last executing test programs: 10m2.36398402s ago: executing program 0 (id=265): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v'], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r0, 0x3ab, 0x6933, 0x17, 0x0, 0x0) r1 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0x72d5, 0x8, 0x3, 0x6}, &(0x7f0000000400), &(0x7f0000002c00), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0}], 0x1) 10m1.944264409s ago: executing program 0 (id=268): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') fcntl$setstatus(r0, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x0, 0x8}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m0.977079391s ago: executing program 0 (id=271): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0xe) write$cgroup_devices(r4, 0x0, 0x9) write(r2, 0x0, 0x0) 10m0.005049023s ago: executing program 0 (id=281): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 9m59.174667842s ago: executing program 0 (id=287): r0 = getpid() r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) 9m58.579479965s ago: executing program 0 (id=291): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x8000000010, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000880)='/dev/kvm\x00', 0x0, r1) 9m57.861593611s ago: executing program 32 (id=291): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x8000000010, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000880)='/dev/kvm\x00', 0x0, r1) 9m56.757039746s ago: executing program 1 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 9m56.497850472s ago: executing program 1 (id=303): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) 9m56.292505077s ago: executing program 1 (id=305): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000280)={0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1}, 0x7}], 0x1, 0x0, 0x0) 9m56.040458222s ago: executing program 1 (id=306): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0) r1 = syz_clone(0x42000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010101, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0xfffffffffffffffd, 0x400000000, 0x8000000000000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x2, 0xb7, 0x2, 0xfffffffe}}, 0xe8) timer_create(0x2, &(0x7f0000000000)={0x0, 0xf, 0x1, @thr={0x0, 0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4810) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xc, 0x0) 9m55.541861774s ago: executing program 1 (id=309): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x9}) close_range(r3, 0xffffffffffffffff, 0x0) 9m53.627637297s ago: executing program 1 (id=313): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r0, 0x180000000) 9m53.128772078s ago: executing program 33 (id=313): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r0, 0x180000000) 9m23.868702102s ago: executing program 2 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = fanotify_init(0xf00, 0x181000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 9m23.597958918s ago: executing program 2 (id=465): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x402}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x60}}, 0x44080) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 9m22.371790776s ago: executing program 2 (id=471): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101000, 0x101) 9m22.17535107s ago: executing program 2 (id=473): syz_mount_image$exfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x7f, 0x1519, &(0x7f00000021c0)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock(&(0x7f000068d000/0x1000)=nil, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m21.200971442s ago: executing program 2 (id=478): socket$netlink(0x10, 0x3, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) geteuid() msgctl$IPC_SET(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80002000, 0x0) 9m20.935749788s ago: executing program 2 (id=480): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) 9m20.533321807s ago: executing program 34 (id=480): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) 8m49.0708209s ago: executing program 4 (id=664): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x7fffffff, @mcast1}, 0x1c) 8m48.836058425s ago: executing program 4 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[], 0x28}}, 0x4040800) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="050427bd7000fcdbdf250100010008000100", @ANYRES32=r2, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000010038"], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) 8m48.061360223s ago: executing program 4 (id=672): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xaeea) r1 = accept4(r0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xd4a}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x1}) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x4}, &(0x7f0000000240)=0x8) 8m47.872010728s ago: executing program 4 (id=675): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file1'}, 0xb) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x13, 0x1d, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee0700376b7a5ff537040000000060e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d00000159cae9b48b001d00400000000000000000000000000000e000", "f28359738e22c958000000000020000000000100001000", [0x8]}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100)) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) 8m45.880516322s ago: executing program 4 (id=685): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 8m43.699153482s ago: executing program 4 (id=692): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x706}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8m43.213183003s ago: executing program 35 (id=692): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x706}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8m11.487660072s ago: executing program 6 (id=841): r0 = io_uring_setup(0x1006, &(0x7f0000000100)={0x0, 0x5f3d, 0x40, 0x1, 0x200013a}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) close(r3) r4 = socket$inet6(0xa, 0x1, 0x0) listen(r4, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000080), &(0x7f0000000840)=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 8m11.087496271s ago: executing program 6 (id=843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r2) 8m10.68419538s ago: executing program 6 (id=848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000003247d60b7030000030a00006a0a00fe0000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35149a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e571f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521f9e3dbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b13fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc90307f5f7a9cb7f1e5ed79dbf92e5d9c3f40a1313db007da349939e8805418029fef1be9f8729d4f1e43572059a7b4564d00"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48) 8m9.585704085s ago: executing program 6 (id=851): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0) dup2(r1, r2) 8m8.153763497s ago: executing program 6 (id=865): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 8m7.139711431s ago: executing program 6 (id=872): rmdir(&(0x7f0000000100)='./control\x00') mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x0, 0x1, 0x9, 0x5, {{0x5, 0x4, 0x2, 0x1e, 0x14, 0x64, 0x0, 0xe, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}}}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder1\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) 7m51.663869491s ago: executing program 36 (id=872): rmdir(&(0x7f0000000100)='./control\x00') mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x0, 0x1, 0x9, 0x5, {{0x5, 0x4, 0x2, 0x1e, 0x14, 0x64, 0x0, 0xe, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}}}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder1\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) 9.483302896s ago: executing program 3 (id=2357): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x400, @loopback, 0x3}}}, 0x84) 9.220832222s ago: executing program 5 (id=2358): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 8.85226801s ago: executing program 8 (id=2360): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000480)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000200000004000000a4"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4}, 0x20) recvmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 8.694689414s ago: executing program 7 (id=2361): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r1, &(0x7f0000000000)='\"', 0xfdef) 8.506570558s ago: executing program 8 (id=2362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xa, 0x3, 0xff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 8.320681822s ago: executing program 7 (id=2363): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 7.352496284s ago: executing program 3 (id=2364): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x80000000}, 0x0, 0x0) 7.207778037s ago: executing program 7 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000000000060002000000000914001f00000000000000000000000000000000001400200000000000ffff0000000000000000000106001b004e"], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 7.188222748s ago: executing program 8 (id=2366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6.860920125s ago: executing program 8 (id=2367): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 5.861890268s ago: executing program 7 (id=2368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) 4.942515488s ago: executing program 8 (id=2369): syz_usb_connect(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x20, 0xa4, 0x3, 0x8, 0x1b80, 0xe309, 0x1f40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x6, "", [{{0x9, 0x4, 0xa7, 0xa7, 0x2, 0x5d, 0x81, 0xdf, 0x2, [], [{{0x9, 0x5, 0x8a, 0x4, 0x400, 0x1, 0x5, 0x8e}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x3, 0x4, 0x9}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r1, r2, 0xfffffffffffffc01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004000) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 4.89037429s ago: executing program 3 (id=2370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a400000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3ff000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 4.534192398s ago: executing program 3 (id=2371): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7fd, &(0x7f0000000040)={0x0, 0xfd49, 0xc000, 0x3, 0xa0002f5}) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@random="51640646eae0", @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @loopback, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.300680023s ago: executing program 7 (id=2372): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4000010, 0xffffffffffffffff, 0xb847d000) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x20000000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000140)='./bus\x00', 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f000001f0c0)={0x9, 0x1, 0x4002, 0x7}, &(0x7f000001f100)=0x10) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f000001f080)="e8ef8140290cc5f65d79e6b0bb8c1ca7fd0645352a65ad0d8975810658d0b8239ea952d2", 0x24, 0xfffffffffffffffe) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='disable_ext_identify,active_logs=4,discard,discard_unit=section,fault_type=00000000000000000006,noextent_cachne_data,fastboot,fsync_mode=strict,discard_unit=section,\x00\x00\x00\x00\x00\x00\x00'], 0x21, 0x5548, &(0x7f00000058c0)="$eJzs3E1vG1UXAOBjp2nffrwlQizYdVCFlEi1Vacfgl2BVny2qgosWIFju5Zb2xPFrhu66oIlYsE/QSCxYslvYMGaHWIBYocE8txJoS2VKsWOSfM80vjMvXPnzL2jJNKZiRzAgbWS/f5rJU7G0YhYiogTEcV+pdwKl1J4MSJORUT1H1ul7H/QcTgijkXEyWnylLNSHvryzOT0hV/e+e27H44cOv7Vtz8ubtXAor0cEYPNtH93kGLeTfFW2d+c9Io4OD8pYzowuF228xTvdjaKDHebO+OaRTzXTePzzTujabzZb7amsdu7WfRvDtMFR5PuTp7ihFvNraLd7mwUsTfKi9i9l+a1fS/9bbs3Gqc87TLfp0X6GI93YurvbHfSejZvF7E1HJf9KW/e7mxP46SM5eWilffbxTw2dnOn/9Neeq83vLOdTTpbo14+zC7UG6/UGxdrja283Rl3zteag/bF89lqtz8dVht3moNL3Tzv9jv1Vj5Yy1a7rVat0chWL3c2es3h/Uajfq5+tnZhLUt7Z7I3r32Y9dvZ6jS+3hveGff6o+xmvpWlM9ay9fq5V9ey043s/avXs+s3rly5ev2Djy9/dO21q2+/UQ56bFrZ6vrZ9fVa42xtvbG2uxsw0/Vnc17/Z+WkZ7h+2JXKoicAsP+o/4FFmF/9v3Uj4vH6vzrj+j/U/zOxr+rfg17/z2H9sCvqfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+un5a/fKnZWUvt42f//suv5sl2JiGpE/PkvluLwQzmXyjzLTxi//Mgcvq9EkWF6jSPldiwiLpXbH8/N+y4AAADAs+ub+6e+SNV6+lh5qrOOznlW7JH00KZ64pMZ5atExPLKzzPKVp1+vDCjZMXP96HYnlG24gHW/2aULD1yOzSrbE+l+HV/N4UHKylCJYXqo2fMbLUAAMDCLD0U9rYKAQAAYC99/sQjt/d0HuyxSuy8ytx5F1z85/3fL/uOprZXfwAAALB/VRY9AQAAAGDuivrf9/8BAADAsy19/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NxNbtpAGAbgz8Yu9E9FVfe9SndwjB6hyy4rDtBLcAR6hV6AM5BdjhBBhMdBISIJxGNQoueR7MGWeT3mZzEz0gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfrurF9N+f73+75qw33eR5GgAAAOCQVb2YNi/G6fhje/5ze+pre1xERBkRh8bug3i3lzloc+pHrq8f9OF/RJOwvcew3T5ExI+0beJL358CAAAAvEnVdreczSdptJ5240v3is5O+A7TpE356WemWxcRUY+vM6WV27xvmcKa33cVvzOlNRNYo0xhacqtypV2lObvvpu1G91ritSUT78/27MDAABnNNhrzjsKAQAA4Jx+XboD9OH9s1cUcbeUuVsKHKZmtBdhsQ8AAABer+LSHQAAAAB614z/T6n/F8fU/6uy1/+LG/X/AAAA4MVS/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKoX0+VsPumas950k+dpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhlf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmf7Q8U1yh4iouBBL3a7ra29iQclePBPEEK6rbFbf7Q52FKEXLxJzr2IHkUEJd76D3jqTWihl3rrYQ8VRPCyMrMz2UkTcGPIzJp8PvDmfXcymfd9MxDynTcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURu9M4yTbdCZxXOy79/jWStbff6LP3Nl4sJi1LI7qTPr/4aXqh6jbXCIAAAAcHUlZ34cQHqabS1kfd/L6Py2PyWr+b5+ZxGU9/2TdX/Zl7Z+1X35+9MLWQJ3JONlJL60OB6d3ptI6uFnOt2f/9YhWfuXzZy9JfkPi99efH6X59Yy+vnv33XYeHqsjWwDgvzhV9kVQ/j6U9f0mEwPgyGhVCu+i/v8r6TScFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEANRuvhqTKOQgiLrWmcuf/41spu/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8HEJoavS3i+lf+XCGg0No5PocVPD3eDze03cdbz7nfQVxcbNnOLg9Lzk3HzT4QwkAgEMpLVpW1z9MN5eyfdFCCOPvttf/r1XiMGP9/+ij8/eqY1Xr/35tM5x/vbWrn/Wu37j5xurV5cuDy4NP3jzTf6t/9sK5cxd6+bOSnicmAAAA7E+7aNX6P17Yuf5/shKHGev/z7/pfzkd6bd8q/7fabro13QmAAAAR9tzr/z5R7TL/qjdDl8sr61d60+2W5/PTLYNpLpnx4pWrf+ThaazAgAAAOowWo+2rf9frMRhxvX/p79/8cfqOZMQwoli/f/UyqfDi/VNZ67V8efETc8RAACAZp0oWnX9P83f/4+3XnmIQwivvzqJi38DOFP9n7z31Q/VsZLK+/9n65viXIq7k+uR990QWt1tX/61scQAAAA4lI4XLSv2f083lz7+6eQHbe//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTtnwAAAP//gQBD5A==") 4.267130144s ago: executing program 5 (id=2373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 3.867564613s ago: executing program 3 (id=2374): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x7ffd, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 2.915418975s ago: executing program 5 (id=2375): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x40, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 1.728095621s ago: executing program 8 (id=2376): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 1.434165278s ago: executing program 5 (id=2377): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x250, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x2f87, 0xc000, 0x1, 0xa0002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 433.781961ms ago: executing program 7 (id=2378): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) cachestat(r0, &(0x7f0000000140)={0x1, 0x7fc001}, &(0x7f0000000100), 0x0) 282.279124ms ago: executing program 5 (id=2379): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x141000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000206030000000300686173683a69000000000100000000000900020073797a311b000097cc26afc28057001400078008001340000017e508001240000000090000000000"], 0x48}}, 0x4080) socket(0x1, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x48000, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1000, 0xffff8000) 1.741631ms ago: executing program 3 (id=2380): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r3, 0x2007ffb) close(r3) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 0s ago: executing program 5 (id=2381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) kernel console output (not intermixed with test programs): c0000 [ 231.690755][ T28] audit: type=1326 audit(1783748979.670:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.5.