last executing test programs: 20m30.755364381s ago: executing program 32 (id=180): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r3, 0x2}, 0x8) 19m27.521374933s ago: executing program 33 (id=405): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) 19m14.34485031s ago: executing program 34 (id=488): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f00, 0x1, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25ab, 0x20, 0x0, 0x221}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x8, 0x2, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0x2, 0xfffffdff}}], 0x1, 0x0, 0x0) 18m34.784369623s ago: executing program 35 (id=692): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fstat(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "bd3477bcd0fc636b", "0aad493bc51309768e6917ea79c5de0422179793d17743f2dede9600", "fdc4e7fa", 'T8\x00'}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x11a, 0x4, 0x0, 0x0) 18m34.726479442s ago: executing program 8 (id=696): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 18m33.380879984s ago: executing program 8 (id=701): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) syz_open_procfs(0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 18m32.670079214s ago: executing program 8 (id=705): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000001c0)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18m32.401871529s ago: executing program 8 (id=706): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 18m31.326544046s ago: executing program 8 (id=711): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18m28.260146006s ago: executing program 8 (id=725): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d000101ff90090904000d020301010509210500770122b10f090581032040030864"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0x12}, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}, &(0x7f0000000240)={0x20, 0x81, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) 18m26.608663849s ago: executing program 36 (id=725): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d000101ff90090904000d020301010509210500770122b10f090581032040030864"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0x12}, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}, &(0x7f0000000240)={0x20, 0x81, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) 17m44.326456008s ago: executing program 37 (id=886): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0xc4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x2, 0x14, "066299080000007052ee9c000000f7fffff700"}) r5 = syz_open_pts(r0, 0x0) r6 = dup3(r5, r0, 0x0) ioctl$TCSETSW2(r6, 0x5437, 0x0) 15m10.151299399s ago: executing program 2 (id=1639): ioprio_set$uid(0x3, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) read$rfkill(r0, &(0x7f0000000040), 0x2) 15m8.637048309s ago: executing program 2 (id=1648): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x2002}}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x1, 0xa}, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240)) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000280)={0x2e, 0x5, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x22, &(0x7f0000000200)=@new_dev={0x1, 0xeec}}}, 0x0) 15m8.338209798s ago: executing program 2 (id=1637): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f0000000200)="e2", 0x100000}], 0x1}, 0x700}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=' ', 0x1}], 0x1}}], 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 15m6.788836833s ago: executing program 2 (id=1644): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000064c0)='./bus\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x61f6, &(0x7f000000cdc0)="$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") mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='bfq', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x4000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0) 15m5.943758532s ago: executing program 2 (id=1649): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000040)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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") syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000080)=ANY=[@ANYBLOB='session=0x0000040000000026,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c756e686964ea2c757443382e6769643d", @ANYRESHEX=0x0, @ANYBLOB=',map=acorn,nocompress,nojoliet,nojoliet,mode=0x000000000000000f,overriderockperm,check=relaxed,\x00'], 0x2, 0xa2f, &(0x7f0000002140)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) pwrite64(r1, &(0x7f0000000300)='_', 0x1, 0x10000000005) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) ftruncate(r0, 0x8002007ffb) 15m4.616511664s ago: executing program 2 (id=1661): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 15m4.225091561s ago: executing program 38 (id=1661): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 5m24.568666217s ago: executing program 6 (id=4156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) 5m22.888297402s ago: executing program 6 (id=4159): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5m19.890511801s ago: executing program 6 (id=4165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5m19.116890721s ago: executing program 6 (id=4171): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 5m16.220939449s ago: executing program 6 (id=4178): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdc", 0x33}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74", 0x54}, {&(0x7f0000000340)}, {&(0x7f0000000440)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m13.16395498s ago: executing program 6 (id=4183): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r0, @ANYBLOB="01180200031100002c0012800e000100697036657273"], 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x340007fb) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r0, 0x62024, 0x8d85}}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4m57.754144387s ago: executing program 39 (id=4183): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r0, @ANYBLOB="01180200031100002c0012800e000100697036657273"], 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x340007fb) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r0, 0x62024, 0x8d85}}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m40.671027855s ago: executing program 7 (id=4652): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x1, 0x3a0, 0x2}, 0x50) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1m39.175318665s ago: executing program 1 (id=4657): sched_setattr(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 1m38.449743339s ago: executing program 7 (id=4659): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = dup3(r1, r0, 0x0) fchdir(r5) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1m37.659664914s ago: executing program 7 (id=4661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x60}, 0x0) 1m37.386752259s ago: executing program 0 (id=4662): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 1m35.785105669s ago: executing program 1 (id=4665): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000010800)={@remote, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @loopback, @multicast1}, {{0x4e24, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, "3abd73", 0x70, ' Y\b'}}}}}}, 0x0) 1m35.474344284s ago: executing program 9 (id=4666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 1m34.358993346s ago: executing program 5 (id=4667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) 1m34.355486891s ago: executing program 9 (id=4668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 1m32.576417254s ago: executing program 5 (id=4670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000090000000400000003"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4, 0x2}, 0x20) 1m32.525139692s