727s ago: executing program 38 (id=1343): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) close(0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x847c}, 0x94) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) connect$vsock_stream(r1, 0x0, 0x0) 2m37.416684174s ago: executing program 9 (id=1477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m36.877970967s ago: executing program 9 (id=1479): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) userfaultfd(0x80001) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711841000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00001f2000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x951af000) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000000100000000000008001f0001000000", 0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m35.89238329s ago: executing program 9 (id=1484): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) 2m34.517652322s ago: executing program 9 (id=1488): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x18000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xd270, 0x0, 0x1, 0xd05, 0xd4}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) 2m32.343617754s ago: executing program 9 (id=1493): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r0, 0x70b, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x81483, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000270000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) sendfile(r3, r1, 0x0, 0x6) recvfrom(r2, &(0x7f0000000080)=""/22, 0x16, 0x10000, &(0x7f0000000140)=@isdn={0x22, 0x9, 0xfc, 0x3, 0x6}, 0x80) 2m31.66230318s ago: executing program 9 (id=1494): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x23, 0x80805, 0x0) listen(r4, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) sendto$packet(r3, 0x0, 0x0, 0x44894, &(0x7f0000000040)={0x11, 0xf7, r2, 0x1, 0x7, 0x6, @remote}, 0x14) 2m30.975516007s ago: executing program 39 (id=1494): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x23, 0x80805, 0x0) listen(r4, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) sendto$packet(r3, 0x0, 0x0, 0x44894, &(0x7f0000000040)={0x11, 0xf7, r2, 0x1, 0x7, 0x6, @remote}, 0x14) 11.390334501s ago: executing program 0 (id=1880): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='memory_hugetlb_accounting', &(0x7f0000000040)='z', 0x1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10.246092847s ago: executing program 0 (id=1890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 10.13825118s ago: executing program 5 (id=1891): ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f00000003c0), 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") socket$nl_xfrm(0x10, 0x3, 0x6) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000003c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000003667365743d30121df478303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b829232fdd05d7b21f9b9941055ed28c37d5e1ec11cdbcabb8a89ebf2cf2771d69e3cf0e676cc6e5b2e542e426bceaab9b2cf261046247bce0565b43a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4656e47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab924472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b50800000000000000893f64421a40f4822ffcc284dfe9ae1c6e4a04293c970f2dae776decf07b085eb5fdeda7d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb130521de285872a4ca5353cc354a0b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a3000057dfb8858c268c5a000f01000000010000000360236584faaf1a4d4fabd3b68929729fd006fa91186ac3d0d222e00c77ad726cdc16c8456d6f598254bda7c72b24a6b213162cd6e6f205d16a083b5bf85cd0ea669c5fb5535a49d95389c186be0d5d6aaf673c3b675e34dbc89407aa23b2cd4f0d7674421b4896983d79be4da0fae78339ce15085998a17aaf3158b0cf1c7c1322b944e316711ed73c720ac25fea464ea96fdf6be3f67430188cb9f1ea81316df61c875ff59c8ffa9ffe954ccb28f037ca003109618cff0ec917fc7abe19b6a10a0eae6c72b067e2ffffff7f042466d68ce5d192fae5bdea0b94a9bfbd0efae746ff081eb028e5566a25db8f43ddd07c39db9bed547448fa00c94a0420da4bf03b7deb1399148b3b77268ab867c2509cfce576a477f96eb5f1bd9d7dacdddcbb80400f33d79c861e453bdaa847455877361253b3a242b5854b0d28b47cf37cd515396839509f4da0d6c19ae9d3a052210a5c1d4c75273fa05693d79a463dcd94e60850043027ad28b52cf82ff6c63aff270e89c3d310e13ef7565a26eab1bcad6b26136dbee95b303851b41b619b7bc15316c83cddc57cfa5540ab542c6f7eda25e0ef2641e34d8a61905f919ce96663c2967cba470bae1e3334bec127870982103357136f6d05b940d6ad32843aa2053e3de1a7fa81b13e482bcc895b9f43fd77e8c6b1c3beb3422b16c6c957bc22e80d70b024597f146147fe0928df427c2b37e406f7eca3e74cd61a83c6959eba6fbe582291faaf44346ccd8a7f4b5f6cc3de36f3a1", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000100)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7f, 0x204, 0x0, 0x0, 0x20, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e462775f9527ad4d3ff445ff0000008010cdbbf76e69950600", [0x1ce, 0x20000001]}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6) 9.429485867s ago: executing program 3 (id=1892): socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0xea60}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x300}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 9.424966947s ago: executing program 0 (id=1893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019cc0)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 9.30607186s ago: executing program 8 (id=1894): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) 8.05542446s ago: executing program 0 (id=1895): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.828646155s ago: executing program 5 (id=1896): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x5}, 'port1\x00', 0x28, 0x142041, 0x1b35, 0x8, 0x5, 0x2, 0x0, 0x0, 0x7, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100c75, 0x7fff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x50182, 0x1) close_range(r1, r1, 0x2) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) 7.690333778s ago: executing program 3 (id=1897): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @remote}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000180)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c5805000000451697efe42811ee1df0fa9264f7d866b19705487b00", 0xb2, 0xfffffff7, 0x4, 0xe}, 0x3c) 7.094730722s ago: executing program 8 (id=1898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsmount(0xffffffffffffffff, 0x0, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) 6.735852311s ago: executing program 3 (id=1899): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8003}, [@NFTA_TABLE_USERDATA={0xb6, 0x6, "39e4983ed3a871bf8e4ad75a6281838754f3306783aede73ab727b9a368648b07679f371ed7cb67f723304d6159e40d076930a5435118902ed95bba8dba2198120a34bcc5b4b34249f7eb4894af4b398add796411fbae8fac88e02821f9359a8921a22980af383d05a813b1b62c33f747a287f7da90c9073cb71dbf51d30f1b69e7e94a302b4ed05775737b18d7eda528bb23ba7a1a5acd8f225b4bac2c169ef9fb534025818d33ab930011be2bf65f83fff"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.802286303s ago: executing program 8 (id=1900): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bond0\x00', 0x400}) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2d, 'rlimit'}]}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, &(0x7f0000000000), &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, &(0x7f00000026c0)=""/17, &(0x7f0000002700)="3666a5b1f6144abf9e132ae4a7", &(0x7f0000002740), 0x800, r1}, 0x38) socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4880) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x34008000) 5.745910254s ago: executing program 3 (id=1901): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/93, 0x5d}], 0x1, 0x0, 0xf2f) 5.419787552s ago: executing program 8 (id=1902): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) keyctl$search(0xa, 0x0, 0xfffffffffffffffd, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000300)='0\x00', 0x2) clock_gettime(0x0, &(0x7f0000000080)) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2710}, 0x15, 0xfffd, 0x6}], 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x200000, 0x0) 4.426333925s ago: executing program 3 (id=1903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x2563e05cb9c8ea01, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) lseek(r1, 0x164, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.370191257s ago: executing program 5 (id=1904): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x0, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) close(0x3) 4.363933356s ago: executing program 8 (id=1905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) msgrcv(r3, 0x0, 0x0, 0x0, 0x2000) 4.181191571s ago: executing program 0 (id=1906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x10010) 4.140022892s ago: executing program 5 (id=1907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}}, 0x0) 2.10264687s ago: executing program 8 (id=1908): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 278.080273ms ago: executing program 0 (id=1909): r0 = io_uring_setup(0x5d2c, &(0x7f0000000340)={0x0, 0x4255, 0x40, 0x0, 0x2f}) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000440)={r0, 0x86d}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x40, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000005c0)={0x420000, 0x66, 0x39}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0x8) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 277.733533ms ago: executing program 5 (id=1910): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x2, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 194.306055ms ago: executing program 3 (id=1911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323bac0c45b45602067fffffff81004e22030d00ff00289242a8002000eaa57b00090080020e1b05000000000000ff0004f0c70f000800ffffffffffffffffff0300e7ee0000000000000000020000", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x401, 0x81) write(r4, &(0x7f0000000600)='dummy_udc.0\n', 0xc) 0s ago: executing program 5 (id=1912): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000480)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@rodir}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@uni_xlate}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) kernel console output (not intermixed with test programs): 7295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.497" name="/newroot/144/file1/file1" dev="loop2" ino=17059 res=1 errno=0 [ 222.943886][ T7675] hsr_slave_0: entered promiscuous mode [ 222.960187][ T7675] hsr_slave_1: entered promiscuous mode [ 223.377277][ T7822] syz.2.497 (7822) used greatest stack depth: 17784 bytes left [ 223.717453][ T5087] Bluetooth: hci2: command tx timeout [ 223.733643][ T5783] ocfs2: Unmounting device (7,2) on (node local) [ 223.780750][ T7675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 223.819124][ T7675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 223.855689][ T7675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 223.902420][ T7675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 224.244427][ T7675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.295807][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.322625][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.329941][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.360510][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.367782][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.076002][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.682967][ T7890] netlink: 'syz.4.511': attribute type 1 has an invalid length. [ 225.816749][ T7890] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.963629][ T7894] bond3: (slave veth5): Enslaving as an active interface with a down link [ 226.254324][ T7675] veth0_vlan: entered promiscuous mode [ 226.318946][ T7675] veth1_vlan: entered promiscuous mode [ 226.428173][ T7675] veth0_macvtap: entered promiscuous mode [ 226.463779][ T7675] veth1_macvtap: entered promiscuous mode [ 226.524263][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.566511][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.596970][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.616991][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.650122][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.694627][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.734625][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.757317][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.793054][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.828749][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.871182][ T7675] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.917175][ T7675] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.926099][ T7675] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.977095][ T7675] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.225511][ T4533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.279233][ T4533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.459477][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.488573][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.853005][ T28] audit: type=1804 audit(1787174033.996:187): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.518" name="file0" dev="ramfs" ino=16730 res=1 errno=0 [ 229.310296][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.530'. [ 229.336266][ T7983] bond0: option arp_all_targets: invalid value (8) [ 229.778438][ T7990] loop7: detected capacity change from 0 to 32768 [ 229.793587][ T7990] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.531 (7990) [ 229.839448][ T7990] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 229.849874][ T7990] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 229.858922][ T7990] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 229.869314][ T7990] BTRFS info (device loop7): use zstd compression, level 3 [ 229.876618][ T7990] BTRFS info (device loop7): force clearing of disk cache [ 229.884466][ T7990] BTRFS info (device loop7): enabling disk space caching [ 229.891602][ T7990] BTRFS info (device loop7): disk space caching is enabled [ 229.999611][ T7990] BTRFS info (device loop7): enabling ssd optimizations [ 230.006736][ T7990] BTRFS info (device loop7): auto enabling async discard [ 230.042661][ T7990] BTRFS info (device loop7): rebuilding free space tree [ 230.079494][ T7990] BTRFS info (device loop7): disabling free space tree [ 230.086877][ T7990] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 230.096677][ T7990] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 230.809159][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 231.185932][ T7675] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 232.834634][ T8088] loop7: detected capacity change from 0 to 512 [ 232.887945][ T8088] EXT4-fs (loop7): orphan cleanup on readonly fs [ 232.920288][ T8088] EXT4-fs warning (device loop7): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 232.987606][ T8088] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 232.994498][ T8088] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.550: couldn't read orphan inode 26 (err -116) [ 233.037062][ T8088] EXT4-fs (loop7): Remounting filesystem read-only [ 233.088798][ T8088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.236437][ T7675] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.412853][ T8145] tipc: Failed to remove unknown binding: 66,1,1/0:3130190198/3130190200 [ 235.444925][ T8145] tipc: Failed to remove unknown binding: 66,1,1/0:3130190198/3130190200 [ 235.467152][ T8145] tipc: Failed to remove unknown binding: 66,1,1/0:3130190198/3130190200 [ 237.975804][ T28] audit: type=1326 audit(1787174044.126:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.2.