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4ab2f5e68e code=0x7ffc0000 [ 233.558555][ T8738] netlink: 'syz.5.806': attribute type 1 has an invalid length. [ 233.680075][ T8738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.993263][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.810'. [ 236.054217][ T8781] loop7: detected capacity change from 0 to 40427 [ 236.105426][ T8781] F2FS-fs (loop7): Found nat_bits in checkpoint [ 236.274847][ T8781] F2FS-fs (loop7): Start checkpoint disabled! [ 236.332356][ T8781] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 236.604991][ T8818] loop6: detected capacity change from 0 to 512 [ 236.640340][ T8818] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 236.669766][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz.5.824'. [ 236.702078][ T8818] EXT4-fs (loop6): orphan cleanup on readonly fs [ 236.758840][ T8818] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 236.792854][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz.5.824'. [ 236.809827][ T8818] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 236.819851][ T8818] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.823: couldn't read orphan inode 26 (err -116) [ 236.844571][ T8818] EXT4-fs (loop6): Remounting filesystem read-only [ 236.859423][ T8818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.057605][ T4520] bio_check_eod: 6 callbacks suppressed [ 237.057622][ T4520] kworker/u4:8: attempt to access beyond end of device [ 237.057622][ T4520] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.120329][ T4520] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 237.139205][ T7410] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.513983][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 238.514001][ T28] audit: type=1326 audit(1783748987.200:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.5.832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 238.594792][ T28] audit: type=1326 audit(1783748987.200:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.5.832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 238.613740][ T8863] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 238.797152][ T8868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 239.167786][ T8878] loop7: detected capacity change from 0 to 256 [ 239.239109][ T8878] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 239.267680][ T28] audit: type=1326 audit(1783748987.960:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.3.839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 239.345682][ T28] audit: type=1326 audit(1783748987.960:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.3.839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 239.425438][ T28] audit: type=1326 audit(1783748987.960:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.3.839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 239.487398][ T28] audit: type=1326 audit(1783748987.960:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.3.839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 239.606033][ T28] audit: type=1326 audit(1783748987.960:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.3.839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 239.666357][ T28] audit: type=1326 audit(1783748987.960:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.3.839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 239.706694][ T28] audit: type=1326 audit(1783748988.010:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.3.839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd4d975e68e code=0x7ffc0000 [ 239.740535][ T28] audit: type=1326 audit(1783748988.020:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.3.839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd4d975e68e code=0x7ffc0000 [ 242.173564][ T8928] netlink: 168 bytes leftover after parsing attributes in process `syz.5.860'. [ 242.330669][ T8937] netlink: 52 bytes leftover after parsing attributes in process `syz.5.863'. [ 242.365990][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.373482][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.488204][ T8942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.864'. [ 242.528918][ T8942] ip6gre1: entered promiscuous mode [ 242.548384][ T8942] ip6gre1: entered allmulticast mode [ 242.565943][ T8937] netlink: 76 bytes leftover after parsing attributes in process `syz.5.863'. [ 242.609252][ T8937] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.616580][ T8937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.624226][ T8937] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.631462][ T8937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.659913][ T8937] netlink: 52 bytes leftover after parsing attributes in process `syz.5.863'. [ 242.675028][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.682415][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.839490][ T8945] netlink: 'syz.3.864': attribute type 6 has an invalid length. [ 242.847493][ T8945] netlink: 72 bytes leftover after parsing attributes in process `syz.3.864'. [ 243.917221][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'. [ 249.234072][ T9063] batadv_slave_1: entered promiscuous mode [ 249.787530][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.902'. [ 250.509984][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.905'. [ 250.805951][ T9100] syz_tun (unregistering): left allmulticast mode [ 251.046638][ T9117] loop7: detected capacity change from 0 to 136 [ 253.693000][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.918'. [ 253.776724][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.918'. [ 253.880103][ T9168] bridge3: port 1(vlan6) entered blocking state [ 253.901704][ T9168] bridge3: port 1(vlan6) entered disabled state [ 253.920853][ T9168] vlan6: entered allmulticast mode [ 253.958773][ T9168] bridge3: entered allmulticast mode [ 253.972068][ T9168] vlan6: left allmulticast mode [ 253.989410][ T9168] bridge3: left allmulticast mode [ 255.960198][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.966661][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.214256][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.7.929'. [ 257.256875][ T9242] overlayfs: failed to clone upperpath [ 259.877857][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.890194][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.900641][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.918815][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.926770][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.937310][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.296894][ T4520] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.375343][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.7.945'. [ 260.525572][ T4520] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.532867][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 260.532909][ T28] audit: type=1326 audit(1783749009.220:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 260.576064][ T28] audit: type=1326 audit(1783749009.260:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 260.619503][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.945'. [ 260.620925][ T28] audit: type=1326 audit(1783749009.260:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 260.656972][ T28] audit: type=1326 audit(1783749009.260:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 260.687338][ T28] audit: type=1326 audit(1783749009.270:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 260.726706][ T28] audit: type=1326 audit(1783749009.270:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 260.752668][ T28] audit: type=1326 audit(1783749009.270:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 260.771109][ T4520] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.783525][ T28] audit: type=1326 audit(1783749009.270:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 260.811786][ T28] audit: type=1326 audit(1783749009.270:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 260.850690][ T28] audit: type=1326 audit(1783749009.270:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 260.966406][ T4520] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.005328][ T9297] chnl_net:caif_netlink_parms(): no params data found [ 261.215673][ T9297] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.228391][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.236140][ T9297] bridge_slave_0: entered allmulticast mode [ 261.243780][ T9297] bridge_slave_0: entered promiscuous mode [ 261.253231][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.260494][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.268477][ T9297] bridge_slave_1: entered allmulticast mode [ 261.276158][ T9297] bridge_slave_1: entered promiscuous mode [ 261.417487][ T9297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.430394][ T9331] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 261.508923][ T9331] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 261.598076][ T9297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.879577][ T9297] team0: Port device team_slave_0 added [ 261.929490][ T9297] team0: Port device team_slave_1 added [ 262.013515][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.022539][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.032545][ T5780] Bluetooth: hci0: command tx timeout [ 262.135897][ T9297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.183216][ T9340] loop7: detected capacity change from 0 to 512 [ 262.197892][ T9340] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 262.230421][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.256271][ T9340] EXT4-fs (loop7): 1 truncate cleaned up [ 262.288877][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.314535][ T9340] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.402912][ T9297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.522076][ T9340] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:478: comm syz.7.954: Invalid block bitmap block 3639385208 in block_group 0 [ 262.577322][ T9340] EXT4-fs (loop7): Remounting filesystem read-only [ 262.724962][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.946452][ T9297] hsr_slave_0: entered promiscuous mode [ 263.005683][ T9297] hsr_slave_1: entered promiscuous mode [ 263.024489][ T9297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.052126][ T9297] Cannot create hsr debugfs directory [ 263.328487][ T9365] netlink: 'syz.7.960': attribute type 1 has an invalid length. [ 263.459048][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.959'. [ 263.770201][ T9368] bond1: (slave veth3): Enslaving as an active interface with a down link [ 263.840726][ T9372] bond1: entered promiscuous mode [ 263.845864][ T9372] bond1: entered allmulticast mode [ 263.890977][ T9372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.110876][ T5780] Bluetooth: hci0: command tx timeout [ 264.333075][ T4520] bond1: (slave gretap1): Releasing active interface [ 264.339851][ T4520] gretap1 (unregistering): left allmulticast mode [ 264.993353][ T9297] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 265.143082][ T4520] hsr_slave_0: left promiscuous mode [ 265.163124][ T4520] hsr_slave_1: left promiscuous mode [ 265.182372][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.190515][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.206390][ T4520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.220106][ T4520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.235690][ T4520] bridge_slave_1: left allmulticast mode [ 265.244288][ T4520] bridge_slave_1: left promiscuous mode [ 265.250093][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.273389][ T4520] bridge_slave_0: left allmulticast mode [ 265.279278][ T4520] bridge_slave_0: left promiscuous mode [ 265.291607][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.361980][ T4520] veth1_macvtap: left promiscuous mode [ 265.367848][ T4520] veth0_macvtap: left promiscuous mode [ 265.381965][ T4520] veth1_vlan: left promiscuous mode [ 265.389736][ T4520] veth0_vlan: left promiscuous mode [ 265.898046][ T4520] bond1 (unregistering): Released all slaves [ 266.199128][ T5780] Bluetooth: hci0: command tx timeout [ 266.499944][ T4520] team0 (unregistering): Port device team_slave_1 removed [ 266.553964][ T4520] team0 (unregistering): Port device team_slave_0 removed [ 266.605951][ T4520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.663908][ T4520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.095059][ T4520] bond0 (unregistering): Released all slaves [ 267.219814][ T9297] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 267.234325][ T9297] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 267.245631][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.5.970'. [ 267.307463][ T9417] syz_tun: entered allmulticast mode [ 267.316813][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'. [ 267.389080][ T9297] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 267.415097][ T9417] syz_tun: left allmulticast mode [ 267.696211][ T9297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.792264][ T9297] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.817170][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.7.974'. [ 268.025852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.033107][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.135340][ T5009] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.142616][ T5009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.270796][ T5780] Bluetooth: hci0: command tx timeout [ 268.285473][ T9297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.298461][ T9297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.389476][ T4520] IPVS: stop unused estimator thread 0... [ 268.868453][ T9297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.226808][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.234160][ T9484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.241914][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.249300][ T9484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.336449][ T9484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.500247][ T9491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.636186][ T9496] bond6: entered allmulticast mode [ 270.879662][ T9297] veth0_vlan: entered promiscuous mode [ 270.915218][ T9496] macvlan2: entered promiscuous mode [ 270.923298][ T9496] macvlan2: entered allmulticast mode [ 270.934934][ T9496] bond6: entered promiscuous mode [ 270.946999][ T9496] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 270.959079][ T9496] bond6: left promiscuous mode [ 271.377780][ T9297] veth1_vlan: entered promiscuous mode [ 271.514861][ T9297] veth0_macvtap: entered promiscuous mode [ 271.565626][ T9297] veth1_macvtap: entered promiscuous mode [ 271.637847][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.680874][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.720666][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.738819][ T172] libceph: connect (1)[c::]:6789 error -101 [ 271.740804][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.783521][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.807637][ T172] libceph: mon0 (1)[c::]:6789 connect error [ 271.859416][ T9517] netlink: 64 bytes leftover after parsing attributes in process `syz.3.989'. [ 271.878346][ T172] libceph: connect (1)[c::]:6789 error -101 [ 271.904067][ T9510] ceph: No mds server is up or the cluster is laggy [ 271.945886][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.988903][ T172] libceph: mon0 (1)[c::]:6789 connect error [ 272.025390][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.183242][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.238162][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.304797][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.408197][ T9297] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.457936][ T9297] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.500867][ T9297] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.541885][ T9297] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.590961][ T5780] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 272.599868][ T5780] Bluetooth: hci2: Injecting HCI hardware error event [ 272.612499][ T5780] Bluetooth: hci2: hardware error 0x00 [ 272.957271][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.978734][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.045016][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.065128][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.579778][ T9563] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 273.699106][ T9563] bond2: entered allmulticast mode [ 273.742917][ T9568] bridge1: entered promiscuous mode [ 273.804894][ T9568] bridge1: entered allmulticast mode [ 273.841760][ T9568] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 273.871406][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1002'. [ 274.803465][ T5780] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 276.062725][ T9612] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1012'. [ 277.906094][ T9660] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1023'. [ 277.938104][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1023'. [ 278.152348][ T9669] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 279.147058][ T9699] xt_hashlimit: size too large, truncated to 1048576 [ 281.216768][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1047'. [ 281.358109][ T9752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1048'. [ 282.808197][ T9796] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.1056'. [ 283.510474][ T9809] sctp: [Deprecated]: syz.3.1061 (pid 9809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.510474][ T9809] Use struct sctp_sack_info instead [ 283.602199][ T9811] bond1 (unregistering): Released all slaves [ 284.248172][ T9832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.461960][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.714526][ T9835] erspan0: entered promiscuous mode [ 284.729343][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1069'. [ 286.052954][ T9878] loop8: detected capacity change from 0 to 256 [ 286.658502][ T9825] trusted_key: syz.3.1064 sent an empty control message without MSG_MORE. [ 286.745745][ T9883] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.015485][ T9883] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.164342][ T9883] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.511803][ T9883] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.679550][ T9946] loop8: detected capacity change from 0 to 512 [ 290.711800][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 290.711820][ T28] audit: type=1326 audit(1783749039.330:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz.7.1096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7439de59 code=0x7fc00000 [ 290.802990][ T9946] EXT4-fs (loop8): 1 truncate cleaned up [ 290.837712][ T9946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.880112][ T9883] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.900362][ T9883] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.961852][ T9883] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.026497][ T9883] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.077355][ T9946] EXT4-fs (loop8): Online resizing not supported with sparse_super2 [ 291.165966][ T9297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.194117][ T9956] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1101'. [ 291.618532][ T9972] netlink: 'syz.7.1108': attribute type 1 has an invalid length. [ 291.646966][ T9972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.839428][ T9977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.871690][ T9972] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 291.898059][ T9972] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 291.948034][ T9982] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 291.958469][ T9982] bond3: (slave batadv1): making interface the new active one [ 291.966935][ T9982] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 291.988490][ T9982] batadv1: entered promiscuous mode [ 291.994370][ T9982] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 292.078963][ T9983] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.135842][ T9977] bond3: (slave geneve2): Enslaving as a backup interface with an up link [ 292.181128][ T4520] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 292.279466][ T9983] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.330285][ T59] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 292.439552][ T9983] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.591648][ T9983] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.881006][ T9983] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.933961][ T9983] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.979725][ T9983] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.042628][ T9983] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.569260][T10029] loop8: detected capacity change from 0 to 512 [ 294.673764][T10029] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.709104][T10029] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.912986][ T9297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.381995][T10054] loop7: detected capacity change from 0 to 128 [ 295.406635][T10054] EXT4-fs: Ignoring removed nobh option [ 295.444077][T10054] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.507878][T10054] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 295.754903][T10058] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 295.807954][T10054] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:478: comm syz.7.1127: Invalid block bitmap block 0 in block_group 0 [ 296.075141][ T8223] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.809714][T10089] netlink: 'syz.5.1134': attribute type 1 has an invalid length. [ 296.872045][T10089] bond4: entered promiscuous mode [ 296.877849][T10089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.923821][T10094] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 296.936801][T10094] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 296.947801][T10094] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 297.068336][T10089] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 297.086172][T10089] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 297.549790][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1135'. [ 298.518175][T10135] Driver unsupported XDP return value 0 on prog (id 163) dev N/A, expect packet loss! [ 300.902828][T10192] bond7: entered promiscuous mode [ 301.075645][T10195] ip6gretap1: entered promiscuous mode [ 301.123433][T10195] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 301.195107][T10181] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1151'. [ 301.273293][T10197] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 301.339572][T10197] ip6gretap1: left promiscuous mode [ 301.389994][T10197] bond7 (unregistering): Released all slaves [ 302.883970][T10240] loop7: detected capacity change from 0 to 512 [ 302.933267][T10240] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 302.988024][T10240] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 303.025095][T10240] EXT4-fs (loop7): 1 truncate cleaned up [ 303.052187][T10240] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.603412][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.657248][T10262] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 303.698788][T10262] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 303.965080][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1173'. [ 304.062628][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 304.360053][T10289] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 304.541631][T10289] bond5: entered allmulticast mode [ 304.619659][T10290] ip6gretap1: entered promiscuous mode [ 304.684931][T10290] bond5: (slave ip6gretap1): no link monitoring support [ 304.725322][T10290] bond5: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 304.813250][T10290] ip6gretap1: entered allmulticast mode [ 304.819318][T10290] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 304.965779][ T5009] batadv1: left promiscuous mode [ 305.324124][T10315] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 305.476727][T10315] bond4: entered allmulticast mode [ 305.532050][T10321] ip6gretap1: entered promiscuous mode [ 305.613927][T10321] ip6gretap1: entered allmulticast mode [ 305.628392][T10321] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 305.831316][T10341] loop8: detected capacity change from 0 to 256 [ 305.881784][T10341] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.918340][T10345] overlayfs: failed to clone upperpath [ 306.146088][ T28] audit: type=1326 audit(1783749054.820:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.3.1194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd4d9797bd7 code=0x0 [ 306.198917][T10351] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1193'. [ 306.232498][ T28] audit: type=1326 audit(1783749054.930:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.8.1196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 306.299247][T10355] loop8: detected capacity change from 0 to 1024 [ 306.350754][T10355] EXT4-fs: Mount option(s) incompatible with ext3 [ 306.372660][ T28] audit: type=1326 audit(1783749054.930:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.8.1196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 306.464918][ T28] audit: type=1326 audit(1783749054.960:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.8.1196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 306.504190][ T6255] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.526986][T10359] loop7: detected capacity change from 0 to 164 [ 306.531384][ T28] audit: type=1326 audit(1783749054.960:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.8.1196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 306.624207][T10355] loop8: detected capacity change from 0 to 1024 [ 306.640888][ T6255] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.649195][ T28] audit: type=1326 audit(1783749054.960:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.8.1196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 306.655922][ T6255] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.693308][ T6983] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.744692][ T28] audit: type=1326 audit(1783749054.960:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.8.1196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 306.777101][ T6255] Buffer I/O error on dev loop8, logical block 0, async page read [ 306.820899][ T28] audit: type=1326 audit(1783749054.960:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.8.1196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 306.952748][ T28] audit: type=1326 audit(1783749054.960:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.8.1196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 307.050881][ T28] audit: type=1326 audit(1783749054.960:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.8.1196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 308.733921][T10391] netlink: 'syz.8.1211': attribute type 1 has an invalid length. [ 308.913521][T10391] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 308.943143][T10391] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 308.965132][T10391] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 308.991460][T10391] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.006579][T10391] bond1: (slave geneve2): making interface the new active one [ 309.016206][T10391] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 309.166820][T10404] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 311.620388][T10430] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.821466][T10430] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.911064][ T27] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 311.993039][T10430] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.104055][ T27] usb 8-1: config 0 has no interfaces? [ 312.126748][ T27] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 312.154712][ T27] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 312.186195][ T27] usb 8-1: Product: syz [ 312.195329][ T27] usb 8-1: Manufacturer: syz [ 312.209426][ T27] usb 8-1: SerialNumber: syz [ 312.217963][T10430] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.236576][ T27] usb 8-1: config 0 descriptor?? [ 312.476100][T10430] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.559960][T10430] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.580003][T10443] netlink: 'syz.3.1229': attribute type 10 has an invalid length. [ 312.626559][T10443] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 312.672817][T10430] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.727895][T10430] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.818556][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1231'. [ 312.842110][ T27] usb 8-1: USB disconnect, device number 2 [ 313.278973][T10458] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1236'. [ 314.788348][T10467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.822892][T10472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1240'. [ 315.136274][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1242'. [ 315.149484][T10478] overlayfs: failed to clone upperpath [ 315.333881][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 315.333899][ T28] audit: type=1326 audit(1783749064.030:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10479 comm="syz.8.1244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88da99de59 code=0x0 [ 316.207196][ C0] hrtimer: interrupt took 428785 ns [ 316.248938][T10494] netlink: 'syz.8.1250': attribute type 39 has an invalid length. [ 316.659361][ T28] audit: type=1326 audit(1783749065.350:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.7.1252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f7439de59 code=0x0 [ 316.854233][ T28] audit: type=1326 audit(1783749065.550:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.7.1252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7439de59 code=0x7ffc0000 [ 316.893202][T10507] netlink: 'syz.5.1253': attribute type 298 has an invalid length. [ 316.958868][ T28] audit: type=1326 audit(1783749065.580:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.7.1252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7439de59 code=0x7ffc0000 [ 317.050972][ T28] audit: type=1326 audit(1783749065.580:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.7.1252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7439de59 code=0x7ffc0000 [ 317.191732][ T28] audit: type=1326 audit(1783749065.580:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.7.1252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7439de59 code=0x7ffc0000 [ 317.276261][ T28] audit: type=1326 audit(1783749065.580:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.7.1252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1f7439de59 code=0x7ffc0000 [ 317.378028][ T28] audit: type=1326 audit(1783749065.590:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.7.1252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7439de59 code=0x7ffc0000 [ 317.423818][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.431916][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.447311][ T28] audit: type=1326 audit(1783749065.650:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.7.1252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f7435e68e code=0x7ffc0000 [ 317.517066][ T28] audit: type=1326 audit(1783749065.710:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.7.1252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f7435e68e code=0x7ffc0000 [ 319.302435][T10539] netlink: 'syz.8.1268': attribute type 39 has an invalid length. [ 