ago: executing program 9 (id=4671): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) listen(r4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) listen(r2, 0x8200002) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1m32.503741745s ago: executing program 7 (id=4672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 1m31.570912907s ago: executing program 0 (id=4673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) 1m31.073198442s ago: executing program 5 (id=4674): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) 1m29.59521255s ago: executing program 1 (id=4675): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x70bd27, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x804) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd6a00ffdbdf2504"], 0x14}}, 0x800) 1m29.519221664s ago: executing program 0 (id=4676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000380)=r4}, 0x20) shutdown(r3, 0x0) 1m28.951242762s ago: executing program 9 (id=4678): sched_setattr(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 1m28.004457362s ago: executing program 0 (id=4679): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setfsgid(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) fchmod(r2, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) fcntl$addseals(r0, 0x409, 0x7) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000002100250028bd7000fcdbdf250a1020f0ff0f00000000000014000200fe8000000000000000000400000000bb14000100"/63], 0x60}, 0x1, 0x0, 0x0, 0x4008844}, 0x240000d0) 1m27.774298718s ago: executing program 1 (id=4680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) 1m27.717037105s ago: executing program 3 (id=4681): socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x92}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa8b0, 0x8, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 1m26.878899239s ago: executing program 3 (id=4682): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x8000, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008004) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)={0x2, 0x2, 0x1, 0x7, 0x802, 0xd}) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xe0000200) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) writev(r3, &(0x7f0000000540)=[{&(0x7f00000001c0)='\x00\x00\x00\x00\x00', 0x5}], 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x28, {0x2, 0x4e21, @local}, 'pim6reg0\x00'}) 1m26.780138779s ago: executing program 3 (id=4683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) 1m26.516506324s ago: executing program 5 (id=4684): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100080, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) r0 = syz_clone(0x21000400, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x82) fchdir(r1) unlinkat(r1, 0x0, 0x200) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x4206, r0) ptrace(0x4207, r0) 1m25.18620016s ago: executing program 7 (id=4685): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x18, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x4) 1m23.900332031s ago: executing program 1 (id=4686): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1m23.900013323s ago: executing program 3 (id=4687): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1m23.665233686s ago: executing program 3 (id=4688): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000010800)={@remote, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @loopback, @multicast1}, {{0x4e24, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, "3abd73", 0x70, ' Y\b'}}}}}}, 0x0) 1m23.520118894s ago: executing program 5 (id=4689): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x8, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m23.437377538s ago: executing program 9 (id=4690): request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='\x99^\x00\x00\x00\xbf\xa6\x00'/18, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r1, 0xffffffffffffffff, 0xee01) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$inet(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="02", 0x1}], 0x1}, 0x40000c4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) 1m23.42960085s ago: executing program 0 (id=4691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1m23.322471446s ago: executing program 7 (id=4692): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1m23.235559866s ago: executing program 5 (id=4693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1m22.194892194s ago: executing program 3 (id=4694): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 1m21.078185101s ago: executing program 0 (id=4695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0x9ca86080, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 1m21.076944131s ago: executing program 9 (id=4696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040300ffedff", "af00000000000000050000000000feff", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom(r0, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d382e23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1m21.047882864s ago: executing program 1 (id=4697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x19fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 58.69350138s ago: executing program 40 (id=4695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0x9ca86080, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 58.53945062s ago: executing program 41 (id=4697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x19fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 58.476289013s ago: executing program 42 (id=4694): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 58.354059024s ago: executing program 43 (id=4693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 58.121448333s ago: executing program 44 (id=4692): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 58.050321108s ago: executing program 45 (id=4696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040300ffedff", "af00000000000000050000000000feff", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom(r0, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d382e23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 13.072762331s ago: executing program 4 (id=4712): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_get$pid(0x2, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 11.816782473s ago: executing program 4 (id=4713): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="4cfe538e2dbfa198aae0ec2a7179770fe5e65e4f6d16e558b94595c823899dfa2fae3c7f8b464d5baf20420d2d598fa388cec0cd0434cdcd27696875f7a70bb040a0ae324f89b55cbdf8bae15cdf4d2562136e6439cedb95891518cbd57b8f9142dcdc579953d658c21ff6325441248b747064e9c856bc76fc2e48a3a4cc7d5b4fbafde4949fb6842bf8ed1308f1d68e5af2400a44ad15c70a06c3578e4cb1aa30faf52664933720d844c937bf14f29690713368af106011cd38b41bb6cc816503317352b7927eb5aba2e1c8968eedb4571587fa0051687e13e3b294eea2d0e9685e802b75f510c6b645401c9f461f5288746f99827b93", 0xf7) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x4008840) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40808) 11.687344519s ago: executing program 4 (id=4714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="90", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000340)=0x3, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) shutdown(r1, 0x1) 10.759938797s ago: executing program 4 (id=4715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086dd6d001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.225348244s ago: executing program 4 (id=4716): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4000090) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, 0x0, 0x0) 0s ago: executing program 4 (id=4717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008844) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) getrusage(0x0, &(0x7f0000000280)) kernel