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x0 [ 238.094793][ T28] audit: type=1326 audit(1787174044.246:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.2.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 238.147813][ T28] audit: type=1326 audit(1787174044.276:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.2.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 238.173437][ T28] audit: type=1326 audit(1787174044.246:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.2.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 238.694291][ T28] audit: type=1326 audit(1787174044.296:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.2.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 239.317566][ T28] audit: type=1326 audit(1787174044.296:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.2.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 239.447027][ T28] audit: type=1326 audit(1787174044.306:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.2.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 239.567582][ T28] audit: type=1326 audit(1787174044.396:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.2.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff343d5e90e code=0x7ffc0000 [ 239.654079][ T28] audit: type=1326 audit(1787174044.396:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.2.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff343d5e90e code=0x7ffc0000 [ 239.752661][ T28] audit: type=1326 audit(1787174044.396:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.2.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff343d5e90e code=0x7ffc0000 [ 240.095865][ T8222] loop7: detected capacity change from 0 to 512 [ 240.151101][ T8222] EXT4-fs (loop7): Test dummy encryption mode enabled [ 240.173679][ T8222] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 240.267550][ T8222] EXT4-fs (loop7): 1 truncate cleaned up [ 240.280249][ T8222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.337683][ T8222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.152346][ T8293] bond4: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 243.177299][ T8293] bond4: entered allmulticast mode [ 243.253201][ T8293] ip6gretap1: entered promiscuous mode [ 243.287508][ T8293] bond4: (slave ip6gretap1): no link monitoring support [ 243.314095][ T8293] bond4: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 243.365863][ T8293] ip6gretap1: entered allmulticast mode [ 243.459120][ T8293] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 243.848125][ T8314] netlink: 'syz.5.602': attribute type 13 has an invalid length. [ 246.455215][ T8394] netlink: 24 bytes leftover after parsing attributes in process `syz.5.611'. [ 246.696234][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 246.738718][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.611'. [ 246.876144][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 246.896258][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.611'. [ 247.523952][ T8431] overlayfs: failed to clone upperpath [ 249.600369][ T42] nci: nci_rx_work: unknown MT 0x6 [ 250.137811][ T8493] overlayfs: failed to clone upperpath [ 251.003820][ T8504] loop7: detected capacity change from 0 to 512 [ 251.025568][ T8504] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 251.425313][ T8504] EXT4-fs (loop7): 1 truncate cleaned up [ 251.756233][ T8504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.165822][ T7675] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.439226][ T8476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.868009][ T8533] loop0: detected capacity change from 0 to 4096 [ 252.941252][ T8534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.639'. [ 253.073061][ T8533] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 253.183926][ T8533] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 253.270841][ T8533] loop0: [ 255.313840][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 255.313852][ T28] audit: type=1326 audit(1787174061.466:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.7.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 255.379711][ T28] audit: type=1326 audit(1787174061.496:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.7.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 255.445803][ T28] audit: type=1326 audit(1787174061.506:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.7.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 255.649432][ T28] audit: type=1326 audit(1787174061.506:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.7.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 255.857811][ T28] audit: type=1326 audit(1787174061.506:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.7.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 255.934537][ T28] audit: type=1326 audit(1787174061.516:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.7.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 255.986156][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.657'. [ 255.986281][ T28] audit: type=1326 audit(1787174061.566:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.7.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 256.048043][ T28] audit: type=1326 audit(1787174061.566:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.7.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5fb1f9de42 code=0x7ffc0000 [ 256.123987][ T28] audit: type=1326 audit(1787174061.566:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.7.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5fb1f9ded7 code=0x7ffc0000 [ 256.174986][ T28] audit: type=1326 audit(1787174061.566:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.7.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5fb1f5add1 code=0x7ffc0000 [ 256.227605][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.234104][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.049469][ C0] hrtimer: interrupt took 567168 ns [ 257.272073][ T8634] loop2: detected capacity change from 0 to 1024 [ 258.284157][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 259.623110][ T8681] bond3: entered allmulticast mode [ 259.645996][ T8684] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 259.761784][ T8685] bridge2: entered promiscuous mode [ 259.795776][ T8685] bridge2: entered allmulticast mode [ 259.822282][ T8685] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 260.699722][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 260.699758][ T28] audit: type=1326 audit(1787174066.856:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.4.686" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a32b9e0d9 code=0x0 [ 261.173921][ T8714] loop2: detected capacity change from 0 to 256 [ 261.234547][ T8714] FAT-fs (loop2): Directory bread(block 1285) failed [ 261.315745][ T8714] FAT-fs (loop2): Directory bread(block 1286) failed [ 261.385214][ T8714] FAT-fs (loop2): Directory bread(block 1287) failed [ 261.438654][ T8714] FAT-fs (loop2): Directory bread(block 1288) failed [ 261.532133][ T8714] FAT-fs (loop2): Directory bread(block 1285) failed [ 261.615964][ T8714] FAT-fs (loop2): Directory bread(block 1286) failed [ 261.677534][ T8714] FAT-fs (loop2): Directory bread(block 1287) failed [ 261.697419][ T8714] FAT-fs (loop2): Directory bread(block 1288) failed [ 262.093515][ T8722] tipc: Failed to remove unknown binding: 66,0,0/0:3434061373/3434061374 [ 262.139145][ T8726] tipc: Failed to remove unknown binding: 66,0,0/0:3434061373/3434061374 [ 263.716967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 264.540741][ T8749] overlayfs: failed to resolve './cgroup': -2 [ 264.549155][ T8752] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.694'. [ 274.252618][ T8852] loop2: detected capacity change from 0 to 256 [ 278.758805][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 285.500565][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.508497][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.278860][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.345428][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.315704][ T8959] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.332123][ T8959] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.343202][ T8959] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.363837][ T8959] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.866085][ T8989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.761'. [ 289.151416][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 289.192196][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.7.763'. [ 300.018015][ T9125] netlink: 'syz.2.789': attribute type 10 has an invalid length. [ 300.065462][ T9125] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 300.187475][ T9125] netlink: 68 bytes leftover after parsing attributes in process `syz.2.789'. [ 300.282357][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 300.555713][ T9125] bond0: (slave bridge0): Releasing backup interface [ 307.004219][ T9207] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 307.471384][ T9207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.981156][ T9215] bond4: (slave ip6gretap1): making interface the new active one [ 308.073725][ T9215] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 308.166976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 308.208827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 308.237468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 308.288223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 308.316944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 308.406943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 308.829755][ T9228] netlink: 596 bytes leftover after parsing attributes in process `syz.4.815'. [ 308.924950][ T28] audit: type=1326 audit(1787174115.076:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.2.817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 309.004664][ T28] audit: type=1326 audit(1787174115.076:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.2.817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 309.044173][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 309.065850][ T28] audit: type=1326 audit(1787174115.106:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.2.817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 310.031667][ T9231] sched: RT throttling activated [ 311.687076][ T28] audit: type=1326 audit(1787174115.106:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.2.817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 311.858718][ T28] audit: type=1326 audit(1787174115.106:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.2.817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 312.029915][ T28] audit: type=1326 audit(1787174115.106:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.2.817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 312.193474][ T28] audit: type=1326 audit(1787174115.106:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.2.817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 312.229133][ T28] audit: type=1326 audit(1787174115.116:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.2.817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 312.369208][ T28] audit: type=1326 audit(1787174115.116:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.2.817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 312.453907][ T28] audit: type=1326 audit(1787174115.116:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.2.817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 312.872563][ T9254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.981842][ T9254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.081664][ T9259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.212962][ T9282] loop2: detected capacity change from 0 to 32768 [ 315.545275][ T9288] loop7: detected capacity change from 0 to 2048 [ 315.925689][ T9292] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.393107][ T9293] NILFS error (device loop7): nilfs_lookup: deleted inode referenced: 12 [ 316.547731][ T9293] Remounting filesystem read-only [ 316.973444][ T9296] macsec1: entered promiscuous mode [ 317.017574][ T9296] virt_wifi0: entered promiscuous mode [ 317.041396][ T9288] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 317.117307][ T9288] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 317.177436][ T9288] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 317.190877][ T9288] NILFS (loop7): discard dirty block: blocknr=37, size=1024 [ 317.199706][ T9288] NILFS (loop7): discard dirty block: blocknr=38, size=1024 [ 317.209542][ T9288] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 317.348602][ T9288] NILFS (loop7): discard dirty page: offset=229376, ino=3 [ 317.378845][ T9288] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 317.424164][ T9288] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 317.467499][ T9288] NILFS (loop7): discard dirty block: blocknr=50, size=1024 [ 317.474920][ T9288] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 317.682667][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.689955][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.164015][ T8393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.614216][ T8393] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.875984][ T8393] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.418201][ T8393] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.027725][ T9374] fuse: Bad value for 'fd' [ 329.696138][ T9376] netlink: 'syz.7.861': attribute type 1 has an invalid length. [ 329.738614][ T9376] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 329.768618][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.861'. [ 329.857608][ T9385] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 330.919206][ T8393] hsr_slave_0: left promiscuous mode [ 331.034734][ T8393] hsr_slave_1: left promiscuous mode [ 331.073639][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.126465][ T8393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.188345][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.276341][ T8393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.334735][ T8393] bridge_slave_1: left allmulticast mode [ 331.355823][ T8393] bridge_slave_1: left promiscuous mode [ 331.385341][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.441685][ T8393] bridge_slave_0: left allmulticast mode [ 331.462692][ T8393] bridge_slave_0: left promiscuous mode [ 331.486970][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.608014][ T9416] xt_TCPMSS: Only works on TCP SYN packets [ 331.693769][ T8393] veth1_macvtap: left promiscuous mode [ 331.701083][ T8393] veth0_macvtap: left promiscuous mode [ 331.708042][ T8393] veth1_vlan: left promiscuous mode [ 331.715135][ T8393] veth0_vlan: left promiscuous mode [ 332.230816][ T9429] overlayfs: failed to clone upperpath [ 336.062335][ T8393] team0 (unregistering): Port device team_slave_1 removed [ 336.318959][ T8393] team0 (unregistering): Port device team_slave_0 removed [ 336.470974][ T8393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.595772][ T8393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.422524][ T8393] bond0 (unregistering): Released all slaves [ 339.132097][ T9422] netlink: 'syz.2.874': attribute type 1 has an invalid length. [ 339.173264][ T9422] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 339.197533][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 339.375989][ T9424] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 339.562811][ T9428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.874'. [ 339.587179][ T9444] lo: Caught tx_queue_len zero misconfig [ 339.593525][ T9444] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 340.199674][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 345.662598][ T9548] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.670781][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.901757][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.006238][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.936427][ T9548] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.955434][ T9548] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.965707][ T9548] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.975685][ T9548] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.482085][ T9562] netlink: 40 bytes leftover after parsing attributes in process `syz.5.908'. [ 348.517791][ T9562] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 348.534197][ T9564] netlink: 40 bytes leftover after parsing attributes in process `syz.5.908'. [ 348.658212][ T9564] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 351.633134][ T1131] tipc: Subscription rejected, illegal request [ 352.255480][ T5852] IPVS: starting estimator thread 0... [ 352.389169][ T9642] IPVS: using max 16 ests per chain, 38400 per kthread [ 352.567143][ T5848] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 352.705621][ T9652] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.930'. [ 352.769167][ T9654] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 352.779675][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 352.805450][ T9654] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 352.826356][ T5848] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 352.867080][ T5848] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.912121][ T5848] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.963453][ T5848] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.024933][ T5848] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.082868][ T5848] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 353.126022][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.441915][ T5848] usb 3-1: GET_CAPABILITIES returned 0 [ 353.480385][ T5848] usbtmc 3-1:16.0: can't read capabilities [ 353.796122][ T5848] usb 3-1: USB disconnect, device number 4 [ 354.170792][ T9669] netlink: 'syz.5.934': attribute type 12 has an invalid length. [ 354.203945][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.934'. [ 355.940495][ T9685] loop2: detected capacity change from 0 to 8192 [ 356.062136][ T9685] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 357.139536][ T9707] overlayfs: failed to clone upperpath [ 357.540868][ T9711] bond2: (slave veth5): Releasing active interface [ 357.959677][ T9714] CIFS mount error: No usable UNC path provided in device string! [ 357.959677][ T9714] [ 357.972381][ T9714] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 358.108554][ T9711] bond3: (slave bridge2): Releasing backup interface [ 358.208498][ T9711] bridge2: left allmulticast mode [ 358.281091][ T9711] bond4: (slave ip6gretap1): Releasing active interface [ 358.472714][ T9716] team0: Mode changed to "loadbalance" [ 360.428777][ T9753] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 360.539693][ T9753] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 361.885115][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 361.885137][ T28] audit: type=1326 audit(1787174168.036:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.2.960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 362.084669][ T28] audit: type=1326 audit(1787174168.036:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.2.960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 362.239863][ T28] audit: type=1326 audit(1787174168.096:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.2.960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 362.387509][ T28] audit: type=1326 audit(1787174168.096:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.2.960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 362.495876][ T28] audit: type=1326 audit(1787174168.096:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.2.960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 362.646096][ T28] audit: type=1326 audit(1787174168.096:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.2.960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 362.781302][ T28] audit: type=1326 audit(1787174168.096:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.2.960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 362.936193][ T28] audit: type=1326 audit(1787174168.106:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.2.960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 363.024077][ T9790] netlink: 'syz.5.963': attribute type 1 has an invalid length. [ 363.137553][ T28] audit: type=1326 audit(1787174168.106:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.2.960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff343d9e0d9 code=0x7ffc0000 [ 363.250966][ T28] audit: type=1326 audit(1787174168.106:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.2.960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff343d5e90e code=0x7ffc0000 [ 363.326199][ T9790] bond1: entered promiscuous mode [ 363.352013][ T9790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.478414][ T9791] vlan4: entered allmulticast mode [ 363.535089][ T9791] bond1: entered allmulticast mode [ 363.724131][ T9796] bond1: (slave bridge1): making interface the new active one [ 363.814162][ T9796] bridge1: entered promiscuous mode [ 363.867513][ T9796] bridge1: entered allmulticast mode [ 363.919087][ T9796] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 364.524212][ T9807] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 364.893410][ T9810] bond5: (slave gretap1): making interface the new active one [ 364.935265][ T9810] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 365.977202][ T9831] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 368.647089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 370.005332][ T9873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.026377][ T9873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.064609][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 370.064630][ T28] audit: type=1326 audit(1787174176.206:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420e39e0d9 code=0x7ffc0000 [ 370.106613][ T9873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.133801][ T9873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.158829][ T9873] geneve2: entered promiscuous mode [ 370.181496][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.986'. [ 370.195337][ T28] audit: type=1326 audit(1787174176.206:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420e39e0d9 code=0x7ffc0000 [ 370.309096][ T28] audit: type=1326 audit(1787174176.256:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f420e39e0d9 code=0x7ffc0000 [ 370.337982][ T28] audit: type=1326 audit(1787174176.256:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420e39e0d9 code=0x7ffc0000 [ 370.458616][ T28] audit: type=1326 audit(1787174176.256:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420e39e0d9 code=0x7ffc0000 [ 370.593378][ T28] audit: type=1326 audit(1787174176.256:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f420e39e0d9 code=0x7ffc0000 [ 370.641836][ T9881] bond1: (slave bridge1): Releasing backup interface [ 370.660341][ T9881] bridge1: left promiscuous mode [ 370.696819][ T9881] bridge1: left allmulticast mode [ 370.712906][ T28] audit: type=1326 audit(1787174176.256:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420e39e0d9 code=0x7ffc0000 [ 370.891335][ T28] audit: type=1326 audit(1787174176.276:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f420e39e0d9 code=0x7ffc0000 [ 370.958190][ T9882] team0: Mode changed to "loadbalance" [ 371.082129][ T28] audit: type=1326 audit(1787174176.276:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420e39e0d9 code=0x7ffc0000 [ 371.218976][ T28] audit: type=1326 audit(1787174176.276:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9874 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420e39e0d9 code=0x7ffc0000 [ 372.477880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 372.921971][ T9909] trusted_key: syz.2.995 sent an empty control message without MSG_MORE. [ 373.399844][ T9915] futex_wake_op: syz.5.997 tries to shift op by 144; fix this program [ 375.409454][ T9942] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 375.563796][ T9942] bond6: entered promiscuous mode [ 375.598237][ T9942] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.688686][ T9944] vlan4: entered allmulticast mode [ 375.693929][ T9944] bond6: entered allmulticast mode [ 375.824619][ T9945] bond6: (slave bridge0): making interface the new active one [ 375.873776][ T9945] bridge0: entered promiscuous mode [ 375.908539][ T9945] bridge0: entered allmulticast mode [ 375.949652][ T9945] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 376.637448][ T9955] netlink: 'syz.5.1007': attribute type 1 has an invalid length. [ 376.844868][ T9955] bond2: entered allmulticast mode [ 376.954665][ T9961] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 377.037981][ T9961] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 377.125639][ T9961] bond2: (slave vti0): making interface the new active one [ 377.207354][ T9961] vti0: entered allmulticast mode [ 377.242167][ T9961] bond2: (slave vti0): Enslaving as an active interface with an up link [ 377.400285][ T9962] bond2 (unregistering): (slave vti0): Releasing backup interface [ 377.484379][ T9962] vti0: left allmulticast mode [ 377.531919][ T9962] bond2 (unregistering): Released all slaves [ 377.774027][ T9963] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.822307][ T9963] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.863904][ T9963] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.901221][ T9963] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.337887][ T9976] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 379.114815][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.122735][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.469260][T10064] team0: Mode changed to "activebackup" [ 384.073928][T10075] netlink: 1320 bytes leftover after parsing attributes in process `syz.5.1032'. [ 389.463244][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 393.263849][T10204] netlink: 'syz.5.1064': attribute type 4 has an invalid length. [ 393.537348][T10205] netlink: 'syz.5.1064': attribute type 4 has an invalid length. [ 393.985117][T10211] netlink: 'syz.4.1068': attribute type 10 has an invalid length. [ 394.083232][T10211] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 394.132329][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 394.154255][T10212] bridge_slave_1: left allmulticast mode [ 394.164209][T10212] bridge_slave_1: left promiscuous mode [ 394.173654][T10212] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.258177][T10212] bridge_slave_0: left allmulticast mode [ 394.284839][T10212] bridge_slave_0: left promiscuous mode [ 394.331889][T10212] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.618005][T10212] bond0: (slave bridge0): Releasing backup interface [ 394.716712][T10221] bridge_slave_0: left allmulticast mode [ 394.769795][T10221] bridge_slave_0: left promiscuous mode [ 394.782259][T10221] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.831911][T10221] bridge_slave_1: left allmulticast mode [ 394.849190][T10221] bridge_slave_1: left promiscuous mode [ 394.878869][T10221] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.904644][T10221] bond0: (slave bond_slave_0): Releasing backup interface [ 394.936452][T10221] bond0: (slave bond_slave_1): Releasing backup interface [ 394.991741][T10221] team0: Port device team_slave_0 removed [ 395.020999][T10221] team0: Port device team_slave_1 removed [ 395.041325][T10221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.070535][T10221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.204411][T10224] team0: Mode changed to "loadbalance" [ 395.319553][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 395.319571][ T28] audit: type=1800 audit(1787174201.476:374): pid=10219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1071" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 395.950306][T10241] futex_wake_op: syz.7.1076 tries to shift op by 144; fix this program [ 397.232518][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1079'. [ 397.720454][T10254] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 397.804027][T10257] vlan5: entered allmulticast mode [ 397.888233][T10257] bond2: entered allmulticast mode [ 397.931933][T10257] gretap1: entered allmulticast mode [ 399.136415][T10278] loop2: detected capacity change from 0 to 16 [ 399.242440][T10278] erofs: (device loop2): mounted with root inode @ nid 36. [ 399.332718][T10275] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 399.423624][T10275] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 399.487317][T10275] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 399.769464][T10275] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 399.940827][T10275] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 400.092847][T10275] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 400.154043][T10275] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 400.206336][T10275] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 400.271698][T10275] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 400.322626][ T28] audit: type=1800 audit(1787174206.466:375): pid=10275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1084" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 400.962832][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1083'. [ 401.432107][T10302] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 401.624090][T10305] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 405.632521][T10359] netlink: 'syz.4.1104': attribute type 4 has an invalid length. [ 405.772205][T10361] netlink: 'syz.4.1104': attribute type 4 has an invalid length. [ 406.728239][T10373] netlink: 'syz.5.1108': attribute type 1 has an invalid length. [ 407.005374][T10373] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.137536][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1108'. [ 407.146562][T10377] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 407.431025][T10377] bond3: entered allmulticast mode [ 407.785335][T10373] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 408.072412][ T28] audit: type=1326 audit(1787174214.226:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.4.