324.798106][T10583] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 324.808542][T10583] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 325.696110][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.086703][T10596] batadv_slave_1: entered promiscuous mode [ 326.949508][T10616] ref_ctr increment failed for inode: 0x1d6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888025168980 [ 327.584586][T10626] gretap0: entered promiscuous mode [ 327.627003][T10626] macvlan2: entered promiscuous mode [ 327.649260][T10626] vlan2: entered promiscuous mode [ 328.666202][T10626] vlan2: left promiscuous mode [ 328.691611][T10626] gretap0: left promiscuous mode [ 329.192699][T10634] x_tables: ip_tables: osf match: only valid for protocol 6 [ 329.250009][T10633] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1296'. [ 329.522097][T10640] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.545095][T10642] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1300'. [ 329.668050][T10640] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.695721][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 329.695739][ T28] audit: type=1326 audit(1783749078.390:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 329.739495][ T28] audit: type=1326 audit(1783749078.390:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 329.817431][ T28] audit: type=1326 audit(1783749078.470:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 329.850379][T10640] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.933577][ T28] audit: type=1326 audit(1783749078.470:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 330.015186][T10640] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.123769][ T28] audit: type=1326 audit(1783749078.470:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 330.240842][ T28] audit: type=1326 audit(1783749078.470:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 330.335755][ T28] audit: type=1326 audit(1783749078.470:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 330.411568][T10640] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.438574][ T28] audit: type=1326 audit(1783749078.470:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 330.496434][T10640] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.522590][ T28] audit: type=1326 audit(1783749078.470:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 330.617232][T10640] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.641507][ T28] audit: type=1326 audit(1783749078.470:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 330.734496][T10640] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.651632][T10662] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1309'. [ 331.865080][T10667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1311'. [ 332.059868][T10662] macvtap1: entered allmulticast mode [ 332.130483][T10668] bond2: (slave vti0): refused to change device type [ 332.206035][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1312'. [ 332.363005][T10670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1311'. [ 332.584824][T10674] Device name cannot be null; rc = [-22] [ 333.974255][T10684] macsec1: entered promiscuous mode [ 333.979559][T10684] virt_wifi0: entered promiscuous mode [ 336.245771][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1320'. [ 336.274767][T10698] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 336.561176][T10702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1320'. [ 336.598693][T10702] bond7: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 336.711869][T10707] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.734663][T10707] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.824478][T10707] macsec1: left promiscuous mode [ 336.830892][T10707] virt_wifi0: left promiscuous mode [ 337.200442][T10717] loop8: detected capacity change from 0 to 1024 [ 337.224681][T10717] EXT4-fs: Ignoring removed bh option [ 337.288992][T10717] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 337.358707][T10717] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.390144][ T9297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.834594][T10756] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 339.909316][T10756] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 340.198049][T10756] bridge0: port 1(vlan7) entered blocking state [ 340.866235][T10756] bridge0: port 1(vlan7) entered disabled state [ 340.950038][T10756] vlan7: entered allmulticast mode [ 341.017627][T10756] bond0: entered allmulticast mode [ 341.048133][T10756] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 341.122297][T10756] bridge0: entered allmulticast mode [ 341.165989][T10756] macvlan2: entered allmulticast mode [ 341.228737][T10756] team0: entered allmulticast mode [ 341.356361][T10756] vlan7: left allmulticast mode [ 341.362349][T10756] bond0: left allmulticast mode [ 341.368157][T10756] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 341.422580][T10756] bridge0: left allmulticast mode [ 341.428637][T10756] macvlan2: left allmulticast mode [ 341.491396][T10756] team0: left allmulticast mode [ 341.568346][T10774] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.590891][T10774] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 341.793431][T10778] netlink: 'syz.5.1347': attribute type 6 has an invalid length. [ 341.934436][T10774] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.954359][ T5818] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 341.971493][T10774] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 342.072595][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 342.072649][ T28] audit: type=1326 audit(1783749090.770:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.5.1350" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x0 [ 342.128843][T10774] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.158509][T10774] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 342.207340][ T5818] usb 9-1: config 0 has no interfaces? [ 342.220865][ T5818] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 342.261532][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 342.278930][ T5818] usb 9-1: Product: syz [ 342.284486][ T5818] usb 9-1: Manufacturer: syz [ 342.290468][ T5818] usb 9-1: SerialNumber: syz [ 342.324740][T10774] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.345921][ T5818] usb 9-1: config 0 descriptor?? [ 342.383756][T10774] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 342.616268][T10774] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 342.646220][T10774] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 342.753641][T10774] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 342.777522][T10774] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 342.852280][T10774] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 342.877423][T10774] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 342.989688][T10774] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 343.010808][T10774] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 343.111090][ T27] usb 9-1: USB disconnect, device number 2 [ 344.267318][T10800] dummy0: left promiscuous mode [ 344.309827][T10800] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.335899][T10800] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.387679][T10800] batadv_slave_1: left promiscuous mode [ 344.642109][T10800] bond4: left promiscuous mode [ 344.650493][T10800] ip6gretap1: left promiscuous mode [ 344.686106][T10802] bond3: (slave geneve2): link status up again after 0 ms [ 344.723483][T10802] bond3: (slave geneve2): link status up again after 0 ms [ 344.780942][T10802] bond3: (slave geneve2): link status up again after 0 ms [ 344.819122][T10802] bond3: (slave geneve2): link status up again after 0 ms [ 344.861227][T10802] bond3: (slave geneve2): link status up again after 0 ms [ 344.873845][T10802] bond3: (slave geneve2): failed to get link speed/duplex [ 344.904750][ T28] audit: type=1326 audit(1783749093.600:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.8.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7fc00000 [ 344.984271][ T28] audit: type=1326 audit(1783749093.630:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.8.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f88da99de59 code=0x7fc00000 [ 345.020748][ T59] bond3: (slave geneve2): failed to get link speed/duplex [ 345.132027][ T59] bond3: (slave geneve2): failed to get link speed/duplex [ 345.240725][T10802] bond3: (slave geneve2): failed to get link speed/duplex [ 345.376127][ T11] bond3: (slave geneve2): failed to get link speed/duplex [ 345.521492][ T12] bond3: (slave geneve2): failed to get link speed/duplex [ 345.653187][T10802] bond3: (slave geneve2): failed to get link speed/duplex [ 345.800767][ T59] bond3: (slave geneve2): failed to get link speed/duplex [ 345.941429][ T11] bond3: (slave geneve2): failed to get link speed/duplex [ 346.051169][ T11] bond3: (slave geneve2): failed to get link speed/duplex [ 346.937473][T10846] : renamed from veth0_to_bond (while UP) [ 347.026217][T10848] loop8: detected capacity change from 0 to 512 [ 347.049434][T10848] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 347.093049][T10848] EXT4-fs (loop8): 1 truncate cleaned up [ 347.100172][T10848] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.259040][ T28] audit: type=1800 audit(1783749095.950:1303): pid=10848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1370" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 347.357425][T10851] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.1370: corrupted xattr entries [ 347.443214][T10851] EXT4-fs error (device loop8): get_max_inline_xattr_value_size:69: inode #15: comm syz.8.1370: corrupt xattr in inline inode [ 347.487369][T10851] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.1370: corrupted xattr entries [ 347.744198][ T9297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.910473][ T59] net_ratelimit: 27 callbacks suppressed [ 350.041682][ T59] bond3: (slave geneve2): failed to get link speed/duplex [ 350.375790][ T4826] bond3: (slave geneve2): failed to get link speed/duplex [ 350.750547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 350.930574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 352.175139][ T9978] bond3: (slave geneve2): failed to get link speed/duplex [ 353.641550][ T9978] bond3: (slave geneve2): failed to get link speed/duplex [ 353.730559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 353.740582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 353.753951][ T9978] bond3: (slave geneve2): failed to get link speed/duplex [ 353.870571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 353.940603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 354.000568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 354.091504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #46!!! [ 354.120569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 354.240566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 356.821185][ T9978] bond3: (slave geneve2): failed to get link speed/duplex [ 356.940960][ T5000] bond3: (slave geneve2): failed to get link speed/duplex [ 357.062026][ T69] bond3: (slave geneve2): failed to get link speed/duplex [ 357.200783][ T1004] bond3: (slave geneve2): failed to get link speed/duplex [ 357.323305][ T4520] bond3: (slave geneve2): failed to get link speed/duplex [ 357.463334][ T69] bond3: (slave geneve2): failed to get link speed/duplex [ 357.611896][ T69] bond3: (slave geneve2): failed to get link speed/duplex [ 357.720843][ T69] bond3: (slave geneve2): failed to get link speed/duplex [ 357.779387][T10911] loop8: detected capacity change from 0 to 1024 [ 357.792699][T10911] ext4: Unknown parameter 'no' [ 357.830866][ T4520] bond3: (slave geneve2): failed to get link speed/duplex [ 357.922846][T10901] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.951145][ T4520] bond3: (slave geneve2): failed to get link speed/duplex [ 358.043707][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 358.323847][T10914] team1: entered promiscuous mode [ 358.336987][T10914] team1: entered allmulticast mode [ 358.343631][T10914] 8021q: adding VLAN 0 to HW filter on device team1 [ 358.440835][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 358.900280][T10915] team2: entered promiscuous mode [ 358.960649][T10915] team2: entered allmulticast mode [ 359.106714][T10915] 8021q: adding VLAN 0 to HW filter on device team2 [ 360.731550][T10937] xt_TCPMSS: Only works on TCP SYN packets [ 361.262344][T10943] netlink: 'syz.3.1400': attribute type 7 has an invalid length. [ 361.331160][T10943] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.340809][T10943] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.349581][T10943] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.358486][T10943] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.503626][T10943] netlink: 'syz.3.1400': attribute type 7 has an invalid length. [ 361.545600][T10943] netlink: 'syz.3.1400': attribute type 7 has an invalid length. [ 361.941732][ T2889] net_ratelimit: 16 callbacks suppressed [ 361.941837][ T2889] bond3: (slave geneve2): failed to get link speed/duplex [ 362.027809][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1404'. [ 362.106645][ T1004] bond3: (slave geneve2): failed to get link speed/duplex [ 362.280803][ T2889] bond3: (slave geneve2): failed to get link speed/duplex [ 362.436710][ T5009] bond3: (slave geneve2): failed to get link speed/duplex [ 362.603141][ T4520] bond3: (slave geneve2): failed to get link speed/duplex [ 362.750867][ T5009] bond3: (slave geneve2): failed to get link speed/duplex [ 362.861862][ T5000] bond3: (slave geneve2): failed to get link speed/duplex [ 363.065573][ T1004] bond3: (slave geneve2): failed to get link speed/duplex [ 363.191438][ T1004] bond3: (slave geneve2): failed to get link speed/duplex [ 363.320737][ T4520] bond3: (slave geneve2): failed to get link speed/duplex [ 363.741241][ T5818] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 363.768378][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1414'. [ 364.004042][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 364.075587][ T5818] usb 9-1: unable to get BOS descriptor or descriptor too short [ 364.118609][ T5818] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 364.159994][ T5818] usb 9-1: can't read configurations, error -71 [ 364.240905][ T5779] IPVS: starting estimator thread 0... [ 364.371059][T10992] IPVS: using max 18 ests per chain, 43200 per kthread [ 370.297764][T10997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.272450][T10997] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.281328][T10997] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.289839][T10997] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.300358][T10997] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.375234][T11028] netlink: 'syz.8.1430': attribute type 1 has an invalid length. [ 371.394061][T11028] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 371.431204][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1430'. [ 371.476400][T11032] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 371.538688][T11038] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1432'. [ 373.881939][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1441'. [ 373.909852][T11068] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.920170][T11068] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.929917][T11068] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.939761][T11068] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.017597][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1442'. [ 374.080061][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1441'. [ 374.124100][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1442'. [ 378.948064][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.954991][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.565130][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1465'. [ 