console output (not intermixed with test programs): eam-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x50000 [ 693.179638][ T30] audit: type=1326 audit(1785753835.610:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.0.2801" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa3daf9e019 code=0x50000 [ 693.221489][T16211] netlink: 'syz.6.2806': attribute type 1 has an invalid length. [ 693.270999][ T30] audit: type=1326 audit(1785753835.610:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.0.2801" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa3daf9e019 code=0x50000 [ 693.319957][ T30] audit: type=1326 audit(1785753835.610:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.0.2801" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x50000 [ 693.345790][ T30] audit: type=1326 audit(1785753835.610:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.0.2801" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x50000 [ 693.370938][ T30] audit: type=1326 audit(1785753835.610:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.0.2801" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x50000 [ 693.396332][ T30] audit: type=1326 audit(1785753835.620:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.0.2801" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x50000 [ 693.427361][ T30] audit: type=1326 audit(1785753835.620:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.0.2801" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x50000 [ 693.452655][ T30] audit: type=1326 audit(1785753835.620:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.0.2801" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x50000 [ 693.454207][T16211] 8021q: adding VLAN 0 to HW filter on device bond4 [ 693.567909][T16217] gretap1: entered promiscuous mode [ 693.609587][T16217] bond4: (slave gretap1): making interface the new active one [ 693.637461][T16217] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 694.375253][T16230] GUP no longer grows the stack in syz.9.2814 (16230): 200000007000-200000008000 (200000004000) [ 694.427476][T16230] CPU: 0 UID: 0 PID: 16230 Comm: syz.9.2814 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.427533][T16230] Tainted: [L]=SOFTLOCKUP [ 694.427547][T16230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 694.427570][T16230] Call Trace: [ 694.427582][T16230] [ 694.427596][T16230] dump_stack_lvl+0x100/0x190 [ 694.427646][T16230] gup_vma_lookup.cold+0x83/0x96 [ 694.427707][T16230] fixup_user_fault+0x253/0x510 [ 694.427748][T16230] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.427805][T16230] fault_in_user_writeable+0x70/0xe0 [ 694.427858][T16230] futex_lock_pi+0x689/0x7f0 [ 694.427930][T16230] ? __pfx_futex_lock_pi+0x10/0x10 [ 694.427990][T16230] ? try_to_wake_up+0x70a/0x1c90 [ 694.428048][T16230] ? __pfx_try_to_wake_up+0x10/0x10 [ 694.428132][T16230] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.428187][T16230] ? futex_private_hash_put+0x115/0x1c0 [ 694.428244][T16230] ? __pfx_futex_wake_mark+0x10/0x10 [ 694.428338][T16230] do_futex+0x371/0x440 [ 694.428395][T16230] ? __pfx_do_futex+0x10/0x10 [ 694.428448][T16230] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.428495][T16230] ? __vm_munmap+0x1d2/0x390 [ 694.428564][T16230] __x64_sys_futex+0x34f/0x4d0 [ 694.428626][T16230] ? __pfx___x64_sys_futex+0x10/0x10 [ 694.428691][T16230] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.428747][T16230] do_syscall_64+0x115/0x870 [ 694.428809][T16230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.428854][T16230] RIP: 0033:0x7f1f5139e019 [ 694.428885][T16230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.428923][T16230] RSP: 002b:00007f1f52301028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 694.428960][T16230] RAX: ffffffffffffffda RBX: 00007f1f51625fa0 RCX: 00007f1f5139e019 [ 694.428986][T16230] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 694.429011][T16230] RBP: 00007f1f5143500c R08: 0000000000000000 R09: 0000000000000082 [ 694.429036][T16230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.429060][T16230] R13: 00007f1f51626038 R14: 00007f1f51625fa0 R15: 00007ffd152f3008 [ 694.429112][T16230] [ 698.320637][T16279] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 698.378564][T16279] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 698.480376][T16279] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 698.552863][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2836'. [ 698.577433][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2836'. [ 699.132878][T16303] fuse: Bad value for 'fd' [ 699.503870][T16313] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 701.259435][T16341] macsec1: entered promiscuous mode [ 701.282061][T16341] virt_wifi0: entered promiscuous mode [ 701.636207][T16347] tipc: Failed to remove unknown binding: 66,0,0/0:1817581136/1817581137 [ 701.680260][T16347] tipc: Failed to remove unknown binding: 66,0,0/0:1817581136/1817581137 [ 701.914830][T16357] fuse: Bad value for 'fd' [ 702.077500][T16363] xt_hashlimit: size too large, truncated to 1048576 [ 702.204493][T16370] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 702.740741][T16384] lo: Caught tx_queue_len zero misconfig [ 704.709386][T16412] netlink: 'syz.7.2881': attribute type 1 has an invalid length. [ 704.857186][T16412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 705.508338][T16436] ohci-platform serial8250: error -ENXIO: IRQ index 0 not found [ 706.144864][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 706.144891][ T30] audit: type=1804 audit(1785754104.715:301): pid=16462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2895" name="bus" dev="ramfs" ino=55737 res=1 errno=0 [ 706.236088][ T30] audit: type=1804 audit(1785754104.775:302): pid=16462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2895" name="bus" dev="ramfs" ino=55737 res=1 errno=0 [ 707.139946][T16486] overlayfs: failed to clone upperpath [ 708.363991][T16506] netlink: 'syz.3.2912': attribute type 1 has an invalid length. [ 708.483544][T16511] netlink: 'syz.3.2912': attribute type 10 has an invalid length. [ 708.501986][T16511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2912'. [ 708.566966][T16506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.509717][T16534] fuse: Bad value for 'fd' [ 710.177199][T16558] fuse: fd is not a fuse device [ 711.538865][T16591] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 711.899569][T16603] fuse: fd is not a fuse device [ 714.837895][T16636] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[16638] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[16636] [ 715.817797][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.365625][T16670] sch_tbf: burst 1023 is lower than device lo mtu (1550) ! [ 716.468788][T16672] fuse: fd is not a fuse device [ 716.919641][T16680] fuse: Bad value for 'fd' [ 716.956813][T16681] overlayfs: failed to clone upperpath [ 717.650681][T16700] sch_tbf: burst 1520 is lower than device lo mtu (11337746) ! [ 722.246580][T16744] netlink: 'syz.9.2993': attribute type 10 has an invalid length. [ 723.247751][ T5974] bond0: (slave bond_slave_0): interface is now down [ 723.306249][T16744] tipc: Resetting bearer [ 723.316626][ T5974] bond0: (slave bond_slave_1): interface is now down [ 723.376278][T16744] syz_tun: entered promiscuous mode [ 723.385436][T10564] bond0: (slave bond_slave_0): interface is now down [ 723.402638][T10564] bond0: (slave bond_slave_1): interface is now down [ 723.463065][T10564] bond0: (slave bond_slave_0): interface is now down [ 723.487254][T16744] tipc: Resetting bearer [ 723.502749][T10564] bond0: (slave bond_slave_1): interface is now down [ 723.520946][ T30] audit: type=1804 audit(1785754122.095:303): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3001" name="file0" dev="tmpfs" ino=1866 