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a32b9e0d9 code=0x7ffc0000 [ 408.236473][ T28] audit: type=1326 audit(1787174214.226:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.4.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a32b9e0d9 code=0x7ffc0000 [ 408.354119][ T28] audit: type=1326 audit(1787174214.226:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.4.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a32b9e0d9 code=0x7ffc0000 [ 408.394950][ T28] audit: type=1326 audit(1787174214.226:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.4.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a32b9e0d9 code=0x7ffc0000 [ 408.503143][ T28] audit: type=1326 audit(1787174214.276:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.4.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a32b9e0d9 code=0x7ffc0000 [ 408.610435][ T28] audit: type=1326 audit(1787174214.276:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.4.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f1a32b9e0d9 code=0x7ffc0000 [ 408.758620][ T28] audit: type=1326 audit(1787174214.276:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.4.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a32b9e0d9 code=0x7ffc0000 [ 408.911905][ T28] audit: type=1326 audit(1787174214.276:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.4.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a32b9e0d9 code=0x7ffc0000 [ 409.014038][T10401] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1114'. [ 409.042101][ T28] audit: type=1326 audit(1787174214.276:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.4.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a32b9e0d9 code=0x7ffc0000 [ 409.338380][ T28] audit: type=1326 audit(1787174214.276:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.4.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a32b9e0d9 code=0x7ffc0000 [ 410.097501][T10412] MTD: Couldn't look up './dev/mtdblock0': -2 [ 413.648098][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 413.721566][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 413.743265][T10453] ceph: No mds server is up or the cluster is laggy [ 418.728445][T10500] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1136'. [ 420.964422][T10527] netlink: 'syz.7.1142': attribute type 280 has an invalid length. [ 422.160026][T10542] syz.5.1148 (10542): attempted to duplicate a private mapping with mremap. This is not supported. [ 423.872064][T10561] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 423.891664][T10561] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 424.337325][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.349888][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.415501][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.450943][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.537347][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 424.560415][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.603668][ T5087] Bluetooth: hci3: command tx timeout [ 428.677089][ T5087] Bluetooth: hci3: command tx timeout [ 429.843057][T10564] chnl_net:caif_netlink_parms(): no params data found [ 430.757330][ T5087] Bluetooth: hci3: command tx timeout [ 432.837177][ T5087] Bluetooth: hci3: command tx timeout [ 435.790427][T10619] lo speed is unknown, defaulting to 1000 [ 435.796381][T10619] lo speed is unknown, defaulting to 1000 [ 435.803351][T10619] lo speed is unknown, defaulting to 1000 [ 435.821212][T10619] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 435.855388][T10619] lo speed is unknown, defaulting to 1000 [ 435.863080][T10619] lo speed is unknown, defaulting to 1000 [ 435.872759][T10619] lo speed is unknown, defaulting to 1000 [ 435.880824][T10619] lo speed is unknown, defaulting to 1000 [ 435.888553][T10619] lo speed is unknown, defaulting to 1000 [ 436.217491][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.224751][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.306471][T10564] bridge_slave_0: entered allmulticast mode [ 436.366270][T10564] bridge_slave_0: entered promiscuous mode [ 436.418938][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.426180][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.485459][T10564] bridge_slave_1: entered allmulticast mode [ 436.539953][T10564] bridge_slave_1: entered promiscuous mode [ 437.370788][T10646] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 437.386270][T10564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.449572][T10564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.695919][T10649] netlink: 'syz.5.1174': attribute type 11 has an invalid length. [ 437.724489][ T59] bond5: (slave gretap1): Releasing active interface [ 438.163542][ T5087] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 438.173797][T10564] team0: Port device team_slave_0 added [ 438.566526][T10564] team0: Port device team_slave_1 added [ 438.694919][T10564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.709493][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.759825][T10564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.893465][T10564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.910372][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.945213][T10564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.080411][ T59] hsr_slave_0: left promiscuous mode [ 439.116537][ T59] hsr_slave_1: left promiscuous mode [ 439.209786][ T59] bond6 (unregistering): (slave bridge0): Releasing backup interface [ 439.225792][ T59] bridge0 (unregistering): left promiscuous mode [ 439.233761][ T59] bridge0 (unregistering): left allmulticast mode [ 439.754754][T10675] Invalid ELF header magic: != ELF [ 440.587886][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.595860][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.620427][ T1293] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 440.972620][ T59] bond6 (unregistering): Released all slaves [ 441.141905][ T59] bond5 (unregistering): Released all slaves [ 442.224594][ T59] bond4 (unregistering): Released all slaves [ 442.554437][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 442.554456][ T28] audit: type=1326 audit(1787174248.706:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.5.1190" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f420e39e0d9 code=0x0 [ 442.602527][ T59] bond3 (unregistering): Released all slaves [ 443.145227][ T59] bond2 (unregistering): Released all slaves [ 443.195146][ T59] bond1 (unregistering): Released all slaves [ 450.006221][T10722] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1193'. [ 450.114470][ T59] bond0 (unregistering): Released all slaves [ 450.211588][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 450.251929][T10689] netlink: 'syz.4.1183': attribute type 10 has an invalid length. [ 450.267042][T10689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1183'. [ 450.276242][T10689] : entered promiscuous mode [ 450.326198][T10689] bond2: (slave ): Releasing active interface [ 450.842559][T10564] hsr_slave_0: entered promiscuous mode [ 450.984232][T10564] hsr_slave_1: entered promiscuous mode [ 454.087827][T10564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.097908][T10564] Cannot create hsr debugfs directory [ 456.608066][T10564] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 456.664101][T10564] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 456.753219][T10564] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 456.821461][T10564] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 457.558122][T10564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.684820][T10564] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.724948][ T5844] IPVS: starting estimator thread 0... [ 457.769815][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.777105][ T8383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.858754][T10772] IPVS: using max 16 ests per chain, 38400 per kthread [ 457.880013][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.888206][ T8383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.402702][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1205'. [ 461.267716][T10794] netlink: 'syz.4.1208': attribute type 4 has an invalid length. [ 461.377118][T10794] netlink: 'syz.4.1208': attribute type 4 has an invalid length. [ 465.906248][T10564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.469464][T10819] warning: `syz.5.1214' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 467.931814][T10564] veth0_vlan: entered promiscuous mode [ 468.040183][T10564] veth1_vlan: entered promiscuous mode [ 468.232832][T10564] veth0_macvtap: entered promiscuous mode [ 468.355329][T10564] veth1_macvtap: entered promiscuous mode [ 468.463463][T10842] xt_socket: unknown flags 0x4c [ 468.483258][T10564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.578018][T10564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.640837][T10564] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.707003][T10564] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.752947][T10564] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.804420][T10564] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.243901][T10850] Cannot find del_set index 2 as target [ 469.320736][ T3935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.337517][T10850] netlink: 'syz.7.1212': attribute type 16 has an invalid length. [ 469.393378][ T3935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.616742][ T8385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.683402][ T8385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.208564][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1147'. [ 471.221746][T10872] lo speed is unknown, defaulting to 1000 [ 480.404997][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1235'. [ 480.617117][ T28] audit: type=1326 audit(1787174286.766:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.7.1236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 480.703685][T10943] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.713528][T10943] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.722428][T10943] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.731423][T10943] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.801676][ T28] audit: type=1326 audit(1787174286.766:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.7.1236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 480.927148][ T28] audit: type=1326 audit(1787174286.796:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.7.1236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 481.087054][ T28] audit: type=1326 audit(1787174286.796:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.7.1236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 481.234892][ T28] audit: type=1326 audit(1787174286.796:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.7.1236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 481.273225][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1235'. [ 481.451226][ T28] audit: type=1326 audit(1787174286.796:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.7.1236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 481.644516][ T28] audit: type=1326 audit(1787174286.806:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.7.1236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 481.837033][ T28] audit: type=1326 audit(1787174286.806:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.7.1236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 482.020487][ T28] audit: type=1326 audit(1787174286.826:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.7.1236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb1f9e0d9 code=0x7ffc0000 [ 482.219875][ T28] audit: type=1326 audit(1787174286.826:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.7.1236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fb1f9dd6b code=0x7ffc0000 [ 488.426547][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1253'. [ 488.652420][T11013] bond5: entered promiscuous mode [ 488.697462][T11013] 8021q: adding VLAN 0 to HW filter on device bond5 [ 488.880873][T11017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 488.938054][T11017] bond5: (slave sit2): The slave device specified does not support setting the MAC address [ 488.991094][T11017] bond5: (slave sit2): Error -95 calling set_mac_address [ 490.485543][T11038] vlan2: entered allmulticast mode [ 490.526329][T11038] veth0_to_bond: entered allmulticast mode [ 497.460269][T11057] lo speed is unknown, defaulting to 1000 [ 501.982537][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.997273][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.009801][ T1293] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 507.295266][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1275'. [ 508.137381][T11170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 508.160116][T11170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 508.174543][T11170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 508.186469][T11170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 508.195146][T11170] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 508.203336][T11170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 508.859982][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1276'. [ 