380.687410][T11155] syz.8.1469 (11155): attempted to duplicate a private mapping with mremap. This is not supported. [ 383.390785][T11177] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1476'. [ 386.841327][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 388.250858][T11041] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 388.473434][T11041] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.514230][T11041] usb 8-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 388.554130][T11041] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.599834][T11041] usb 8-1: config 0 descriptor?? [ 388.612245][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1489'. [ 388.632096][T11041] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 388.979599][T11232] 8021q: adding VLAN 0 to HW filter on device bond9 [ 389.012579][T11232] bond8: (slave bond9): Enslaving as an active interface with an up link [ 389.034951][T11041] usb 8-1: USB disconnect, device number 3 [ 389.181574][T11233] bond8 (unregistering): (slave bond9): Releasing backup interface [ 389.246851][T11233] bond8 (unregistering): Released all slaves [ 393.842171][T11301] bridge0: port 2(bridge_slave_1) entered listening state [ 397.284568][T11326] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 404.078115][ T28] audit: type=1326 audit(1783749152.770:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.8.1545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 404.181717][ T28] audit: type=1326 audit(1783749152.800:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.8.1545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 404.261040][ T28] audit: type=1326 audit(1783749152.800:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.8.1545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 404.353553][ T28] audit: type=1326 audit(1783749152.800:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.8.1545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 404.459721][ T28] audit: type=1326 audit(1783749152.850:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.8.1545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 404.570836][ T28] audit: type=1326 audit(1783749152.920:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.8.1545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88da95e68e code=0x7ffc0000 [ 404.655427][ T28] audit: type=1326 audit(1783749152.920:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.8.1545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88da95e68e code=0x7ffc0000 [ 404.683556][T11393] loop7: detected capacity change from 0 to 32768 [ 404.763373][ T28] audit: type=1326 audit(1783749152.930:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.8.1545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88da95e68e code=0x7ffc0000 [ 404.839452][T11393] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 404.894266][ T28] audit: type=1326 audit(1783749152.940:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.8.1545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88da95e68e code=0x7ffc0000 [ 405.022467][ T28] audit: type=1326 audit(1783749152.940:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.8.1545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88da95e68e code=0x7ffc0000 [ 405.154290][T11393] XFS (loop7): Ending clean mount [ 405.268761][T11393] XFS (loop7): Quotacheck needed: Please wait. [ 405.627620][T11393] XFS (loop7): Quotacheck: Done. [ 405.822287][ T8223] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 406.216841][T11440] bridge_slave_0: left allmulticast mode [ 406.250684][T11440] bridge_slave_0: left promiscuous mode [ 406.256784][T11440] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.287858][T11440] bridge_slave_1: left allmulticast mode [ 406.305340][T11440] bridge_slave_1: left promiscuous mode [ 406.324010][T11440] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.379667][T11440] bond0: (slave bond_slave_0): Releasing backup interface [ 406.408462][T11440] bond0: (slave bond_slave_1): Releasing backup interface [ 406.491957][T11440] team0: Port device team_slave_0 removed [ 406.546156][T11440] team0: Port device team_slave_1 removed [ 406.572151][T11440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.603736][T11440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.634666][T11440] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 406.672060][T11440] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 406.680388][T11440] bridge0: port 3(wlan1) entered disabled state [ 406.766001][T11440] bond1: (slave veth3): Releasing backup interface [ 406.811155][T11440] bond3: (slave geneve2): Removing an active aggregator [ 406.843110][T11440] bond3: (slave geneve2): Releasing backup interface [ 406.921226][T11440] bond5: (slave ip6gretap1): Releasing backup interface [ 406.986638][T11440] ip6gretap1: left allmulticast mode [ 407.029527][T11451] tipc: Failed to remove unknown binding: 66,0,0/0:726782201/726782203 [ 407.138330][T11451] tipc: Failed to remove unknown binding: 66,0,0/0:726782201/726782202 [ 407.203397][T11441] team0: Mode changed to "activebackup" [ 407.280991][T11451] tipc: Failed to remove unknown binding: 66,0,0/0:726782201/726782203 [ 407.302365][T11451] tipc: Failed to remove unknown binding: 66,0,0/0:726782201/726782202 [ 411.258268][T11485] Invalid ELF header magic: != ELF [ 411.790701][T11493] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 411.790701][T11493] The task syz.7.1568 (11493) triggered the difference, watch for misbehavior. [ 411.961127][T11495] netlink: 'syz.8.1576': attribute type 1 has an invalid length. [ 412.240988][T11495] bond3: entered promiscuous mode [ 412.297575][T11495] bond3: entered allmulticast mode [ 412.346730][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1576'. [ 412.494791][T11498] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 412.507752][T11498] bond3: (slave bridge3): making interface the new active one [ 412.515659][T11498] bridge3: entered promiscuous mode [ 412.535932][T11498] bridge3: entered allmulticast mode [ 412.563237][T11498] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 412.621190][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1576'. [ 413.163645][T11500] bond3: left promiscuous mode [ 413.168506][T11500] bridge3: left promiscuous mode [ 413.181450][T11500] bond3: left allmulticast mode [ 413.248629][T11500] bridge3: left allmulticast mode [ 413.302870][T11500] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.532349][T11513] netlink: 'syz.7.1582': attribute type 1 has an invalid length. [ 413.660043][T11513] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.878462][T11522] overlayfs: failed to clone upperpath [ 413.954668][T11517] bond5: (slave veth9): Enslaving as an active interface with a down link [ 414.064785][T11518] bond5: (slave dummy0): making interface the new active one [ 414.103997][T11518] dummy0: entered promiscuous mode [ 414.109695][T11518] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 414.127103][T11520] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1582'. [ 414.249691][T11520] bond5: (slave dummy0): Releasing active interface [ 414.257845][T11520] dummy0 (unregistering): left promiscuous mode [ 418.127587][T11567] Invalid ELF header magic: != ELF [ 418.768344][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 418.768435][ T28] audit: type=1326 audit(1783749167.460:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.3.1601" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 418.901240][ T28] audit: type=1326 audit(1783749167.500:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.3.1601" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 419.021249][ T28] audit: type=1326 audit(1783749167.510:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.3.1601" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 419.110740][ T28] audit: type=1326 audit(1783749167.510:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.3.1601" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 419.251552][ T28] audit: type=1326 audit(1783749167.530:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.3.1601" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 419.330941][ T28] audit: type=1326 audit(1783749167.530:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.3.1601" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 419.447937][ T28] audit: type=1326 audit(1783749167.530:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.3.1601" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 419.520774][ T28] audit: type=1326 audit(1783749167.530:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.3.1601" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 419.589186][T11581] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 419.592518][ T28] audit: type=1326 audit(1783749167.530:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.3.1601" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 419.639910][T11581] lo: Caught tx_queue_len zero misconfig [ 419.752823][ T28] audit: type=1326 audit(1783749167.530:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.3.1601" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 424.176890][T11618] loop7: detected capacity change from 0 to 32768 [ 424.526707][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 424.526724][ T28] audit: type=1800 audit(1783749173.220:1455): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1615" name="file1" dev="loop7" ino=14 res=0 errno=0 [ 425.793920][T11650] binder: 11649:11650 unknown command 0 [ 425.820428][T11650] binder: 11649:11650 ioctl c0306201 200000004a40 returned -22 [ 427.328665][T11041] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 427.989526][T11041] usb 8-1: Using ep0 maxpacket: 16 [ 428.422923][T11041] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 428.462342][T11041] usb 8-1: config 0 has no interface number 0 [ 428.481965][T11041] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 428.543239][T11041] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 428.589534][T11041] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 428.634386][T11041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.663577][T11041] usb 8-1: Product: syz [ 428.667819][T11041] usb 8-1: Manufacturer: syz [ 428.699949][T11041] usb 8-1: SerialNumber: syz [ 428.739277][T11041] usb 8-1: config 0 descriptor?? [ 428.780238][T11667] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 428.829179][T11667] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 429.117165][T11667] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 429.145555][T11667] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 429.377769][T11041] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 431.232993][T11041] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 431.250275][T11041] asix: probe of 8-1:0.34 failed with error -71 [ 431.270248][T11041] usb 8-1: USB disconnect, device number 4 [ 431.703237][T11686] loop7: detected capacity change from 0 to 512 [ 431.724751][T11686] EXT4-fs: Ignoring removed i_version option [ 431.780428][T11686] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.813079][T11686] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.102731][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.412521][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1638'. [ 434.091588][T11713] vlan2: entered promiscuous mode [ 434.122837][T11713] bridge0: entered promiscuous mode [ 434.128282][T11713] vlan2: entered allmulticast mode [ 434.181070][T11713] bridge0: entered allmulticast mode [ 434.216695][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1647'. [ 434.749983][T11721] bridge_slave_0: left allmulticast mode [ 434.807880][T11721] bridge_slave_0: left promiscuous mode [ 437.201663][T11721] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.241689][T11721] bridge_slave_1: left promiscuous mode [ 437.271698][T11721] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.332085][T11721] bond0: (slave bond_slave_0): Releasing backup interface [ 437.422589][T11721] bond0: (slave bond_slave_1): Releasing backup interface [ 437.687619][T11721] team0: Port device team_slave_0 removed [ 437.824641][T11721] team0: Port device team_slave_1 removed [ 437.859353][T11721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.872458][T11721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.958696][T11721] bond3: (slave wlan0): Releasing active interface [ 438.002484][T11721] bond3: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 438.048923][T11721] batadv1: entered promiscuous mode [ 438.088511][T11721] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 438.098383][T11721] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 438.107243][T11721] bridge0: port 3(wlan1) entered disabled state [ 438.121890][T11721] bond1: (slave veth3): Releasing active interface [ 438.159381][T11721] bond2: (slave bridge1): Releasing backup interface [ 438.185308][T11721] bridge1: left allmulticast mode [ 438.229406][T11721] bond3: (slave batadv1): Releasing active interface [ 438.249394][T11721] batadv1: left promiscuous mode [ 438.313307][T11721] bond4: (slave ip6gretap1): Releasing backup interface [ 438.325328][T11721] ip6gretap1: left allmulticast mode [ 438.382735][T11721] bond5: (slave veth9): Releasing active interface [ 439.169377][T11760] loop7: detected capacity change from 0 to 1024 [ 439.228895][T11760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 439.334905][T11760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.289431][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.296084][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.417142][T11776] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 441.162403][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.532891][T11788] overlayfs: failed to clone upperpath [ 443.433777][ T5816] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 443.543457][ T5816] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 444.111817][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1677'. [ 445.210403][T11830] tipc: Failed to remove unknown binding: 66,0,0/0:203766674/203766675 [ 445.801700][T11835] tipc: Failed to remove unknown binding: 66,0,0/0:203766674/203766675 [ 446.147626][ T28] audit: type=1326 audit(1783749194.840:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.8.1682" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 446.248854][ T28] audit: type=1326 audit(1783749194.840:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.8.1682" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 446.334509][ T28] audit: type=1326 audit(1783749194.850:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.8.1682" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 446.427961][ T28] audit: type=1326 audit(1783749194.870:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.8.1682" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 446.535836][ T28] audit: type=1326 audit(1783749194.870:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.8.1682" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 446.608239][ T28] audit: type=1326 audit(1783749194.870:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.8.1682" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f88da99de59 code=0x7ffc0000 [ 446.641921][ T28] audit: type=1326 audit(1783749194.920:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.8.1682" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88da95e68e code=0x7ffc0000 [ 446.763308][ T28] audit: type=1326 audit(1783749194.920:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.8.1682" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88da95e68e code=0x7ffc0000 [ 446.807608][ T28] audit: type=1326 audit(1783749194.920:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.8.1682" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88da95e68e code=0x7ffc0000 [ 446.940944][ T28] audit: type=1326 audit(1783749194.920:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11826 