res=1 errno=0 [ 723.548359][T16744] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 723.549303][T10564] bond0: (slave bond_slave_0): interface is now down [ 723.641619][T10564] bond0: (slave bond_slave_1): interface is now down [ 723.672112][T10564] bond0: (slave syz_tun): interface is now down [ 723.770711][T10564] bond0: now running without any active interface! [ 725.828682][T16782] bond2: entered allmulticast mode [ 725.893057][T16781] bond2: left allmulticast mode [ 726.422059][T16794] bridge2: entered promiscuous mode [ 726.445730][T16794] bridge2: entered allmulticast mode [ 726.777506][T16810] netlink: 'syz.7.3014': attribute type 1 has an invalid length. [ 726.799413][ T30] audit: type=1804 audit(1785754125.375:304): pid=16808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3029" name="bus" dev="ramfs" ino=55225 res=1 errno=0 [ 726.904994][T16810] 8021q: adding VLAN 0 to HW filter on device bond4 [ 726.930081][ T30] audit: type=1804 audit(1785754125.415:305): pid=16808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3029" name="bus" dev="ramfs" ino=55225 res=1 errno=0 [ 726.982636][T16814] netlink: 'syz.7.3014': attribute type 10 has an invalid length. [ 727.005003][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3014'. [ 728.645436][T16830] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.791225][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3024'. [ 730.162204][T16858] netlink: 'syz.1.3034': attribute type 1 has an invalid length. [ 730.334737][T16861] netlink: 'syz.1.3034': attribute type 10 has an invalid length. [ 730.410189][T16858] 8021q: adding VLAN 0 to HW filter on device bond4 [ 730.419114][T16861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3034'. [ 730.628289][T10569] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 730.650868][T16860] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 730.719227][T16861] dummy0: entered promiscuous mode [ 730.812925][T10813] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 730.852029][ T5974] bond4: (slave dummy0): link status up again after 0 ms [ 730.946627][T16861] bond4: (slave dummy0): Removing an active aggregator [ 730.956946][ T5974] bond4: Warning: Found an uninitialized port [ 730.989120][ T5974] bond4: (slave dummy0): link status up again after 0 ms [ 731.012737][T16861] bond4: (slave dummy0): Releasing backup interface [ 731.303113][T16871] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3038'. [ 733.473806][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3047'. [ 733.522208][ T5973] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.543554][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3047'. [ 733.558049][ T5973] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.590693][ T5973] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.626178][ T5973] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.323413][T16934] netlink: 'syz.6.3058': attribute type 1 has an invalid length. [ 736.435094][T16937] netlink: 'syz.6.3058': attribute type 10 has an invalid length. [ 736.514833][T16937] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3058'. [ 736.657198][T16941] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3061'. [ 736.706277][T16934] 8021q: adding VLAN 0 to HW filter on device bond5 [ 736.813294][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'. [ 737.628897][T16961] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3066'. [ 737.656425][T16961] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3066'. [ 737.707261][T16961] bridge0: entered promiscuous mode [ 737.743187][T16961] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3066'. [ 738.295005][T16977] netlink: 'syz.9.3074': attribute type 1 has an invalid length. [ 738.371492][T16983] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3074'. [ 738.636934][T16977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 739.568092][T16983] bond2: (slave bridge2): making interface the new active one [ 739.611400][T16983] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 741.440614][T17000] ref_ctr increment failed for inode: 0x793 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802ab78cc0 [ 742.440150][T17017] overlayfs: failed to clone upperpath [ 744.397612][T17045] netlink: 'syz.1.3091': attribute type 1 has an invalid length. [ 745.568097][T17052] fuse: fd is not a fuse device [ 745.572152][T17055] tmpfs: Unknown parameter 'nr_blhcks' [ 745.630897][ T30] audit: type=1800 audit(1785754144.195:306): pid=17055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3094" name="file0" dev="overlay" ino=2211 res=0 errno=0 [ 745.734657][T17045] 8021q: adding VLAN 0 to HW filter on device bond5 [ 745.784105][T17048] macvlan2: entered promiscuous mode [ 745.802571][T17048] macvlan2: entered allmulticast mode [ 745.816605][T17058] fuse: fd is not a fuse device [ 745.824823][T17048] bond5: entered promiscuous mode [ 745.842113][T17048] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 746.183243][T17048] bond5: left promiscuous mode [ 746.603267][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.618804][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.274356][ T30] audit: type=1804 audit(1785754145.855:307): pid=17070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3100" name="bus" dev="ramfs" ino=57610 res=1 errno=0 [ 747.344724][ T30] audit: type=1804 audit(1785754145.885:308): pid=17070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3100" name="bus" dev="ramfs" ino=57610 res=1 errno=0 [ 747.384437][T17072] bond2: entered allmulticast mode [ 747.728611][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3116'. [ 748.009606][T17087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3104'. [ 749.365528][T17109] fuse: Bad value for 'fd' [ 749.697526][T17113] overlayfs: failed to clone upperpath [ 750.448638][T17126] netlink: 'syz.9.3118': attribute type 1 has an invalid length. [ 750.630305][T17126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 750.774795][T17129] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 750.785613][T17141] fuse: fd is not a fuse device [ 750.989686][T17133] macvlan2: entered promiscuous mode [ 751.027627][T17133] macvlan2: entered allmulticast mode [ 751.072816][T17133] bond3: entered promiscuous mode [ 751.110615][T17133] veth0_to_bond: entered promiscuous mode [ 751.154944][T17133] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 751.266831][T17133] bond3: left promiscuous mode [ 751.288018][T17133] veth0_to_bond: left promiscuous mode [ 751.477998][T17140] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3120'. [ 753.450236][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3133'. [ 753.513793][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3133'. [ 754.050253][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 754.165019][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 754.245850][T10569] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.292086][T10569] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.340257][T10569] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.391922][T10569] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.871734][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3155'. [ 755.990800][T17229] fuse: Bad value for 'fd' [ 756.470796][ T30] audit: type=1804 audit(1785754155.025:309): pid=17242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3159" name="bus" dev="ramfs" ino=56971 res=1 errno=0 [ 756.548728][ T30] audit: type=1804 audit(1785754155.075:310): pid=17242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3159" name="bus" dev="ramfs" ino=56971 res=1 errno=0 [ 759.561514][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3176'. [ 759.651115][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3176'. [ 