508.911043][T11168] bond6: entered promiscuous mode [ 508.916405][T11168] bond6: entered allmulticast mode [ 509.470972][T11169] lo speed is unknown, defaulting to 1000 [ 510.277626][ T5087] Bluetooth: hci4: command tx timeout [ 510.524533][T11169] chnl_net:caif_netlink_parms(): no params data found [ 511.472907][T11169] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.531768][T11169] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.577234][T11169] bridge_slave_0: entered allmulticast mode [ 511.625976][T11169] bridge_slave_0: entered promiscuous mode [ 511.701245][T11169] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.772147][T11169] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.810380][T11169] bridge_slave_1: entered allmulticast mode [ 512.317343][T11169] bridge_slave_1: entered promiscuous mode [ 512.368671][ T5087] Bluetooth: hci4: command tx timeout [ 512.566378][T11169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.642572][T11169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.758641][T11219] bridge_slave_0: left allmulticast mode [ 512.801009][T11219] bridge_slave_0: left promiscuous mode [ 512.833444][T11219] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.896038][T11219] bridge_slave_1: left allmulticast mode [ 512.927524][T11219] bridge_slave_1: left promiscuous mode [ 512.953971][T11219] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.022995][T11219] bond0: (slave bond_slave_0): Releasing backup interface [ 513.325530][T11219] bond0: (slave bond_slave_1): Releasing backup interface [ 513.637813][T11219] team0: Port device team_slave_0 removed [ 513.818592][T11219] team0: Port device team_slave_1 removed [ 513.825547][T11219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.866751][T11219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.918012][T11219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.956673][T11219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.084357][T11220] team0: Mode changed to "loadbalance" [ 514.424693][T11234] netlink: 'syz.4.1290': attribute type 4 has an invalid length. [ 514.437997][ T5087] Bluetooth: hci4: command tx timeout [ 514.493096][T11234] netlink: 'syz.4.1290': attribute type 5 has an invalid length. [ 514.505419][T11234] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1290'. [ 514.668209][T11169] team0: Port device team_slave_0 added [ 514.722198][T11169] team0: Port device team_slave_1 added [ 514.956024][T11169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.003420][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.132897][T11169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.283188][T11169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.322628][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.454415][T11169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.504406][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1294'. [ 515.831731][T11169] hsr_slave_0: entered promiscuous mode [ 515.870880][T11169] hsr_slave_1: entered promiscuous mode [ 515.904137][T11169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.940993][T11169] Cannot create hsr debugfs directory [ 516.521547][ T5087] Bluetooth: hci4: command tx timeout [ 517.601994][T11169] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 517.656361][T11169] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 517.723304][T11169] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 517.776619][T11169] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 518.668689][T11169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.823693][T11169] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.900221][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.907588][ T8385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.024012][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.031491][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.765565][T11169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.517821][T11323] Cannot find add_set index 0 as target [ 522.413108][T11334] cifs: Unknown parameter 'timeo' [ 523.338839][T11169] veth0_vlan: entered promiscuous mode [ 523.365958][T11169] veth1_vlan: entered promiscuous mode [ 523.583908][T11169] veth0_macvtap: entered promiscuous mode [ 523.671957][T11169] veth1_macvtap: entered promiscuous mode [ 523.795831][T11169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.859942][T11169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.921645][T11169] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.979232][T11169] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.015075][T11169] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.316994][T11169] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.520346][T11357] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1315'. [ 526.922919][ T8393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.974254][ T8393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.143938][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.206521][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.400486][T11393] bond5: entered allmulticast mode [ 530.907349][T11407] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 531.342825][T11415] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 535.348194][ T5848] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 535.590214][ T5848] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.635370][ T5848] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 535.683747][ T5848] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.734342][ T5848] usb 10-1: config 0 descriptor?? [ 536.241066][ T5848] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 536.348748][ T5848] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0005/input/input7 [ 537.617769][T11481] Need at least one configuration in g1. [ 537.669732][T11481] udc dummy_udc.0: failed to start g1: -22 [ 537.711664][T11481] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 537.777447][T11481] UDC core: g1: couldn't find an available UDC or it's busy [ 538.396556][ T5848] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 538.594760][ T5848] usb 10-1: USB disconnect, device number 2 [ 538.967680][T11490] fido_id[11490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 539.468108][ T5848] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 539.724909][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 539.724930][ T28] audit: type=1800 audit(1787174345.866:482): pid=11488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1345" name="bus" dev="ramfs" ino=26504 res=0 errno=0 [ 539.755248][ T5848] usb 10-1: Using ep0 maxpacket: 8 [ 539.866950][ T5848] usb 10-1: unable to get BOS descriptor or descriptor too short [ 539.921558][ T5848] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 539.957079][ T5848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.019805][ T5848] usb 10-1: Product: syz [ 540.024170][ T5848] usb 10-1: Manufacturer: syz [ 540.085894][ T5848] usb 10-1: SerialNumber: syz [ 541.502207][ T5848] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 541.557045][ T5848] usb 10-1: MIDIStreaming interface descriptor not found [ 542.249368][ T5848] usb 10-1: USB disconnect, device number 3 [ 542.436739][T11498] udevd[11498]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.595835][T11529] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1354'. [ 544.924155][T11543] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 544.975089][T11543] ref_ctr increment failed for inode: 0x6eb offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807d727200 [ 545.304742][T11548] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 545.757167][T11548] ref_ctr decrement failed for inode: 0x6eb offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807d727200 [ 546.423500][T11556] CIFS: Attempting to mount //127.0.0.1/test [ 546.800215][T11562] netlink: 'syz.9.1361': attribute type 1 has an invalid length. [ 547.148224][T11556] CIFS: VFS: cifs_mount failed w/return code = -112 [ 548.809740][ T28] audit: type=1326 audit(1787174354.956:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.9.1370" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd48f9e0d9 code=0x7ffc0000 [ 549.075977][ T28] audit: type=1326 audit(1787174354.956:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.9.1370" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd48f9e0d9 code=0x7ffc0000 [ 549.369096][ T28] audit: type=1326 audit(1787174354.996:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.9.1370" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd48f9e0d9 code=0x7ffc0000 [ 549.623969][ T28] audit: type=1326 audit(1787174354.996:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.9.1370" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd48f9e0d9 code=0x7ffc0000 [ 549.799738][ T28] audit: type=1326 audit(1787174354.996:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.9.1370" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd48f9e0d9 code=0x7ffc0000 [ 549.888721][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1371'. [ 549.918978][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1371'. [ 549.928657][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1371'. [ 549.939108][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1371'. [ 550.085385][ T28] audit: type=1326 audit(1787174355.036:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.9.1370" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7efd48f9e0d9 code=0x7ffc0000 [ 550.141577][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 551.147399][ T28] audit: type=1326 audit(1787174355.036:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.9.1370" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd48f9e0d9 code=0x7ffc0000 [ 551.572554][ T28] audit: type=1326 audit(1787174355.036:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.9.1370" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd48f9e0d9 code=0x7ffc0000 [ 551.669897][T11170] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 552.963193][ T28] audit: type=1326 audit(1787174355.046:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.9.1370" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7efd48f9e0d9 code=0x7ffc0000 [ 553.165922][ T28] audit: type=1326 audit(1787174355.046:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.9.1370" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd48f9e0d9 code=0x7ffc0000 [ 556.295565][T11631] virt_wifi0: left promiscuous mode [ 557.095955][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 557.110251][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 557.127145][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 557.135836][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 557.143988][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 557.151859][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 557.833814][T11631] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.843003][T11631] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.852084][T11631] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.861137][T11631] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.253674][T11642] lo speed is unknown, defaulting to 1000 [ 558.445179][T11652] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 558.461863][T11652] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 559.237789][ T5087] Bluetooth: hci2: command tx timeout [ 560.485188][T11642] chnl_net:caif_netlink_parms(): no params data found [ 561.271733][T11680] Cannot find add_set index 0 as target [ 561.327663][ T5087] Bluetooth: hci2: command tx timeout [ 563.224790][T11642] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.255550][T11642] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.296717][T11642] bridge_slave_0: entered allmulticast mode [ 563.333932][T11642] bridge_slave_0: entered promiscuous mode [ 563.381178][T11642] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.412468][ T5087] Bluetooth: hci2: command tx timeout [ 563.422892][T11642] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.458886][T11642] bridge_slave_1: entered allmulticast mode [ 563.480497][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.503870][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.518562][ T1293] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 563.537565][T11642] bridge_slave_1: entered promiscuous mode [ 564.116127][T11642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.330897][T11642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.814600][T11642] team0: Port device team_slave_0 added [ 564.983421][T11642] team0: Port device team_slave_1 added [ 565.245563][T11642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.274312][T11642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.389956][T11642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.480714][ T5087] Bluetooth: hci2: command tx timeout [ 565.486574][T11642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.502941][T11642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.657078][T11642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.607776][ T8387] bond4: (slave ip6gretap1): Releasing backup interface [ 566.662638][ T8387] ip6gretap1 (unregistering): left allmulticast mode [ 566.755007][T11642] hsr_slave_0: entered promiscuous mode [ 566.789806][T11642] hsr_slave_1: entered promiscuous mode [ 566.830295][T11642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.864049][T11642] Cannot create hsr debugfs directory [ 569.269013][T11764] loop9: detected capacity change from 0 to 512 [ 569.362333][T11764] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 569.557505][T11764] EXT4-fs (loop9): 1 truncate cleaned up [ 569.634547][T11764] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.030091][T11169] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.765806][T11785] loop9: detected capacity change from 0 to 1024 [ 570.875129][T11785] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 570.950192][T11785] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 571.042118][T11785] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 571.143610][T11785] EXT4-fs error (device loop9): ext4_get_journal_inode:5820: inode #5: comm syz.9.1409: unexpected bad inode w/o EXT4_IGET_BAD [ 571.269616][T11785] EXT4-fs (loop9): no journal found [ 571.274929][T11785] EXT4-fs (loop9): can't get journal size [ 571.671795][T11785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 572.103699][T11795] tipc: Started in network mode [ 572.160546][T11795] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 572.169879][T11795] tipc: Enabled bearer , priority 0 [ 572.842937][T11169] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.897096][T11795] tipc: Resetting bearer [ 573.122827][T11795] tipc: Disabling bearer [ 573.186615][T11808] Bluetooth: MGMT ver 1.22 [ 573.529523][T11808] IPv6: sit1: Disabled Multicast RS [ 573.545586][T11808] sit1: entered allmulticast mode [ 575.147855][ T8387] hsr_slave_0: left promiscuous mode [ 575.220638][ T8387] hsr_slave_1: left promiscuous mode [ 575.266589][ T8387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.305527][ T8387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.363423][ T8387] bond6 (unregistering): Released all slaves [ 576.745556][ T8387] bond5 (unregistering): left allmulticast mode [ 576.773504][ T8387] bond5 (unregistering): Released all slaves [ 576.971287][ T8387] bond4 (unregistering): Released all slaves [ 577.073813][ T8387] bond3 (unregistering): (slave veth5): Releasing active interface [ 581.826309][ T8387] bond3 (unregistering): Released all slaves [ 582.254652][ T8387] bond2 (unregistering): Released all slaves [ 582.341302][ T8387] bond1 (unregistering): (slave veth3): Releasing active interface [ 582.863682][ T8387] bond1 (unregistering): Released all slaves [ 584.219082][T11856] futex_wake_op: syz.5.1424 tries to shift op by 144; fix this program [ 584.631038][ T8387] team0 (unregistering): Port device team_slave_1 removed [ 584.756737][ T8387] team0 (unregistering): Port device team_slave_0 removed [ 584.847829][ T8387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.942661][ T8387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.741311][ T8387] bond0 (unregistering): Released all slaves [ 585.824344][T11828] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1418'. [ 586.292795][T11867] bond1 (unregistering): Released all slaves [ 586.469836][T11642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 586.509114][T11642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 586.553380][T11642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 586.678803][T11642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 587.079534][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1429'. [ 587.861002][ T8387] IPVS: stop unused estimator thread 0... [ 587.952803][T11642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.042047][T11642] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.049338][ T5851] IPVS: starting estimator thread 0... [ 588.064995][T11886] loop9: detected capacity change from 0 to 512 [ 588.082293][T11886] EXT4-fs: Ignoring removed nobh option [ 588.104544][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.111878][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.136963][T11889] IPVS: using max 17 ests per chain, 40800 per kthread [ 588.147438][T11886] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 588.166036][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.173352][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.204642][T11886] EXT4-fs (loop9): 1 truncate cleaned up [ 588.232827][T11886] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.461267][T11169] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.093281][T11642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.279535][T11642] veth0_vlan: entered promiscuous mode [ 589.329684][T11642] veth1_vlan: entered promiscuous mode [ 589.461353][T11642] veth0_macvtap: entered promiscuous mode [ 589.509660][T11642] veth1_macvtap: entered promiscuous mode [ 589.600268][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.630877][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.661509][T11642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.729491][T11642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.756886][T11642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.783642][T11642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.826339][T11642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.856167][T11642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.886672][T11642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.907086][T11642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.232962][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.294098][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.426142][ T8383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.452336][ T8383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.816929][T11931] syzkaller0: entered promiscuous mode [ 590.822681][T11931] syzkaller0: entered allmulticast mode [ 593.629901][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 593.629918][ T28] audit: type=1326 audit(1787174399.786:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.0.1449" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31ba39e0d9 code=0x0 [ 593.828962][T11973] tipc: Enabling of bearer rejected, failed to enable media [ 594.753348][T11985] 9pnet_fd: p9_fd_create_tcp (11985): problem connecting socket to 127.0.0.1 [ 594.785598][T11985] 9pnet_fd: p9_fd_create_tcp (11985): problem connecting socket to 127.0.0.1 [ 594.863174][T11985] 9pnet_fd: p9_fd_create_tcp (11985): problem connecting socket to 127.0.0.1 [ 594.932482][T11985] 9pnet_fd: p9_fd_create_tcp (11985): problem connecting socket to 127.0.0.1 [ 594.961214][T11985] 9pnet_fd: p9_fd_create_tcp (11985): problem connecting socket to 127.0.0.1 [ 595.004616][T11985] 9pnet_fd: p9_fd_create_tcp (11985): problem connecting socket to 127.0.0.1 [ 595.063978][T11985] 9pnet_fd: p9_fd_create_tcp (11985): problem connecting socket to 127.0.0.1 [ 595.139794][T11985] 9pnet_fd: p9_fd_create_tcp (11985): problem connecting socket to 127.0.0.1 [ 595.378228][T11985] 9pnet_fd: p9_fd_create_tcp (11985): problem connecting socket to 127.0.0.1 [ 596.424609][T11985] 9pnet_fd: p9_fd_create_tcp (11985): problem connecting socket to 127.0.0.1 [ 596.546591][T11985] 9pnet_fd: p9_fd_create_tcp (11985): problem connecting socket to 127.0.0.1 [ 596.588222][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1459'. [ 599.017191][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1466'. [ 599.293981][T12040] syzkaller0: entered promiscuous mode [ 599.305352][T12040] syzkaller0: entered allmulticast mode [ 600.075644][ T28] audit: type=1800 audit(1787174406.226:507): pid=12058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1474" name="memory_backed" dev="configfs" ino=28245 res=0 errno=0 [ 600.174862][ T28] audit: type=1326 audit(1787174406.256:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.0.1473" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31ba39e0d9 code=0x0 [ 600.211284][ T28] audit: type=1800 audit(1787174406.256:509): pid=12058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1474" name="power" dev="configfs" ino=28246 res=0 errno=0 [ 600.274004][T12064] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 600.296647][T12064] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 600.364011][T12058] null_blk: disk nullb1 created [ 601.007526][T12088] netlink: 'syz.8.1482': attribute type 2 has an invalid length. [ 601.127896][T12091] xt_HMARK: spi-set and port-set can't be combined [ 601.168083][ T28] audit: type=1326 audit(1787174407.316:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.5.1483" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f420e39e0d9 code=0x0 [ 601.931744][T12108] loop0: detected capacity change from 0 to 512 [ 601.972501][T12108] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 602.177442][T12108] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 602.222334][T12108] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 602.269476][T12108] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1485: Failed to acquire dquot type 1 [ 602.637372][T12108] EXT4-fs (loop0): 1 truncate cleaned up [ 602.908285][T12108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 603.210927][T12108] EXT4-fs (loop0): shut down requested (0) [ 603.292843][T12129] loop9: detected capacity change from 0 to 512 [ 603.327151][T12129] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 603.343210][T12128] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.1485: deleted inode referenced: 12 [ 603.402117][T12129] EXT4-fs (loop9): 1 truncate cleaned up [ 603.471436][T12129] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.731335][T11642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 603.921032][T12133] lo speed is unknown, defaulting to 1000 [ 605.189495][T11169] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 605.225558][ T7580] IPVS: starting estimator thread 0... [ 605.357352][T12152] IPVS: using max 19 ests per chain, 45600 per kthread [ 605.747409][T11169] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.197401][T12161] tipc: Started in network mode [ 606.202370][T12161] tipc: Node identity 4, cluster identity 4711 [ 606.261809][T12161] tipc: Node number set to 4 [ 606.751678][T12174] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1499'. [ 607.202759][ T8393] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.084066][T12189] loop0: detected capacity change from 0 to 2048 [ 608.805126][T12189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.970517][T11170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 608.991314][T11170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.002420][T11170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.013953][T11170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.024285][T11170] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 609.032361][T11170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 609.156230][T11642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.181455][ T8393] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.491242][ T8393] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.623785][T12194] lo speed is unknown, defaulting to 1000 [ 610.029744][ T8393] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.164525][T11170] Bluetooth: hci1: command tx timeout [ 611.429365][T12194] chnl_net:caif_netlink_parms(): no params data found [ 611.913367][T12194] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.920966][T12194] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.929959][T12194] bridge_slave_0: entered allmulticast mode [ 611.940695][T12194] bridge_slave_0: entered promiscuous mode [ 611.987772][T12194] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.997586][T12194] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.005212][T12194] bridge_slave_1: entered allmulticast mode [ 612.017884][T12194] bridge_slave_1: entered promiscuous mode [ 612.395680][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.415452][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.430795][T12194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.443005][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.457559][T12194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.473578][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.494820][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.537914][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.571107][ T5853] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 612.580507][T11390] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 612.595163][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 612.604414][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.639789][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.667073][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.690487][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.713685][T12194] team0: Port device team_slave_0 added [ 612.723519][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.751783][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.764599][T12194] team0: Port device team_slave_1 added [ 612.808482][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.839533][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.850234][ T5844] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 612.861832][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.877975][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 612.879279][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.905727][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 612.930616][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 612.986276][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.030581][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.051770][T12194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.079881][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.089585][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.145311][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.181155][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.193912][T12194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.234517][T12274] ceph: No mds server is up or the cluster is laggy [ 613.251616][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.257095][T11170] Bluetooth: hci1: command tx timeout [ 613.266226][T12275] ceph: No mds server is up or the cluster is laggy [ 613.277443][T12271] ceph: No mds server is up or the cluster is laggy [ 613.288080][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.307171][ T8393] hsr_slave_0: left promiscuous mode [ 613.357201][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.359852][ T8393] hsr_slave_1: left promiscuous mode [ 613.378987][ T7580] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 613.388744][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.410799][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.424275][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.432870][T11390] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 613.479841][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.487852][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.488477][ T8393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.525795][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.565792][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.584335][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.619163][T12272] 9pnet_fd: p9_fd_create_tcp (12272): problem connecting socket to 127.0.0.1 [ 613.630461][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.647831][ T8393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.705859][ T8393] bridge_slave_1: left allmulticast mode [ 613.713036][ T8393] bridge_slave_1: left promiscuous mode [ 613.750505][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.771222][ T8393] bridge_slave_0: left allmulticast mode [ 613.799628][ T8393] bridge_slave_0: left promiscuous mode [ 613.805565][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.934716][ T8393] veth1_macvtap: left promiscuous mode [ 613.940709][ T8393] veth0_macvtap: left promiscuous mode [ 613.946482][ T8393] veth1_vlan: left promiscuous mode [ 613.957936][ T8393] veth0_vlan: left promiscuous mode [ 615.359111][T11170] Bluetooth: hci1: command tx timeout [ 616.487009][ T5849] IPVS: starting