comm="syz.8.1682" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88da95e68e code=0x7ffc0000 [ 447.230296][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1690'. [ 448.523642][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1698'. [ 450.548830][T11916] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 450.576098][T11916] CIFS mount error: No usable UNC path provided in device string! [ 450.576098][T11916] [ 450.587364][T11916] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 452.955130][T11910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.047331][T11910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.929797][T11910] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.943929][T11910] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.957236][T11910] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.969631][T11910] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 454.429316][T11910] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 454.440616][T11910] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 454.457883][T11910] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 454.468144][T11910] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 454.541272][T11919] netlink: 35 bytes leftover after parsing attributes in process `syz.7.1708'. [ 455.343506][ T5780] Bluetooth: hci3: Malformed Event: 0x02 [ 455.471452][T11957] netlink: 'syz.8.1721': attribute type 11 has an invalid length. [ 457.666961][T11981] binder_alloc: 11980: binder_alloc_buf size 1024 failed, no address space [ 457.697199][T11981] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8) [ 458.256034][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1731'. [ 458.377202][T11991] bridge5: port 1(dummy0) entered blocking state [ 458.450679][T11991] bridge5: port 1(dummy0) entered disabled state [ 458.562122][T11991] dummy0: entered allmulticast mode [ 458.611406][T11991] dummy0: entered promiscuous mode [ 458.661235][T11988] netlink: 'syz.3.1731': attribute type 10 has an invalid length. [ 458.721693][T11988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1731'. [ 458.773879][T11988] bridge5: port 1(dummy0) entered blocking state [ 458.780608][T11988] bridge5: port 1(dummy0) entered forwarding state [ 458.841829][T11988] dummy0: left allmulticast mode [ 458.888456][T11988] bridge5: port 1(dummy0) entered disabled state [ 458.997967][T11997] syz_tun: entered promiscuous mode [ 463.695276][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1753'. [ 464.321972][T12065] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.1756'. [ 464.399170][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1757'. [ 464.852211][T12068] bridge4: port 1(dummy0) entered blocking state [ 464.991742][T12068] bridge4: port 1(dummy0) entered disabled state [ 465.187279][T12068] dummy0: entered allmulticast mode [ 465.361965][T12068] dummy0: entered promiscuous mode [ 465.554581][T12074] netlink: 'syz.8.1757': attribute type 10 has an invalid length. [ 465.662785][T12074] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1757'. [ 465.762561][T12074] dummy0: left allmulticast mode [ 465.767808][T12074] bridge4: port 1(dummy0) entered disabled state [ 466.134616][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.380106][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.632724][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.407384][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.402528][T12100] lo speed is unknown, defaulting to 1000 [ 470.410390][T12100] lo speed is unknown, defaulting to 1000 [ 470.791668][T12100] lo speed is unknown, defaulting to 1000 [ 470.834140][T12100] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 471.464286][T12100] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 471.857012][T12100] lo speed is unknown, defaulting to 1000 [ 471.870188][T12100] lo speed is unknown, defaulting to 1000 [ 471.881983][T12100] lo speed is unknown, defaulting to 1000 [ 471.892174][T12100] lo speed is unknown, defaulting to 1000 [ 471.902488][T12100] lo speed is unknown, defaulting to 1000 [ 473.999683][T11938] Process accounting resumed [ 474.604219][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1774'. [ 474.667976][ T12] hsr_slave_0: left promiscuous mode [ 474.711905][ T12] hsr_slave_1: left promiscuous mode [ 474.739914][ T12] bridge_slave_1: left allmulticast mode [ 474.757251][ T12] bridge_slave_1: left promiscuous mode [ 474.775291][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.802028][ T12] bridge_slave_0: left allmulticast mode [ 474.828376][ T12] bridge_slave_0: left promiscuous mode [ 474.890888][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.279839][ T12] veth1_macvtap: left promiscuous mode [ 476.291796][ T12] veth0_macvtap: left promiscuous mode [ 476.297521][ T12] veth1_vlan: left promiscuous mode [ 476.354488][ T12] veth0_vlan: left promiscuous mode [ 476.729057][T12135] loop7: detected capacity change from 0 to 32768 [ 476.773471][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1779'. [ 480.222218][ T12] team0 (unregistering): Port device team_slave_1 removed [ 480.545892][ T12] team0 (unregistering): Port device team_slave_0 removed [ 480.850167][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.049906][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.836956][ T12] bond0 (unregistering): Released all slaves [ 482.037511][T12157] vlan3: entered promiscuous mode [ 482.053756][T12157] bridge0: entered promiscuous mode [ 482.059200][T12157] vlan3: entered allmulticast mode [ 482.080504][T12157] bridge0: entered allmulticast mode [ 482.108200][T12160] bridge_slave_0: left allmulticast mode [ 482.115436][T12160] bridge_slave_0: left promiscuous mode [ 482.136347][T12160] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.174749][T12160] bridge_slave_1: left allmulticast mode [ 482.182544][T12160] bridge_slave_1: left promiscuous mode [ 482.201195][T12160] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.246978][T12160] bond0: (slave bond_slave_0): Releasing backup interface [ 482.275552][T12160] bond0: (slave bond_slave_1): Releasing backup interface [ 482.298031][T12160] team0: Port device team_slave_0 removed [ 482.311589][T12160] team0: Port device team_slave_1 removed [ 482.318987][T12160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.328931][T12160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.341779][T12160] bond1: (slave geneve2): Releasing active interface [ 482.354555][T12160] bond3: (slave bridge3): Releasing active interface [ 482.374302][T12197] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 483.748742][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 483.792426][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 483.876042][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 487.330189][T12274] ip6gre2: entered promiscuous mode [ 487.911249][T12274] ip6gre2: entered allmulticast mode [ 489.434640][T12293] Invalid option length (1045252) for dns_resolver key [ 492.285819][T12315] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 492.341269][T12315] net_ratelimit: 10 callbacks suppressed [ 492.341288][T12315] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 492.857628][T12326] veth0_macvtap: left promiscuous mode [ 493.406627][T12330] netlink: 'syz.5.1818': attribute type 10 has an invalid length. [ 493.481453][T12330] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 493.551256][T12336] lo speed is unknown, defaulting to 1000 [ 493.611258][T12336] lo speed is unknown, defaulting to 1000 [ 493.694851][T12336] lo speed is unknown, defaulting to 1000 [ 493.952288][T12336] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 494.685958][T12336] lo speed is unknown, defaulting to 1000 [ 494.827028][T12336] lo speed is unknown, defaulting to 1000 [ 494.842394][T12336] lo speed is unknown, defaulting to 1000 [ 494.862903][T12336] lo speed is unknown, defaulting to 1000 [ 498.261245][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 498.261262][ T28] audit: type=1326 audit(1783749246.950:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.8.1828" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88da99de59 code=0x0 [ 502.811280][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.817763][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.416065][T12444] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.426445][T12444] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.439263][T12444] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.510799][T12444] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.320160][T12487] netlink: 'syz.5.1841': attribute type 1 has an invalid length. [ 508.376723][T12487] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 512.244749][T11941] IPVS: starting estimator thread 0... [ 512.364327][T12549] IPVS: using max 17 ests per chain, 40800 per kthread [ 514.306586][T12574] netlink: 'syz.8.1866': attribute type 1 has an invalid length. [ 514.756200][T12578] loop7: detected capacity change from 0 to 512 [ 514.847654][T12578] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1856: invalid indirect mapped block 2 (level 1) [ 515.254387][T12578] EXT4-fs (loop7): 1 truncate cleaned up [ 515.263690][T12578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.511454][T12574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 515.646338][T12582] vlan3: entered allmulticast mode [ 515.720911][T12582] bond4: entered allmulticast mode [ 515.885588][T12586] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.940865][T12586] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.980745][T12586] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.040742][T12586] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.112432][T12586] bond4: (slave geneve3): making interface the new active one [ 516.131826][T12586] geneve3: entered allmulticast mode [ 516.153944][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.167487][T12586] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 516.706625][T12612] syzkaller0: entered promiscuous mode [ 516.724661][T12612] syzkaller0: entered allmulticast mode [ 517.189452][T12624] netlink: 'syz.3.1877': attribute type 1 has an invalid length. [ 517.839558][T12630] 8021q: adding VLAN 0 to HW filter on device bond10 [ 517.962390][T12630] bond8: (slave bond10): making interface the new active one [ 518.001231][T12630] bond8: (slave bond10): Enslaving as an active interface with an up link [ 518.248953][T12633] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 518.319728][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1877'. [ 518.581926][T12624] 8021q: adding VLAN 0 to HW filter on device bond8 [ 520.039923][T12689] loop7: detected capacity change from 0 to 256 [ 520.243010][T10901] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 520.258464][T12689] netlink: 'syz.7.1881': attribute type 4 has an invalid length. [ 520.301717][T12689] netlink: 'syz.7.1881': attribute type 5 has an invalid length. [ 520.343724][T12689] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.1881'. [ 525.937732][T12729] tipc: Started in network mode [ 525.944322][T12729] tipc: Node identity 4, cluster identity 4711 [ 525.951924][T12729] tipc: Node number set to 4 [ 525.974366][T12730] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 526.061598][T12730] 8021q: adding VLAN 0 to HW filter on device bond11 [ 526.129203][T12736] vlan7: entered allmulticast mode [ 526.135482][T12736] bond11: entered allmulticast mode [ 526.265683][T12738] bond11: (slave geneve3): making interface the new active one [ 526.326998][T12738] geneve3: entered allmulticast mode [ 526.351663][T12738] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 527.230833][ T27] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 527.250541][ T28] audit: type=1326 audit(1783749275.940:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.5.1901" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 527.292235][T12764] syz.5.1901 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 527.329334][ T28] audit: type=1326 audit(1783749275.940:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.5.1901" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 527.417092][ T28] audit: type=1326 audit(1783749275.940:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.5.1901" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 527.458445][ T28] audit: type=1326 audit(1783749275.940:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.5.1901" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 527.495634][ T28] audit: type=1326 audit(1783749275.950:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.5.1901" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 527.537297][ T27] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 527.568678][ T27] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 527.611438][ T28] audit: type=1326 audit(1783749275.970:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.5.1901" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 527.617396][ T27] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 527.747617][ T27] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 527.789785][ T28] audit: type=1326 audit(1783749275.970:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.5.1901" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 527.840377][ T27] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 527.903133][ T27] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 527.940928][ T28] audit: type=1326 audit(1783749275.980:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.5.1901" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 527.966996][ T27] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 528.012857][ T27] usb 8-1: Product: syz [ 528.017087][ T27] usb 8-1: Manufacturer: syz [ 528.069838][ T27] cdc_wdm 8-1:1.0: skipping garbage [ 528.090885][ T27] cdc_wdm 8-1:1.0: skipping garbage [ 528.110915][ T27] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 528.116987][ T27] cdc_wdm 8-1:1.0: Unknown control protocol [ 528.170874][ T28] audit: type=1326 audit(1783749275.980:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.5.1901" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 528.171391][T12782] bond12: entered allmulticast mode [ 528.236011][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 528.321609][ T28] audit: type=1326 audit(1783749275.990:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.5.1901" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 528.438428][T12785] bridge6: entered allmulticast mode [ 528.472570][T12785] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 528.872408][T12753] warning: `syz.7.1896' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 528.918729][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 528.948547][ T27] usb 8-1: USB disconnect, device number 5 [ 529.120296][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1905'. [ 529.552211][T12782] bridge7: entered allmulticast mode [ 529.559165][T12782] bond12: (slave bridge7): Enslaving as an active interface with a down link [ 529.808469][T12803] vxcan0: entered allmulticast mode [ 530.101503][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'. [ 532.379983][T12845] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1916'. [ 532.448476][T12849] loop7: detected capacity change from 0 to 512 [ 532.583237][T12849] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.610979][T12849] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.647846][T12849] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 532.800190][T12849] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2971: inode #15: comm syz.7.1917: corrupted xattr block 33: invalid ea_ino [ 532.901105][T12849] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 533.114804][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.159955][T12867] bond4: (slave geneve3): Releasing active interface [ 533.189120][T12867] geneve3: left allmulticast mode [ 