760.282319][ T24] libceph: connect (1)[c::]:6789 error -101 [ 760.298778][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 760.375910][T17297] ceph: No mds server is up or the cluster is laggy [ 761.606700][T17332] netlink: 'syz.3.3188': attribute type 1 has an invalid length. [ 761.805637][T17332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 761.846732][T17338] overlayfs: failed to clone upperpath [ 761.910926][T17340] macvlan2: entered promiscuous mode [ 762.013170][T17340] macvlan2: entered allmulticast mode [ 762.063257][T17340] bond4: entered promiscuous mode [ 762.102638][T17340] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 762.238525][T17347] fuse: Bad value for 'fd' [ 762.377880][T17340] bond4: left promiscuous mode [ 762.729951][T17336] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 764.223374][T17375] syz.3.3196 (17375) used greatest stack depth: 19056 bytes left [ 764.725021][T17389] netlink: 'syz.1.3203': attribute type 19 has an invalid length. [ 765.697811][T17400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3208'. [ 766.305942][T17412] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3211'. [ 766.397681][T17420] netlink: 'syz.0.3225': attribute type 19 has an invalid length. [ 768.493023][ T30] audit: type=1804 audit(1785754167.005:311): pid=17453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3222" name="bus" dev="ramfs" ino=58235 res=1 errno=0 [ 768.641909][ T30] audit: type=1804 audit(1785754167.195:312): pid=17457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3222" name="bus" dev="ramfs" ino=58235 res=1 errno=0 [ 768.804738][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3226'. [ 768.970883][T17461] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3228'. [ 769.782642][T17471] xt_hashlimit: size too large, truncated to 1048576 [ 771.966951][T17499] netlink: 'syz.0.3242': attribute type 1 has an invalid length. [ 772.050654][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 772.342954][T17499] 8021q: adding VLAN 0 to HW filter on device bond5 [ 772.444231][T17506] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 772.471013][T17509] macvlan2: entered promiscuous mode [ 772.489408][T17509] macvlan2: entered allmulticast mode [ 772.495632][T17509] bond5: entered promiscuous mode [ 772.511264][T17509] veth0_to_bond: entered promiscuous mode [ 772.517974][T17509] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 772.634585][T17509] bond5: left promiscuous mode [ 772.639415][T17509] veth0_to_bond: left promiscuous mode [ 773.040736][T17516] virt_wifi0: entered promiscuous mode [ 773.060852][T17516] macsec2: entered promiscuous mode [ 773.073831][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3245'. [ 773.728725][T17534] netlink: 'syz.3.3251': attribute type 12 has an invalid length. [ 774.489966][T17546] overlayfs: failed to clone upperpath [ 775.333590][T17553] netlink: 'syz.7.3258': attribute type 1 has an invalid length. [ 775.582132][T17553] 8021q: adding VLAN 0 to HW filter on device bond5 [ 775.675638][T17556] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 775.812830][T17558] macvlan2: entered promiscuous mode [ 775.843951][T17558] macvlan2: entered allmulticast mode [ 775.873740][T17558] bond5: entered promiscuous mode [ 775.896246][T17558] veth0_to_bond: entered promiscuous mode [ 775.921022][T17558] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 776.049839][T17558] bond5: left promiscuous mode [ 776.090053][T17558] veth0_to_bond: left promiscuous mode [ 776.541953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.845064][ T30] audit: type=1804 audit(1785754177.415:313): pid=17594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3272" name="bus" dev="ramfs" ino=58449 res=1 errno=0 [ 778.926164][ T30] audit: type=1804 audit(1785754177.455:314): pid=17594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3272" name="bus" dev="ramfs" ino=58449 res=1 errno=0 [ 779.109519][T17599] netlink: 'syz.1.3274': attribute type 10 has an invalid length. [ 779.326898][T17599] syz_tun: entered promiscuous mode [ 779.394422][T17599] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 779.481853][T10820] bond0: (slave syz_tun): interface is now down [ 779.617769][T10820] bond0: now running without any active interface! [ 780.254846][T17622] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 780.528204][T17622] 8021q: adding VLAN 0 to HW filter on device bond6 [ 780.574162][T17629] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 780.825119][T17624] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 780.893390][T17626] macvlan2: entered promiscuous mode [ 780.898739][T17626] macvlan2: entered allmulticast mode [ 780.943578][T17626] bond6: entered promiscuous mode [ 780.948657][T17626] veth0_to_bond: entered promiscuous mode [ 780.955321][T17626] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 781.196978][T17626] bond6: left promiscuous mode [ 781.226000][T17626] veth0_to_bond: left promiscuous mode [ 782.274934][T17652] xt_hashlimit: size too large, truncated to 1048576 [ 783.937137][T17678] netlink: 'syz.6.3295': attribute type 12 has an invalid length. [ 786.467582][T17702] tipc: Started in network mode [ 786.472497][T17702] tipc: Node identity 1000001, cluster identity 4369 [ 786.479180][T17702] tipc: Node number set to 16777217 [ 787.232752][T17702] tipc: New replicast peer: 127.0.0.1 [ 787.297085][T17702] tipc: Enabled bearer , priority 10 [ 790.419528][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 790.425684][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 790.531245][T17769] bridge0: port 1(syz_tun) entered blocking state [ 790.538167][T17769] bridge0: port 1(syz_tun) entered disabled state [ 790.572051][T17769] syz_tun: entered allmulticast mode [ 790.579583][T17769] syz_tun: entered promiscuous mode [ 790.649579][ T30] audit: type=1326 audit(1785754189.195:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17753 comm="syz.6.3319" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cbeb9e019 code=0x0 [ 790.694756][T17759] ceph: No mds server is up or the cluster is laggy [ 790.778012][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 790.784145][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 790.831840][ T30] audit: type=1326 audit(1785754189.355:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17753 comm="syz.6.3319" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbeb9e019 code=0x7ffc0000 [ 790.884669][ T30] audit: type=1326 audit(1785754189.355:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17753 comm="syz.6.3319" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbeb9e019 code=0x7ffc0000 [ 791.045533][ T30] audit: type=1326 audit(1785754189.355:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17753 comm="syz.6.3319" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cbeb5e84e code=0x7ffc0000 [ 791.185329][ T30] audit: type=1326 audit(1785754189.355:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17753 comm="syz.6.3319" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cbeb5e84e code=0x7ffc0000 [ 791.359785][T17781] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3326'. [ 791.405520][ T30] audit: type=1326 audit(1785754189.355:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17753 comm="syz.6.3319" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cbeb5e84e code=0x7ffc0000 [ 791.430790][ T30] audit: type=1326 audit(1785754189.355:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17753 comm="syz.6.3319" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cbeb5e84e code=0x7ffc0000 [ 791.624453][ T30] audit: type=1326 audit(1785754189.355:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17753 comm="syz.6.3319" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cbeb5e84e