estimator thread 0... [ 616.587627][ T8393] team0 (unregistering): Port device team_slave_1 removed [ 616.596960][T12320] IPVS: using max 17 ests per chain, 40800 per kthread [ 616.685751][ T8393] team0 (unregistering): Port device team_slave_0 removed [ 616.774271][ T8393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.918257][ T8393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.406508][T11170] Bluetooth: hci1: command tx timeout [ 618.061419][ T8393] bond0 (unregistering): Released all slaves [ 618.227660][T12194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.234698][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.262269][T12194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.307571][T12307] netlink: 'syz.8.1523': attribute type 13 has an invalid length. [ 618.471905][T12317] bond_slave_0: entered promiscuous mode [ 618.478454][T12317] bond_slave_1: entered promiscuous mode [ 618.696153][T12194] hsr_slave_0: entered promiscuous mode [ 618.725957][T12194] hsr_slave_1: entered promiscuous mode [ 618.746886][T12194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.761440][T12330] loop0: detected capacity change from 0 to 128 [ 618.779446][T12194] Cannot create hsr debugfs directory [ 619.978753][ T8393] IPVS: stop unused estimator thread 0... [ 620.131303][T12340] 9pnet_fd: p9_fd_create_tcp (12340): problem connecting socket to 127.0.0.1 [ 623.071767][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1535'. [ 624.844874][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.851406][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.866275][ T1293] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 625.646981][T12194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 625.660095][T12194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 625.684006][T12194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 625.705064][T12194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 625.866017][T12194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.935046][T12194] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.958329][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.965656][ T8387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.992325][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.999712][ T8387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.399666][T12194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.498803][T12194] veth0_vlan: entered promiscuous mode [ 626.522334][T12194] veth1_vlan: entered promiscuous mode [ 626.601632][T12194] veth0_macvtap: entered promiscuous mode [ 626.614921][T12194] veth1_macvtap: entered promiscuous mode [ 626.644507][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.655948][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.669193][T12194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.695322][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.709096][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.722551][T12194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.737802][T12194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.746591][T12194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.762506][T12194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.771766][T12194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.913434][ T8387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.932622][ T8387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.978753][ T8393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.986679][ T8393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.180467][T12437] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1550'. [ 627.240266][T12437] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1550'. [ 627.331490][T12447] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 627.331490][T12447] The task syz.3.1496 (12447) triggered the difference, watch for misbehavior. [ 629.283456][T12469] tipc: Failed to remove unknown binding: 66,0,0/0:2660647910/2660647912 [ 629.324785][T12469] tipc: Failed to remove unknown binding: 66,0,0/0:2660647910/2660647911 [ 629.357776][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.375792][T12472] tipc: Failed to remove unknown binding: 66,0,0/0:2660647910/2660647912 [ 629.392502][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.408630][T12472] tipc: Failed to remove unknown binding: 66,0,0/0:2660647910/2660647911 [ 629.456041][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.482498][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.502702][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.554573][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.581959][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.594383][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.608672][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.621083][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.634008][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.648744][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.671406][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.694269][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.707618][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.720105][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.733192][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.746377][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.759603][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.783641][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.795545][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.813939][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.827957][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.840260][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.855762][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 629.891455][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 630.002331][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 630.798536][T12470] 9pnet_fd: p9_fd_create_tcp (12470): problem connecting socket to 127.0.0.1 [ 631.170239][T12492] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 631.913110][T12510] overlayfs: failed to clone upperpath [ 631.957334][T12509] tipc: Cannot configure node identity twice [ 633.264798][T12533] netlink: 'syz.3.1562': attribute type 8 has an invalid length. [ 633.319846][T12534] IPVS: Error joining to the multicast group [ 633.614474][T12541] syzkaller0: entered promiscuous mode [ 633.630376][T12541] syzkaller0: entered allmulticast mode [ 636.727828][T12592] loop3: detected capacity change from 0 to 512 [ 637.739746][T12592] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.1574: Unrecognised inode hash code 255 [ 637.765903][T12592] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1574: Corrupt directory, running e2fsck is recommended [ 637.783594][T12592] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 637.834178][T12592] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.1574: corrupted in-inode xattr: invalid ea_ino [ 638.055324][T12592] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1574: couldn't read orphan inode 15 (err -117) [ 638.722830][T12592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.027966][T12611] (null): rxe_set_mtu: Set mtu to 1024 [ 639.036465][T12607] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 639.073259][T12592] tipc: Started in network mode [ 639.096990][T12592] tipc: Node identity 4, cluster identity 4711 [ 639.134100][T12592] tipc: Node number set to 4 [ 639.261897][T12611] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 639.454779][T12194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.595258][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1589'. [ 639.762878][T12643] siw: device registration error -23 [ 642.515943][T12667] loop3: detected capacity change from 0 to 8192 [ 642.640957][T12667] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 642.715899][T12667] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 642.734124][T12667] REISERFS (device loop3): using ordered data mode [ 642.755372][T12667] reiserfs: using flush barriers [ 642.775402][T12667] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 642.798907][T12667] REISERFS (device loop3): checking transaction log (loop3) [ 643.069894][T12667] REISERFS (device loop3): Using tea hash to sort names [ 643.112343][T12667] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 643.304596][T12692] tipc: Started in network mode [ 643.323559][T12692] tipc: Node identity 4, cluster identity 4711 [ 643.347338][T12692] tipc: Node number set to 4 [ 643.517143][T12700] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 644.284824][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1598'. [ 644.303535][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1598'. [ 644.312998][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1598'. [ 644.323170][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1598'. [ 644.455577][T12728] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1602'. [ 644.474705][T12728] ip6gre1: entered promiscuous mode [ 644.481158][T12728] ip6gre1: entered allmulticast mode [ 644.625912][T12728] netlink: 'syz.8.1602': attribute type 6 has an invalid length. [ 644.673666][T12728] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1602'. [ 645.240165][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1603'. [ 646.203169][T12772] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1607'. [ 652.170786][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 653.003065][T12828] ip_tables: iptables: counters copy to user failed while replacing table [ 653.397931][T12825] bridge0: entered promiscuous mode [ 653.554054][T12825] vlan2: entered promiscuous mode [ 656.522541][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 658.637735][ T28] audit: type=1800 audit(1787174464.780:511): pid=12895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1632" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 658.734834][T12886] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 658.809241][T12902] macvlan2: entered promiscuous mode [ 658.851152][T12902] macvlan2: entered allmulticast mode [ 658.867990][ T7580] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 658.890244][T12902] bond1: entered promiscuous mode [ 658.906118][T12902] bridge1: entered promiscuous mode [ 658.915628][T12902] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 658.944759][T12902] bond1: left promiscuous mode [ 658.963889][T12902] bridge1: left promiscuous mode [ 659.076889][ T7580] usb 4-1: Using ep0 maxpacket: 8 [ 659.084845][ T7580] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.097618][ T7580] usb 4-1: config 0 has no interfaces? [ 659.106566][ T7580] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 659.127175][ T7580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.135346][ T7580] usb 4-1: Product: syz [ 659.160165][ T7580] usb 4-1: Manufacturer: syz [ 659.164887][ T7580] usb 4-1: SerialNumber: syz [ 659.201912][ T7580] usb 4-1: config 0 descriptor?? [ 659.302330][T12911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1636'. [ 659.316288][T12911] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1636'. [ 659.331601][T12911] tipc: Invalid UDP bearer configuration [ 659.331675][T12911] tipc: Enabling of bearer rejected, failed to enable media [ 660.888316][T12934] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 662.309255][ T9] usb 4-1: USB disconnect, device number 2 [ 665.375579][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1651'. [ 665.490148][T13003] vlan2: entered allmulticast mode [ 665.530762][T13003] bridge1: entered allmulticast mode [ 665.608446][T13003] bridge1: port 1(erspan0) entered blocking state [ 665.638184][T13003] bridge1: port 1(erspan0) entered disabled state [ 665.667111][T13003] erspan0: entered allmulticast mode [ 665.695077][T13003] erspan0: entered promiscuous mode [ 665.725035][T13003] bridge1: port 1(erspan0) entered blocking state [ 665.732032][T13003] bridge1: port 1(erspan0) entered forwarding state [ 666.656479][T13028] netlink: 'syz.3.1655': attribute type 1 has an invalid length. [ 666.991898][T13032] bond1: (slave veth0_to_bond): making interface the new active one [ 667.059601][T13032] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 667.173698][T13028] macvlan2: entered promiscuous mode [ 667.196966][T13028] macvlan2: entered allmulticast mode [ 667.230719][T13028] bond1: entered promiscuous mode [ 667.235949][T13028] veth0_to_bond: entered promiscuous mode [ 667.271511][T13028] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 667.314521][T13028] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 667.382221][T13028] bond1: left promiscuous mode [ 667.404662][T13028] veth0_to_bond: left promiscuous mode [ 669.517544][ T28] audit: type=1800 audit(1787174475.660:512): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1657" name="bus" dev="ramfs" ino=31286 res=0 errno=0 [ 669.773153][T13075] xfrm0: entered allmulticast mode [ 671.553607][T13098] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1672'. [ 671.570329][T13098] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1672'. [ 671.612033][T13098] tipc: Invalid UDP bearer configuration [ 671.612148][T13098] tipc: Enabling of bearer rejected, failed to enable media [ 671.733043][T13103] dvmrp0: entered allmulticast mode [ 671.804214][T13110] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 674.238052][T13136] lo: Caught tx_queue_len zero misconfig [ 674.593111][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1684'. [ 674.608472][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1684'. [ 674.617819][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1684'. [ 674.627072][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1684'. [ 679.577110][T13202] netlink: 'syz.8.1697': attribute type 1 has an invalid length. [ 679.961223][T13207] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 680.040514][T13213] macvlan0: entered promiscuous mode [ 680.096923][T13213] macvlan0: entered allmulticast mode [ 680.124864][T13213] bond1: entered promiscuous mode [ 680.162882][T13213] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 680.253939][T13213] bond1: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 680.524017][T13213] bond1: left promiscuous mode [ 681.215401][ T28] audit: type=1800 audit(1787174487.360:513): pid=13211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1698" name="bus" dev="ramfs" ino=30427 res=0 errno=0 [ 682.061079][T13232] 9pnet_fd: Insufficient options for proto=fd [ 683.239401][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 683.369042][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1704'. [ 683.548876][T13252] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 