533.348636][T12867] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.380893][T12867] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.409696][T12867] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.440561][T12867] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.601255][T12868] team0: Mode changed to "roundrobin" [ 533.678024][T12875] lo speed is unknown, defaulting to 1000 [ 533.736681][T12875] lo speed is unknown, defaulting to 1000 [ 534.443248][ T5436] veth0_macvtap: entered promiscuous mode [ 535.736974][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1927'. [ 537.219999][T12938] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 537.725090][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1928'. [ 537.927984][T12940] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.1930'. [ 538.310409][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1941'. [ 539.331566][T12971] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 539.428439][T12971] batman_adv: batadv0: Adding interface: gretap3 [ 539.470753][T12971] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.602688][T12971] batman_adv: batadv0: Interface activated: gretap3 [ 539.936485][T12943] loop8: detected capacity change from 0 to 40427 [ 540.022083][T12943] F2FS-fs (loop8): invalid crc value [ 540.106941][T12943] F2FS-fs (loop8): Found nat_bits in checkpoint [ 540.489244][T12943] F2FS-fs (loop8): Start checkpoint disabled! [ 540.605614][T12943] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 542.396088][T12385] kworker/u4:20: attempt to access beyond end of device [ 542.396088][T12385] loop8: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 542.434388][T12385] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 542.840060][T12385] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 542.911683][T12385] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 543.074900][T12385] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 545.593741][T13035] loop7: detected capacity change from 0 to 1024 [ 545.622241][T13035] EXT4-fs: Ignoring removed orlov option [ 545.792290][T13035] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.021581][T13035] netlink: 'syz.7.1953': attribute type 4 has an invalid length. [ 546.147310][T13035] netlink: 'syz.7.1953': attribute type 4 has an invalid length. [ 546.379260][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.077460][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 550.998605][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 550.998723][ T28] audit: type=1326 audit(1783749299.690:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13092 comm="syz.5.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 551.137746][ T28] audit: type=1326 audit(1783749299.740:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13092 comm="syz.5.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 551.219569][ T28] audit: type=1326 audit(1783749299.760:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13092 comm="syz.5.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 551.294968][ T28] audit: type=1326 audit(1783749299.760:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13092 comm="syz.5.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 551.399174][ T28] audit: type=1326 audit(1783749299.760:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13092 comm="syz.5.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 551.514941][ T28] audit: type=1326 audit(1783749299.770:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13092 comm="syz.5.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 551.678132][ T28] audit: type=1326 audit(1783749299.770:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13092 comm="syz.5.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 551.833532][ T28] audit: type=1326 audit(1783749299.770:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13092 comm="syz.5.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 551.886336][ T28] audit: type=1326 audit(1783749299.770:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13092 comm="syz.5.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 551.986140][ T28] audit: type=1326 audit(1783749299.770:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13092 comm="syz.5.1965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab2f9de59 code=0x7ffc0000 [ 552.068761][T13107] netlink: 'syz.5.1969': attribute type 3 has an invalid length. [ 554.544112][T13147] SET target dimension over the limit! [ 556.796546][T13165] loop8: detected capacity change from 0 to 512 [ 556.866267][T13165] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 556.895466][T13165] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 556.918715][T13165] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 556.929918][T13165] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 556.947723][T13165] System zones: 0-2, 18-18, 34-35 [ 556.982367][T13165] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.086128][T13165] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 557.479711][T13165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.657768][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 558.657793][ T28] audit: type=1326 audit(1783749307.350:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13189 comm="syz.7.1990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7439de59 code=0x7fc00000 [ 558.780639][ T28] audit: type=1326 audit(1783749307.350:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13189 comm="syz.7.1990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f7439de59 code=0x7fc00000 [ 558.911168][T11043] lo speed is unknown, defaulting to 1000 [ 558.920045][T11044] lo speed is unknown, defaulting to 1000 [ 562.321238][T13263] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2006'. [ 563.182237][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.733145][T12800] udevd[12800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 563.807028][T12714] udevd[12714]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 565.853342][T13293] CIFS mount error: No usable UNC path provided in device string! [ 565.853342][T13293] [ 565.865468][T13293] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 566.228556][T13292] netlink: 'syz.8.2013': attribute type 1 has an invalid length. [ 566.237226][T13292] netlink: 'syz.8.2013': attribute type 4 has an invalid length. [ 566.245107][T13292] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2013'. [ 566.413133][T13294] netlink: 'syz.8.2013': attribute type 1 has an invalid length. [ 566.439885][T13294] netlink: 'syz.8.2013': attribute type 4 has an invalid length. [ 566.482474][T13294] netlink: 9491 bytes leftover after parsing attributes in process `syz.8.2013'. [ 568.559433][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2023'. [ 568.576085][T13334] lo speed is unknown, defaulting to 1000 [ 568.628978][T13334] lo speed is unknown, defaulting to 1000 [ 568.759615][T11943] IPVS: starting estimator thread 0... [ 568.851280][T13343] IPVS: using max 17 ests per chain, 40800 per kthread [ 569.374817][T13353] tipc: Failed to remove unknown binding: 66,0,0/0:2906373831/2906373833 [ 569.398943][T13353] tipc: Failed to remove unknown binding: 66,0,0/0:2906373831/2906373832 [ 570.441134][T13364] team0: Mode changed to "activebackup" [ 571.938145][T13393] netlink: 'syz.3.2039': attribute type 1 has an invalid length. [ 572.055145][T13396] bond14: (slave bridge8): making interface the new active one [ 572.069455][T13396] bond14: (slave bridge8): Enslaving as an active interface with an up link [ 572.596084][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2039'. [ 572.797690][T13393] bond14: entered promiscuous mode [ 573.017510][T13393] bridge8: entered promiscuous mode [ 573.057214][T13393] bond14: entered allmulticast mode [ 573.094880][T13393] bridge8: entered allmulticast mode [ 573.152009][T13393] 8021q: adding VLAN 0 to HW filter on device bond14 [ 573.255460][T12380] bond14: (slave bridge8): link status definitely down, disabling slave [ 574.200944][T12380] bridge8: left promiscuous mode [ 574.206333][T12380] bridge8: left allmulticast mode [ 574.413701][T12380] bond14: now running without any active interface! [ 578.037822][T13445] netlink: 'syz.7.2053': attribute type 1 has an invalid length. [ 578.986314][T13445] bond7: (slave bridge3): making interface the new active one [ 579.129532][T13445] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 579.213362][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2053'. [ 579.265656][T13451] bond7: entered promiscuous mode [ 579.293594][T13451] bridge3: entered promiscuous mode [ 579.299047][T13451] bond7: entered allmulticast mode [ 579.377598][T13451] bridge3: entered allmulticast mode [ 579.409949][T13451] 8021q: adding VLAN 0 to HW filter on device bond7 [ 579.536282][ T59] bond7: (slave bridge3): link status definitely down, disabling slave [ 579.861216][ T59] bridge3: left promiscuous mode [ 580.219979][ T59] bridge3: left allmulticast mode [ 580.334316][ T59] bond7: now running without any active interface! [ 580.537490][T13464] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 580.602748][T13459] macvtap2: entered promiscuous mode [ 580.608286][T13459] macvtap2: entered allmulticast mode [ 580.683047][T13459] veth1_vlan: entered allmulticast mode [ 580.786180][T13463] macvtap3: entered promiscuous mode [ 580.826537][T13463] macvtap3: entered allmulticast mode [ 581.223587][T13479] loop7: detected capacity change from 0 to 128 [ 587.564763][T13524] xt_HMARK: spi-set and port-set can't be combined [ 588.488047][T13530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2072'. [ 590.319454][T13545] loop8: detected capacity change from 0 to 1024 [ 590.361699][T13545] EXT4-fs: quotafile must be on filesystem root [ 590.440804][T12714] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 590.749579][T13545] loop8: detected capacity change from 0 to 512 [ 590.984228][T13543] lo speed is unknown, defaulting to 1000 [ 591.033064][T13543] lo speed is unknown, defaulting to 1000 [ 591.089638][T13545] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.193016][T13545] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.138553][ T9297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.902257][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2083'. [ 597.193546][T13586] 8021q: adding VLAN 0 to HW filter on device bond6 [ 597.321986][T13591] vlan4: entered allmulticast mode [ 597.328289][T13591] veth0_to_bond: entered allmulticast mode [ 597.493434][T13592] macvlan2: entered promiscuous mode [ 597.516473][T13592] macvlan2: entered allmulticast mode [ 597.558618][T13592] bond6: entered promiscuous mode [ 597.577624][T13592] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 597.627388][T13592] bond6: left promiscuous mode [ 597.976181][T13613] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2086'. [ 598.051518][T13609] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2086'. [ 598.095560][T13610] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2086'. [ 598.560066][T13621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2089'. [ 601.769856][T13651] loop7: detected capacity change from 0 to 2048 [ 601.892006][T13651] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 601.971436][T13651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 602.634340][T13657] pim6reg99999991: entered allmulticast mode [ 608.891040][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 608.918705][T13735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.984076][T13735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.248437][T13738] netlink: 'syz.7.2113': attribute type 4 has an invalid length. [ 609.452712][T13738] netlink: 'syz.7.2113': attribute type 4 has an invalid length. [ 612.060618][T11041] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 612.272481][T11041] usb 8-1: Using ep0 maxpacket: 16 [ 612.298155][T11041] usb 8-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 612.355595][T11041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.384158][T11041] usb 8-1: Product: syz [ 612.418917][T11041] usb 8-1: Manufacturer: syz [ 612.449411][T11041] usb 8-1: SerialNumber: syz [ 613.807990][T11041] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 613.940287][T13774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2122'. [ 613.988001][T11041] snd-usb-audio: probe of 8-1:222.0 failed with error -71 [ 614.050121][T11041] usb 8-1: USB disconnect, device number 6 [ 614.124861][T12714] udevd[12714]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.792761][T13808] xfrm0: entered allmulticast mode [ 616.960728][T13810] netlink: 'syz.8.2129': attribute type 1 has an invalid length. [ 619.991144][T13810] 8021q: adding VLAN 0 to HW filter on device bond5 [ 620.154743][T13815] bond5: entered allmulticast mode [ 624.608383][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.542880][T13891] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 628.552982][T13891] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 628.573432][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2151'. [ 633.713761][T13927] gretap2: entered promiscuous mode [ 634.452019][T13931] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13934] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13931] [ 638.231697][T13949] overlayfs: failed to clone upperpath [ 649.010174][T13985] tipc: Enabling of bearer rejected, failed to enable media [ 656.755683][T14032] netlink: 'syz.3.2191': attribute type 1 has an invalid length. [ 657.479651][T14035] veth13: entered allmulticast mode [ 657.555322][T14035] bond15: (slave veth13): Enslaving as an active interface with a down link [ 657.671698][T14047] loop7: detected capacity change from 0 to 1024 [ 657.688873][T14038] veth0_to_bond: entered promiscuous mode [ 657.719485][T14038] veth0_to_bond: left promiscuous mode [ 657.729678][T14047] EXT4-fs: Ignoring removed bh option [ 657.825399][T14038] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 657.895086][T14042] veth0_to_bond: entered promiscuous mode [ 658.102904][T14047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.651017][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.773911][T14067] netlink: 'syz.5.2199': attribute type 1 has an invalid length. [ 662.064799][T14067] bond7: entered promiscuous mode [ 662.070194][T14067] 8021q: adding VLAN 0 to HW filter on device bond7 [ 662.306076][T14076] bond7: (slave bridge5): making interface the new active one [ 662.435144][T14076] bridge5: entered promiscuous mode [ 662.498453][T14076] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 663.688490][T14085] loop7: detected capacity change from 0 to 2048 [ 663.697341][T14085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 663.822541][T14085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.222148][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.259161][T14092] netlink: 'syz.5.2206': attribute type 5 has an invalid length. [ 668.295988][T11042] IPVS: starting estimator thread 0... [ 668.400684][T14115] IPVS: using max 19 ests per chain, 45600 per kthread [ 668.422071][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2213'. [ 668.626006][T14118] IPv6: sit1: Disabled Multicast RS [ 669.603280][T14130] netlink: 312 bytes leftover after parsing attributes in process `syz.8.2216'. [ 676.721287][ T28] audit: type=1326 audit(1783749425.420:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.3.2238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 676.813804][ T28] audit: type=1326 audit(1783749425.440:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.3.2238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 676.910469][ T28] audit: type=1326 audit(1783749425.440:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.3.2238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 677.030504][ T28] audit: type=1326 audit(1783749425.440:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.3.2238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd4d979de59 code=0x7ffc0000 [ 