code=0x7ffc0000 [ 792.118701][T17801] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3330'. [ 792.148017][ T30] audit: type=1326 audit(1785754189.355:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17753 comm="syz.6.3319" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cbeb5e84e code=0x7ffc0000 [ 792.202588][ T30] audit: type=1326 audit(1785754189.355:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17753 comm="syz.6.3319" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cbeb5e84e code=0x7ffc0000 [ 792.704832][T17807] fuse: fd is not a fuse device [ 794.800387][T17838] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3343'. [ 795.724139][T17865] fuse: Bad value for 'fd' [ 796.331044][T17875] fuse: fd is not a fuse device [ 799.463023][T17924] fuse: Bad value for 'fd' [ 801.652397][T17947] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 805.067637][T17970] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 805.096724][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3387'. [ 805.391336][T17976] fuse: fd is not a fuse device [ 806.382737][T18003] netlink: 'syz.0.3399': attribute type 16 has an invalid length. [ 806.418897][T18003] netlink: 'syz.0.3399': attribute type 17 has an invalid length. [ 806.451264][T18003] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 808.024551][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.030896][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.612280][T18005] virt_wifi0: left promiscuous mode [ 815.382327][T10569] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.398647][T10569] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.522527][T10569] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.139744][T10820] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.771942][T18143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3437'. [ 819.617488][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3453'. [ 819.626408][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3453'. [ 820.957207][T18196] fuse: fd is not a fuse device [ 822.085704][T18222] fuse: fd is not a fuse device [ 822.573467][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 822.573492][ T30] audit: type=1326 audit(1785754221.125:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.9.3463" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5139e019 code=0x7fc00000 [ 822.812505][ T30] audit: type=1326 audit(1785754221.345:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.9.3463" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f5139e019 code=0x7fc00000 [ 824.486074][T18263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3477'. [ 824.895366][T18269] tipc: Failed to remove unknown binding: 66,0,0/16777217:4271959683/4271959685 [ 824.923150][T18269] tipc: Failed to remove unknown binding: 66,0,0/16777217:4271959683/4271959684 [ 825.024976][T18269] tipc: Failed to remove unknown binding: 66,0,0/16777217:4271959683/4271959685 [ 825.034043][T18269] tipc: Failed to remove unknown binding: 66,0,0/16777217:4271959683/4271959684 [ 825.625979][T18285] fuse: fd is not a fuse device [ 825.637173][ T30] audit: type=1326 audit(1785754224.165:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.7.3485" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b62d9e019 code=0x0 [ 831.129637][T18333] netlink: 'syz.6.3496': attribute type 16 has an invalid length. [ 831.137669][T18333] netlink: 'syz.6.3496': attribute type 17 has an invalid length. [ 832.843105][T10813] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.852032][T10813] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.167024][T18333] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 835.217510][T10569] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.245511][T10569] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.324933][T10569] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.350126][T10569] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.378143][T10569] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.400202][T10569] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.813948][T18404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3519'. [ 845.419892][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3544'. [ 845.475625][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3544'. [ 845.555960][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3544'. [ 849.117005][T18513] IPv6: NLM_F_REPLACE set, but no existing node found! [ 850.503118][T18533] bond6: (slave ip6gretap1): making interface the new active one [ 850.511815][T18533] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 851.425103][T18552] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3567'. [ 851.854272][T18552] netlink: 'syz.7.3567': attribute type 10 has an invalid length. [ 851.877009][T18552] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3567'. [ 852.392341][T18562] fuse: fd is not a fuse device [ 853.291499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 864.378665][T18691] gadgetfs: bound to dummy_udc driver [ 864.821544][ T7100] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 864.909125][T18707] netlink: 'syz.3.3616': attribute type 4 has an invalid length. [ 864.964823][ C0] gadgetfs: connected [ 864.969218][ T7100] gadgetfs: disconnected [ 865.010925][T18705] bond0: (slave syz_tun): Releasing backup interface [ 865.116189][T18705] bridge0: port 1(syz_tun) entered blocking state [ 865.126430][T18705] bridge0: port 1(syz_tun) entered disabled state [ 865.258984][T18691] gadgetfs: suspended from state 2 [ 866.423667][ T7100] usb 2-1: device not accepting address 24, error -71 [ 867.826527][ T5628] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 867.885754][ T5628] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 867.893643][ T5628] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 867.901719][ T5628] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 867.933909][ T5628] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 869.455648][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.469758][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.644586][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3633'. [ 872.160447][T18807] vlan4: entered promiscuous mode [ 872.165521][T18807] hsr0: entered promiscuous mode [ 872.170672][T18807] vlan4: entered allmulticast mode [ 872.175793][T18807] hsr0: entered allmulticast mode [ 872.180819][T18807] hsr_slave_0: entered allmulticast mode [ 872.186456][T18807] hsr_slave_1: entered allmulticast mode [ 873.304660][T18811] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3644'. [ 874.162986][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3653'. [ 874.186066][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3653'. [ 874.915730][T18841] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[12284] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[18841] [ 875.820859][T18853] fuse: fd is not a fuse device [ 876.775926][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3667'. [ 877.637433][T18882] netlink: 'syz.6.3672': attribute type 10 has an invalid length. [ 877.739249][T18883] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3672'. [ 887.294288][T19011] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 888.873266][T19016] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 888.880606][T19016] overlayfs: failed to set xattr on upper [ 888.886335][T19016] overlayfs: ...falling back to redirect_dir=nofollow. [ 888.893188][T19016] overlayfs: ...falling back to index=off. [ 888.898990][T19016] overlayfs: ...falling back to uuid=null. [ 888.988125][T19017] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 893.269460][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3722'. [ 