683.633516][T13254] macvlan2: entered promiscuous mode [ 683.676545][T13254] macvlan2: entered allmulticast mode [ 683.717947][T13254] bond2: entered promiscuous mode [ 683.766109][T13254] bridge2: entered promiscuous mode [ 683.784176][T13254] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 683.814389][T13254] bond2: left promiscuous mode [ 683.829260][T13254] bridge2: left promiscuous mode [ 684.199258][T13271] Cannot find add_set index 0 as target [ 686.472827][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.479430][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.498620][ T1293] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 687.979062][ T28] audit: type=1800 audit(1787174494.110:514): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1707" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 689.431067][T13311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1717'. [ 689.541972][T13311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1717'. [ 690.500363][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1726'. [ 690.669967][T13333] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 690.941659][T13324] macvlan4: entered promiscuous mode [ 690.959884][T13324] macvlan4: entered allmulticast mode [ 690.982120][T13324] bond4: entered promiscuous mode [ 691.000351][T13324] bridge2: entered promiscuous mode [ 691.034155][T13324] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 691.113232][T13324] bond4: left promiscuous mode [ 691.133105][T13324] bridge2: left promiscuous mode [ 694.946142][T13399] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1732'. [ 696.049929][T13402] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 696.081169][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1742'. [ 696.223269][T13399] macvlan0: entered promiscuous mode [ 696.236899][T13399] macvlan0: entered allmulticast mode [ 696.243632][T13399] bond2: entered promiscuous mode [ 696.267757][T13399] bridge1: entered promiscuous mode [ 696.278161][T13399] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 696.299241][T13399] bond2: left promiscuous mode [ 696.309715][T13399] bridge1: left promiscuous mode [ 696.752703][T13425] loop3: detected capacity change from 0 to 512 [ 696.855901][T13425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 696.947073][T13425] System zones: 1-12 [ 696.989592][T13425] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.1735: missing EA_INODE flag [ 697.027442][T13432] netlink: 'syz.5.1737': attribute type 1 has an invalid length. [ 697.050296][T13433] capability: warning: `syz.0.1736' uses 32-bit capabilities (legacy support in use) [ 697.073324][T13425] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1735: error while reading EA inode 12 err=-117 [ 697.140364][T13425] EXT4-fs (loop3): 1 orphan inode deleted [ 697.187113][T13425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.316029][T13436] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 697.621158][T13444] macvlan4: entered promiscuous mode [ 697.626625][T13444] macvlan4: entered allmulticast mode [ 698.207163][T13444] bond5: entered promiscuous mode [ 698.232854][T13444] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 698.374965][T13444] bond5: left promiscuous mode [ 700.165350][T12194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.639963][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1746'. [ 701.988336][T13485] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 702.157722][T13480] macvlan4: entered promiscuous mode [ 702.163145][T13480] macvlan4: entered allmulticast mode [ 702.170184][T13480] bond6: entered promiscuous mode [ 702.175307][T13480] bridge3: entered promiscuous mode [ 702.183247][T13480] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 702.267962][T13480] bond6: left promiscuous mode [ 702.273057][T13480] bridge3: left promiscuous mode [ 703.801899][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1752'. [ 703.846470][T13489] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 706.724915][T13545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1759'. [ 706.754573][T13545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1759'. [ 707.005989][T13552] dummy_hcd dummy_hcd.0: remove, state 4 [ 707.016643][T13552] usb usb1: USB disconnect, device number 1 [ 707.651549][T13556] netlink: 'syz.8.1762': attribute type 2 has an invalid length. [ 707.981551][T13552] dummy_hcd dummy_hcd.0: stopped [ 707.991753][T13552] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 709.519237][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 709.538336][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 709.548000][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 709.558102][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 709.615328][T13583] loop3: detected capacity change from 0 to 512 [ 711.609216][T13606] netlink: 'syz.5.1774': attribute type 3 has an invalid length. [ 711.666876][T13606] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.1774'. [ 711.743271][T13610] loop3: detected capacity change from 0 to 512 [ 711.807316][T13610] EXT4-fs: Ignoring removed oldalloc option [ 711.813584][T13610] ext3: Unknown parameter 'defcontext' [ 712.489711][T13632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1782'. [ 720.851729][T13693] hub 2-0:1.0: USB hub found [ 720.867715][T13693] hub 2-0:1.0: 1 port detected [ 721.137167][T13707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1802'. [ 721.675196][T13715] syzkaller0: entered promiscuous mode [ 721.708042][T13715] syzkaller0: entered allmulticast mode [ 722.809894][T13715] tipc: Enabled bearer , priority 0 [ 722.878069][T13714] tipc: Resetting bearer [ 723.019096][T13714] tipc: Disabling bearer [ 723.043201][T13723] netlink: 'syz.0.1806': attribute type 2 has an invalid length. [ 726.962989][T13758] lo speed is unknown, defaulting to 1000 [ 729.185504][T13779] loop3: detected capacity change from 0 to 2048 [ 729.425186][T13779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.044635][T12194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.077123][ T28] audit: type=1804 audit(1787174539.130:515): pid=13847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1835" name="file1" dev="ramfs" ino=32113 res=1 errno=0 [ 734.139067][T13859] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 734.361883][T13859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 734.442558][T11170] Bluetooth: hci1: command 0x0406 tx timeout [ 734.473731][T13860] vlan3: entered allmulticast mode [ 734.529917][T13871] netlink: zone id is out of range [ 734.540385][T13871] netlink: zone id is out of range [ 734.545619][T13871] netlink: zone id is out of range [ 734.556313][T13871] netlink: zone id is out of range [ 734.561659][T13871] netlink: zone id is out of range [ 734.572200][T13871] netlink: zone id is out of range [ 734.578226][T13871] netlink: zone id is out of range [ 734.579979][T13860] bond3: entered allmulticast mode [ 734.583809][T13871] netlink: zone id is out of range [ 734.595466][T13871] netlink: zone id is out of range [ 734.603088][T13871] netlink: zone id is out of range [ 734.755780][T13864] bond3: (slave dummy0): making interface the new active one [ 734.780111][T13864] dummy0: entered allmulticast mode [ 734.789973][T13864] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 734.822928][T13873] netlink: 'syz.3.1837': attribute type 10 has an invalid length. [ 734.835013][T13873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1837'. [ 734.872837][T13873] dummy0: entered promiscuous mode [ 734.905201][T13873] bond3: (slave dummy0): Releasing active interface [ 734.917168][T13873] dummy0: left allmulticast mode [ 734.938061][T13880] netlink: 'syz.5.1843': attribute type 1 has an invalid length. [ 735.108463][T13880] bridge4: entered promiscuous mode [ 735.120544][T13880] bond8: (slave bridge4): making interface the new active one [ 735.129602][T13880] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 737.678355][ T5087] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 740.027185][T13932] fuse: Bad value for 'fd' [ 741.721321][ T5087] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 741.735278][ T5087] Bluetooth: hci2: Injecting HCI hardware error event [ 741.752392][ T5087] Bluetooth: hci2: hardware error 0x00 [ 741.931304][T13965] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11642] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13965] [ 742.859993][T13976] loop3: detected capacity change from 0 to 2048 [ 742.988018][T13976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.414945][T13990] net_ratelimit: 23 callbacks suppressed [ 743.415024][T13990] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 743.723511][T12194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.803666][ T5087] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 746.632802][ T5087] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 746.688777][T14061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1884'. [ 747.072861][T14074] bond10: (slave vlan5): Opening slave failed [ 747.102751][T14077] binder_alloc: 14071: binder_alloc_buf, no vma [ 747.736950][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.743685][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.760531][ T1293] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 750.697131][ T5087] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 750.706316][ T5087] Bluetooth: hci3: Injecting HCI hardware error event [ 750.718976][ T5087] Bluetooth: hci3: hardware error 0x00 [ 752.916949][ T5087] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 757.479276][T14177] siw: device registration error -23 [ 757.497625][T14177] (null): rxe_set_mtu: Set mtu to 1024 [ 757.503551][T14177] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 757.591625][T14176] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 757.603548][T14176] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 757.612126][T14176] CPU: 0 PID: 14176 Comm: syz.3.1911 Not tainted syzkaller #0 [ 757.619656][T14176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.629787][T14176] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 757.635920][T14176] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf cb 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 a6 cb 23 fb 41 be 78 12 00 00 4d [ 757.655589][T14176] RSP: 0018:ffffc900124a77e0 EFLAGS: 00010246 [ 757.661729][T14176] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 757.669754][T14176] RDX: ffff888021323c00 RSI: 0000000000000003 RDI: 0000000000000005 [ 757.677767][T14176] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 757.685781][T14176] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 757.693788][T14176] R13: ffff88805eb76530 R14: ffff888142fd1280 R15: 0000000000000000 [ 757.701805][T14176] FS: 00007f36634bd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 757.710773][T14176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.717409][T14176] CR2: 00007f420f1556c8 CR3: 000000007f952000 CR4: 00000000003506f0 [ 757.725423][T14176] Call Trace: [ 757.728735][T14176] [ 757.731734][T14176] ? dummy_wakeup+0x270/0x270 [ 757.736463][T14176] usb_gadget_set_selfpowered+0x6e/0x230 [ 757.742139][T14176] composite_dev_prepare+0x2fa/0x320 [ 757.747482][T14176] configfs_composite_bind+0xa1/0x13f0 [ 757.752990][T14176] ? kernfs_put+0x309/0x360 [ 757.757536][T14176] ? webusb_landingPage_store+0x1c0/0x1c0 [ 757.763298][T14176] gadget_bind_driver+0x2b3/0x770 [ 757.768375][T14176] ? gadget_match_driver+0x130/0x130 [ 757.773703][T14176] really_probe+0x247/0xae0 [ 757.778276][T14176] ? pm_runtime_barrier+0x14b/0x1c0 [ 757.783531][T14176] __driver_probe_device+0x1f5/0x390 [ 757.788903][T14176] driver_probe_device+0x4f/0x420 [ 757.793970][T14176] __driver_attach+0x444/0x6d0 [ 757.798786][T14176] bus_for_each_dev+0x235/0x2b0 [ 757.803691][T14176] ? driver_attach+0x50/0x50 [ 757.808331][T14176] ? bus_remove_file+0x140/0x140 [ 757.813335][T14176] ? do_raw_spin_unlock+0x121/0x230 [ 757.818603][T14176] bus_add_driver+0x340/0x630 [ 757.823339][T14176] driver_register+0x23a/0x310 [ 757.828142][T14176] usb_gadget_register_driver_owner+0xf9/0x270 [ 757.834378][T14176] gadget_dev_desc_UDC_store+0x1c7/0x2e0 [ 757.840063][T14176] configfs_write_iter+0x312/0x400 [ 757.845226][T14176] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 757.850902][T14176] vfs_write+0x474/0x9a0 [ 757.855227][T14176] ? file_end_write+0x250/0x250 [ 757.860130][T14176] ? __fget_files+0x3fc/0x460 [ 757.864853][T14176] ? __fdget_pos+0x2a3/0x330 [ 757.869493][T14176] ? ksys_write+0x74/0x260 [ 757.873949][T14176] ksys_write+0x151/0x260 [ 757.878324][T14176] ? __ia32_sys_read+0x90/0x90 [ 757.883170][T14176] ? lockdep_hardirqs_on+0x98/0x150 [ 757.888414][T14176] do_syscall_64+0x55/0xb0 [ 757.892873][T14176] ? clear_bhb_loop+0x40/0x90 [ 757.897598][T14176] ? clear_bhb_loop+0x40/0x90 [ 757.902408][T14176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.908341][T14176] RIP: 0033:0x7f366259e0d9 [ 757.912808][T14176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.932458][T14176] RSP: 002b:00007f36634bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 757.941017][T14176] RAX: ffffffffffffffda RBX: 00007f3662825fa0 RCX: 00007f366259e0d9 [ 757.949043][T14176] RDX: 000000000000000c RSI: 0000200000000600 RDI: 0000000000000005 [ 757.957065][T14176] RBP: 00007f3662635024 R08: 0000000000000000 R09: 0000000000000000 [ 757.965087][T14176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.973113][T14176] R13: 00007f3662826038 R14: 00007f3662825fa0 R15: 00007fff20064788 [ 757.981140][T14176] [ 757.984186][T14176] Modules linked in: [ 758.169832][T14176] ---[ end trace 0000000000000000 ]--- [ 758.193916][T14176] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 758.201536][T14176] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf cb 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 a6 cb 23 fb 41 be 78 12 00 00 4d [ 758.226172][T14176] RSP: 0018:ffffc900124a77e0 EFLAGS: 00010246 [ 758.237189][T14176] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 758.262460][T14176] RDX: ffff888021323c00 RSI: 0000000000000003 RDI: 0000000000000005 [ 758.420576][T14176] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 758.655867][T14176] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 758.664235][T14176] R13: ffff88805eb76530 R14: ffff888142fd1280 R15: 0000000000000000 [ 758.672473][T14176] FS: 00007f36634bd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 758.681712][T14176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 758.693340][T14176] CR2: 000055df73392698 CR3: 000000007f952000 CR4: 00000000003506e0 [ 758.710328][T14176] Kernel panic - not syncing: Fatal exception [ 758.718382][T14176] Kernel Offset: disabled [ 758.722756][T14176] Rebooting in 86400 seconds..