677.168863][ T28] audit: type=1326 audit(1783749425.490:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.3.2238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd4d975e68e code=0x7ffc0000 [ 677.313222][ T28] audit: type=1326 audit(1783749425.500:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.3.2238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd4d975e68e code=0x7ffc0000 [ 677.378262][ T28] audit: type=1326 audit(1783749425.500:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.3.2238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd4d975e68e code=0x7ffc0000 [ 677.403846][T14209] netlink: 'syz.7.2240': attribute type 1 has an invalid length. [ 677.416359][ T28] audit: type=1326 audit(1783749425.500:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.3.2238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd4d975e68e code=0x7ffc0000 [ 677.445102][ T28] audit: type=1326 audit(1783749425.540:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.3.2238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd4d975e68e code=0x7ffc0000 [ 677.473511][ T28] audit: type=1326 audit(1783749425.540:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.3.2238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd4d975e68e code=0x7ffc0000 [ 677.624631][T14209] bond8: entered promiscuous mode [ 677.680871][T14209] 8021q: adding VLAN 0 to HW filter on device bond8 [ 677.826205][T14216] bond8: (slave bridge4): making interface the new active one [ 677.855868][T14216] bridge4: entered promiscuous mode [ 677.879232][T14216] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 678.105267][T14226] netlink: 'syz.3.2245': attribute type 4 has an invalid length. [ 683.576067][T14260] loop7: detected capacity change from 0 to 512 [ 684.189995][T14260] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 684.198912][T14260] EXT4-fs (loop7): failed to open journal device unknown-block(8,1) -16 [ 684.282530][T14247] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 686.095561][T14280] bridge0: entered promiscuous mode [ 686.357091][T14280] bridge0: entered allmulticast mode [ 686.371701][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.914918][T14304] netlink: 'syz.3.2266': attribute type 4 has an invalid length. [ 688.171574][T14309] tipc: Started in network mode [ 688.176622][T14309] tipc: Node identity 0000000000000000002e00000000407f, cluster identity 4711 [ 689.681187][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2275'. [ 689.771756][T14331] 8021q: adding VLAN 0 to HW filter on device bond8 [ 690.003910][T14331] bond8: entered promiscuous mode [ 690.020800][T14331] bond8: entered allmulticast mode [ 690.063668][T14331] 8021q: adding VLAN 0 to HW filter on device bond8 [ 690.086899][T14331] team0: Port device bond8 added [ 690.133355][T14334] vxcan1: entered promiscuous mode [ 690.518228][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2276'. [ 691.626840][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2279'. [ 696.812483][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2293'. [ 697.002523][T14398] netlink: 'syz.5.2293': attribute type 5 has an invalid length. [ 697.030826][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2293'. [ 700.718920][T14426] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2300'. [ 700.744161][T14426] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2300'. [ 700.813923][T14430] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2302'. [ 700.977217][T14430] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2302'. [ 700.987226][T14430] veth7: entered promiscuous mode [ 700.997056][T14430] veth7: entered allmulticast mode [ 701.359074][T14443] netlink: 'syz.3.2306': attribute type 1 has an invalid length. [ 701.525970][T14443] bond16: entered promiscuous mode [ 701.551298][T14443] 8021q: adding VLAN 0 to HW filter on device bond16 [ 701.605550][T14445] vlan8: entered allmulticast mode [ 701.897075][T14445] bond16: entered allmulticast mode [ 703.277581][T14443] bond16: (slave bridge9): making interface the new active one [ 703.320516][T14443] bridge9: entered promiscuous mode [ 703.359965][T14443] bridge9: entered allmulticast mode [ 703.394507][T14443] bond16: (slave bridge9): Enslaving as an active interface with an up link [ 703.914081][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2312'. [ 704.771129][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 704.771146][ T28] audit: type=1326 audit(1783749453.407:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14474 comm="syz.8.2314" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88da99de59 code=0x0 [ 706.862635][T14495] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2321'. [ 706.894978][T14497] netlink: 'syz.5.2322': attribute type 9 has an invalid length. [ 707.092153][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2323'. [ 707.253368][T14506] bond6 (unregistering): Released all slaves [ 711.745823][ T28] audit: type=1326 audit(1783749460.437:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.3.2338" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4d979de59 code=0x0 [ 715.580803][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2349'. [ 716.778830][T14589] syzkaller0: entered promiscuous mode [ 716.810699][T14589] syzkaller0: entered allmulticast mode [ 725.777534][T14650] netlink: 'syz.8.2369': attribute type 10 has an invalid length. [ 725.808959][T14650] veth0_vlan: left promiscuous mode [ 725.852528][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2370'. [ 725.861741][T14650] veth0_vlan: entered promiscuous mode [ 725.865844][T14650] team0: Device veth0_vlan failed to register rx_handler [ 835.470323][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 835.477337][ C1] rcu: 0-...!: (1 GPs behind) idle=9ab4/1/0x4000000000000000 softirq=57407/57408 fqs=2 [ 835.488873][ C1] rcu: (detected by 1, t=10506 jiffies, g=80733, q=150 ncpus=2) [ 835.496616][ C1] Sending NMI from CPU 1 to CPUs 0: [ 835.501854][ C0] NMI backtrace for cpu 0 [ 835.501880][ C0] CPU: 0 PID: 14673 Comm: syz.8.2376 Not tainted syzkaller #0 [ 835.501956][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 835.501973][ C0] RIP: 0010:lock_acquire+0x1e9/0x420 [ 835.502079][ C0] Code: 85 03 01 00 00 43 c6 44 3c 04 00 48 c7 84 24 80 00 00 00 00 00 00 00 9c 8f 84 24 80 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 <43> c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb [ 835.502117][ C0] RSP: 0018:ffffc90000007b60 EFLAGS: 00000046 [ 835.502131][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 622b4c5ea02b0300 [ 835.502141][ C0] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1cfa20 [ 835.502152][ C0] RBP: ffffc90000007c80 R08: dffffc0000000000 R09: 1ffffffff223cea0 [ 835.502163][ C0] R10: dffffc0000000000 R11: fffffbfff223cea1 R12: 1ffff92000000f78 [ 835.502174][ C0] R13: ffffffff8d131da0 R14: 0000000000000046 R15: dffffc0000000000 [ 835.502185][ C0] FS: 00007f88d8bd56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 835.502198][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.502208][ C0] CR2: 0000200000338030 CR3: 000000001ef3b000 CR4: 00000000003506f0 [ 835.502221][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 835.502230][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 835.502241][ C0] Call Trace: [ 835.502267][ C0] [ 835.502298][ C0] ? advance_sched+0x989/0xc70 [ 835.502407][ C0] ? read_lock_is_recursive+0x20/0x20 [ 835.502423][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 835.502445][ C0] ? __rwlock_init+0x150/0x150 [ 835.502465][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 835.502484][ C0] ? advance_sched+0x9d7/0xc70 [ 835.502502][ C0] advance_sched+0x9f3/0xc70 [ 835.502519][ C0] ? advance_sched+0x9d7/0xc70 [ 835.502541][ C0] ? taprio_dequeue_from_txq+0x8e0/0x8e0 [ 835.502560][ C0] __hrtimer_run_queues+0x525/0xc10 [ 835.502576][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 835.502595][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 835.502622][ C0] ? hrtimer_interrupt+0x980/0x980 [ 835.502637][ C0] ? read_tsc+0x9/0x20 [ 835.502666][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 835.502689][ C0] hrtimer_interrupt+0x39d/0x980 [ 835.502716][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 835.502737][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 835.502816][ C0] [ 835.502820][ C0] [ 835.502849][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 835.502918][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 835.502939][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 835.502951][ C0] RSP: 0018:ffffc900052d7900 EFLAGS: 00000206 [ 835.502963][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 622b4c5ea02b0300 [ 835.502972][ C0] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1cfa20 [ 835.502981][ C0] RBP: ffffc900052d7a08 R08: dffffc0000000000 R09: 1ffffffff223cea6 [ 835.502992][ C0] R10: dffffc0000000000 R11: fffffbfff223cea7 R12: 1ffff92000a5af2c [ 835.503002][ C0] R13: ffff88802fe8a7a0 R14: 0000000000000246 R15: dffffc0000000000 [ 835.503023][ C0] ? __might_sleep+0xe0/0xe0 [ 835.503049][ C0] ? read_lock_is_recursive+0x20/0x20 [ 835.503068][ C0] ? verify_lock_unused+0x140/0x140 [ 835.503084][ C0] ? __might_fault+0xaa/0x120 [ 835.503106][ C0] __might_fault+0xc6/0x120 [ 835.503119][ C0] ? __might_fault+0xaa/0x120 [ 835.503134][ C0] _copy_from_user+0x2a/0xe0 [ 835.503168][ C0] ___sys_recvmsg+0x174/0x590 [ 835.503234][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 835.503258][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 835.503278][ C0] ? __might_fault+0xc6/0x120 [ 835.503291][ C0] ? __might_fault+0xaa/0x120 [ 835.503306][ C0] do_recvmmsg+0x377/0x810 [ 835.503324][ C0] ? __sys_recvmmsg+0x290/0x290 [ 835.503361][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 835.503408][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 835.503423][ C0] ? do_recvmmsg+0x810/0x810 [ 835.503438][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 835.503456][ C0] do_syscall_64+0x55/0xb0 [ 835.503481][ C0] ? clear_bhb_loop+0x40/0x90 [ 835.503494][ C0] ? clear_bhb_loop+0x40/0x90 [ 835.503507][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.503528][ C0] RIP: 0033:0x7f88da99de59 [ 835.503541][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.503552][ C0] RSP: 002b:00007f88d8bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 835.503565][ C0] RAX: ffffffffffffffda RBX: 00007f88dac26090 RCX: 00007f88da99de59 [ 835.503576][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 835.503585][ C0] RBP: 00007f88daa33e6f R08: 0000000000000000 R09: 0000000000000000 [ 835.503593][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 835.503601][ C0] R13: 00007f88dac26128 R14: 00007f88dac26090 R15: 00007ffc957e96e8 [ 835.503618][ C0] [ 835.503849][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g80733 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 836.012245][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 836.022228][ C1] rcu: RCU grace-period kthread stack dump: [ 836.028135][ C1] task:rcu_preempt state:R running task stack:26824 pid:17 ppid:2 flags:0x00004000 [ 836.038966][ C1] Call Trace: [ 836.042287][ C1] [ 836.045241][ C1] __schedule+0x15ae/0x4660 [ 836.049796][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 836.054872][ C1] ? lock_chain_count+0x20/0x20 [ 836.059755][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 836.064979][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 836.070906][ C1] ? asan.module_dtor+0x20/0x20 [ 836.075782][ C1] ? rcu_is_watching+0x15/0xb0 [ 836.080592][ C1] schedule+0xbd/0x170 [ 836.084690][ C1] schedule_timeout+0x188/0x2d0 [ 836.089576][ C1] ? console_conditional_schedule+0x40/0x40 [ 836.095516][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 836.101447][ C1] ? update_process_times+0x1b0/0x1b0 [ 836.106861][ C1] ? prepare_to_swait_event+0x344/0x360 [ 836.112447][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 836.117328][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 836.123519][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 836.128582][ C1] ? rcu_gp_init+0x1530/0x1530 [ 836.133374][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 836.138256][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 836.143489][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 836.148723][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 836.153340][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 836.158484][ C1] ? __kthread_parkme+0x71/0x1c0 [ 836.163442][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 836.168494][ C1] kthread+0x2fa/0x390 [ 836.172579][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 836.177713][ C1] ? kthread_blkcg+0xd0/0xd0 [ 836.182327][ C1] ret_from_fork+0x48/0x80 [ 836.186773][ C1] ? kthread_blkcg+0xd0/0xd0 [ 836.191386][ C1] ret_from_fork_asm+0x11/0x20 [ 836.196234][ C1] [ 836.199272][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 836.205612][ C1] CPU: 1 PID: 12397 Comm: kworker/u4:25 Not tainted syzkaller #0 [ 836.213358][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 836.223429][ C1] Workqueue: events_unbound toggle_allocation_gate [ 836.229992][ C1] RIP: 0010:smp_call_function_many_cond+0xd85/0x1190 [ 836.236704][ C1] Code: 45 8b 34 24 44 89 f6 83 e6 01 31 ff e8 54 f1 0a 00 41 83 e6 01 49 be 00 00 00 00 00 fc ff df 75 07 e8 8f ed 0a 00 eb 38 f3 90 <42> 0f b6 04 33 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 73 ed [ 836.256331][ C1] RSP: 0018:ffffc9000b6df780 EFLAGS: 00000293 [ 836.262423][ C1] RAX: ffffffff817bf7fd RBX: 1ffff110171c87a9 RCX: ffff88802c71bc00 [ 836.270426][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 836.278416][ C1] RBP: ffffc9000b6df900 R08: ffffffff911e7507 R09: 1ffffffff223cea0 [ 836.286406][ C1] R10: dffffc0000000000 R11: fffffbfff223cea1 R12: ffff8880b8e43d48 [ 836.294395][ C1] R13: ffff8880b8f3d3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 836.302385][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 836.311335][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.317944][ C1] CR2: 000020000012f000 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 836.325946][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 836.333946][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 836.341936][ C1] Call Trace: [ 836.345232][ C1] [ 836.348197][ C1] ? smp_call_function_many+0x40/0x40 [ 836.353598][ C1] ? text_poke+0xc0/0xc0 [ 836.357857][ C1] ? __mutex_trylock_common+0x160/0x270 [ 836.363423][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 836.369604][ C1] ? text_poke_sync+0x30/0x30 [ 836.374317][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 836.379472][ C1] ? kmem_cache_alloc_bulk+0x12a/0x5a0 [ 836.384959][ C1] text_poke_bp_batch+0x31e/0x980 [ 836.390020][ C1] ? text_poke_loc_init+0x7c0/0x7c0 [ 836.395249][ C1] ? mutex_lock_nested+0x20/0x20 [ 836.400211][ C1] ? text_poke_queue+0x134/0x190 [ 836.405175][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 836.411442][ C1] ? __jump_label_update+0x39a/0x3c0 [ 836.416764][ C1] text_poke_finish+0x30/0x50 [ 836.421468][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 836.427473][ C1] static_key_enable_cpuslocked+0x123/0x240 [ 836.433399][ C1] static_key_enable+0x1a/0x20 [ 836.438184][ C1] ? process_scheduled_works+0x975/0x1600 [ 836.443928][ C1] toggle_allocation_gate+0xa8/0x260 [ 836.449252][ C1] ? show_object+0x70/0x70 [ 836.453707][ C1] ? read_lock_is_recursive+0x20/0x20 [ 836.459122][ C1] ? process_scheduled_works+0x975/0x1600 [ 836.464874][ C1] ? process_scheduled_works+0x975/0x1600 [ 836.470620][ C1] process_scheduled_works+0xa60/0x1600 [ 836.476225][ C1] ? worker_attach_to_pool+0x370/0x370 [ 836.481713][ C1] ? assign_work+0x3cc/0x5d0 [ 836.486340][ C1] worker_thread+0xa5e/0xfe0 [ 836.490986][ C1] kthread+0x2fa/0x390 [ 836.495089][ C1] ? pr_cont_work+0x550/0x550 [ 836.499809][ C1] ? kthread_blkcg+0xd0/0xd0 [ 836.504450][ C1] ret_from_fork+0x48/0x80 [ 836.508903][ C1] ? kthread_blkcg+0xd0/0xd0 [ 836.513518][ C1] ret_from_fork_asm+0x11/0x20 [ 836.518332][ C1]