893.503835][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3722'. [ 893.607757][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3722'. [ 893.692221][T19049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 894.056225][T19057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.075057][T19057] bond4: (slave bond0): Enslaving as an active interface with a down link [ 895.069128][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3732'. [ 896.019303][T19092] netlink: 332 bytes leftover after parsing attributes in process `syz.7.3734'. [ 896.717617][ T30] audit: type=1326 audit(1785754295.208:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.0.3739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 896.898100][ T30] audit: type=1326 audit(1785754295.208:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.0.3739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 897.265410][ T30] audit: type=1326 audit(1785754295.208:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.0.3739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 897.394778][ T30] audit: type=1326 audit(1785754295.208:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.0.3739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 897.426485][ T30] audit: type=1326 audit(1785754295.208:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.0.3739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 898.138034][ T30] audit: type=1326 audit(1785754295.208:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.0.3739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 898.170513][ T30] audit: type=1326 audit(1785754295.208:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.0.3739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 898.196434][ T30] audit: type=1326 audit(1785754295.208:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.0.3739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 898.277325][ T30] audit: type=1326 audit(1785754295.208:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.0.3739" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 898.730142][T19127] bond7 (unregistering): Released all slaves [ 899.398174][T19143] xt_hashlimit: size too large, truncated to 1048576 [ 900.138842][T19150] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 900.660983][T19150] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 901.626658][T19169] fuse: fd is not a fuse device [ 902.051089][ T30] audit: type=1326 audit(1785754300.609:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.0.3754" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 903.057763][ T30] audit: type=1326 audit(1785754300.609:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.0.3754" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 903.089512][ T30] audit: type=1326 audit(1785754300.609:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.0.3754" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 903.115057][ T30] audit: type=1326 audit(1785754300.609:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.0.3754" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 903.377743][ T30] audit: type=1326 audit(1785754300.609:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.0.3754" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa3daf9e019 code=0x7ffc0000 [ 903.465540][ T30] audit: type=1326 audit(1785754300.949:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.0.3754" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3daf9dd82 code=0x7ffc0000 [ 903.510819][ T30] audit: type=1326 audit(1785754301.979:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19160 comm="syz.0.3754" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3daf9dd82 code=0x7ffc0000 [ 903.615511][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3761'. [ 903.629880][T19185] ip6gre1: entered promiscuous mode [ 903.635121][T19185] ip6gre1: entered allmulticast mode [ 903.968389][T19185] netlink: 'syz.7.3761': attribute type 6 has an invalid length. [ 903.976169][T19185] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3761'. [ 905.662270][T19207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 907.065261][T19218] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 907.918581][T19218] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 907.981981][T19227] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 912.951201][T19287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3793'. [ 913.125575][T19287] tipc: Enabling of bearer rejected, already enabled [ 915.687995][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3801'. [ 915.749349][T19309] fuse: fd is not a fuse device [ 916.624467][T19319] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 920.817518][T18047] kernel write not supported for file [eventfd] (pid: 18047 comm: kworker/1:6) [ 921.342379][T19361] bond5 (unregistering): Released all slaves [ 929.409691][ T30] audit: type=1326 audit(1785754327.950:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19444 comm="syz.9.3843" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5139e019 code=0x7ffc0000 [ 929.711932][ T30] audit: type=1326 audit(1785754327.950:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19444 comm="syz.9.3843" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5139e019 code=0x7ffc0000 [ 929.986550][ T30] audit: type=1326 audit(1785754327.950:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19444 comm="syz.9.3843" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5139e019 code=0x7ffc0000 [ 930.012526][ T30] audit: type=1326 audit(1785754327.950:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19444 comm="syz.9.3843" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5139e019 code=0x7ffc0000 [ 930.037869][ T30] audit: type=1326 audit(1785754328.020:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19444 comm="syz.9.3843" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5139e019 code=0x7ffc0000 [ 930.063888][ T30] audit: type=1326 audit(1785754328.020:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19444 comm="syz.9.3843" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1f5139e019 code=0x7ffc0000 [ 930.089101][ T30] audit: type=1326 audit(1785754328.460:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19444 comm="syz.9.3843" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5139e019 code=0x7ffc0000 [ 930.153326][ T30] audit: type=1326 audit(1785754328.460:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19444 comm="syz.9.3843" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5139e019 code=0x7ffc0000 [ 930.878944][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.885315][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.897346][ T30] audit: type=1326 audit(1785754328.460:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19444 comm="syz.9.3843" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5139e019 code=0x7ffc0000 [ 931.000239][ T30] audit: type=1326 audit(1785754329.550:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19444 comm="syz.9.3843" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1f5139e019 code=0x7ffc0000 [ 931.163103][T19448] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 932.292855][T19474] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3849'. [ 934.876439][T19508] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 935.536652][T19513] cgroup: Need name or subsystem set [ 936.120256][T19524] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3867'. [ 937.570804][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3866'. [ 938.443257][T19513] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3863'. [ 938.522535][T19513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 941.737424][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'. [ 943.961861][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3886'. [ 951.019792][T19673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3910'. [ 951.057576][T19673] tipc: Enabling of bearer rejected, failed to enable media [ 952.663764][T19687] fuse: fd is not a fuse device [ 952.826545][T19689] netlink: 'syz.7.3913': attribute type 2 has an invalid length. [ 953.938104][T19698] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 954.006883][T19698] batman_adv: batadv0: Adding interface: gretap2 [ 954.013269][T19698] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.038715][T19698] batman_adv: batadv0: Interface activated: gretap2 [ 954.173114][T19704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3920'. [ 954.704144][T19709] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 955.132982][T19717] xt_TPROXY: Can be used only with -p tcp or -p udp [ 956.310503][T19728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3927'. [ 956.327234][T19728] vlan3: entered promiscuous mode [ 956.332277][T19728] ip6gretap0: entered promiscuous mode [ 958.650257][T19752] fuse: fd is not a fuse device [ 960.881496][T19761] fuse: fd is not a fuse device [ 961.032149][T19764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3938'. [ 961.846315][T19777] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 967.837797][T19842] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 971.455661][T19884] netlink: 'syz.9.3974': attribute type 2 has an invalid length. [ 971.555481][T19882] fuse: fd is not a fuse device [ 971.962862][T19891] fuse: Bad value for 'fd' [ 973.587798][T19911] netlink: 'syz.1.3982': attribute type 10 has an invalid length. [ 973.624985][T19911] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 973.720665][T19915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.060315][T19963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 982.640317][T19998] fuse: fd is not a fuse device [ 983.093122][T20030] fuse: Bad value for 'fd' [ 984.740001][T20055] fuse: fd is not a fuse device [ 986.661154][T20076] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4019'. [ 986.749766][T20072] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4019'. [ 986.771028][T20066] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4019'. [ 988.959781][T20109] netdevsim netdevsim6: Firmware load for '../file0/file0' refused, path contains '..' component [ 989.604090][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4036'. [ 989.633753][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4036'. [ 990.723836][T20130] tipc: Enabled bearer , priority 10 [ 990.774117][T20130] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4039'. [ 990.897971][T20130] tipc: Enabling of bearer rejected, already enabled [ 991.099358][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4043'. [ 991.447209][T20153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4044'. [ 991.625626][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4047'. [ 992.893085][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.899439][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.776652][T20165] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.301223][T20199] overlayfs: failed to clone upperpath [ 997.349497][T20204] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1002.235625][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4072'. [ 1002.246579][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4072'. [ 1002.255797][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4072'. [ 1002.265409][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4072'. [ 1002.275395][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4072'. [ 1002.285194][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4072'. [ 1002.382406][T20241] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4071'. [ 1002.814221][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4071'. [ 1005.956341][T20210] event trace: Could not enable event p [ 1006.221008][T20274] ip6tnl0: Master is either lo or non-ether device [ 1007.387833][T20288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1008.836323][T20305] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4090'. [ 1008.846381][T20305] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4090'. [ 1008.857888][T20305] bridge0: left promiscuous mode [ 1008.862909][T20305] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4090'. [ 1010.430332][T20320] fuse: fd is not a fuse device [ 1017.794641][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 1017.805459][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 1017.814631][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 1017.823799][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 1017.833162][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 1021.257458][T20394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4110'. [ 1038.664775][ T5628] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1038.676041][ T5628] CPU: 1 UID: 0 PID: 5628 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.676106][ T5628] Tainted: [L]=SOFTLOCKUP [ 1038.676119][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1038.676145][ T5628] Workqueue: hci1 hci_rx_work [ 1038.676202][ T5628] Call Trace: [ 1038.676216][ T5628] [ 1038.676231][ T5628] dump_stack_lvl+0x100/0x190 [ 1038.676278][ T5628] sysfs_warn_dup.cold+0x1c/0x28 [ 1038.676337][ T5628] sysfs_create_dir_ns+0x24b/0x2b0 [ 1038.676395][ T5628] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1038.676455][ T5628] ? find_held_lock+0x2b/0x80 [ 1038.676525][ T5628] ? kobject_add_internal+0x25f/0x930 [ 1038.676571][ T5628] ? kobject_add_internal+0x25f/0x930 [ 1038.676624][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.676686][ T5628] ? do_raw_spin_unlock+0x145/0x1e0 [ 1038.676755][ T5628] kobject_add_internal+0x2c8/0x930 [ 1038.676810][ T5628] kobject_add+0x16a/0x1e0 [ 1038.676852][ T5628] ? __pfx_kobject_add+0x10/0x10 [ 1038.676889][ T5628] ? class_to_subsys+0x10f/0x150 [ 1038.676936][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.676984][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.677030][ T5628] ? kobject_put+0xb9/0x640 [ 1038.677063][ T5628] ? _raw_spin_unlock+0x28/0x50 [ 1038.677120][ T5628] device_add+0x294/0x1970 [ 1038.677187][ T5628] ? __pfx_dev_set_name+0x10/0x10 [ 1038.677230][ T5628] ? __pfx_device_add+0x10/0x10 [ 1038.677293][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.677339][ T5628] ? mgmt_send_event_skb+0x2fb/0x460 [ 1038.677404][ T5628] hci_conn_add_sysfs+0x1a3/0x260 [ 1038.677465][ T5628] le_conn_complete_evt+0x11eb/0x1f60 [ 1038.677529][ T5628] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1038.677577][ T5628] ? hci_event_packet+0x186/0xcd0 [ 1038.677623][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.677682][ T5628] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1038.677736][ T5628] ? skb_pull_data+0x15f/0x1e0 [ 1038.677781][ T5628] hci_le_meta_evt+0x34a/0x5f0 [ 1038.677835][ T5628] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1038.677894][ T5628] hci_event_packet+0x51c/0xcd0 [ 1038.677950][ T5628] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1038.678005][ T5628] ? __pfx_hci_event_packet+0x10/0x10 [ 1038.678057][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.678106][ T5628] ? kcov_remote_start+0x384/0x670 [ 1038.678147][ T5628] ? lockdep_hardirqs_on+0x78/0x100 [ 1038.678199][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.678256][ T5628] hci_rx_work+0x451/0xfc0 [ 1038.678314][ T5628] process_one_work+0xa23/0x1940 [ 1038.678373][ T5628] ? __pfx_process_one_work+0x10/0x10 [ 1038.678409][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.678472][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.678526][ T5628] worker_thread+0x5ef/0xe50 [ 1038.678583][ T5628] ? kthread+0x13a/0x450 [ 1038.678640][ T5628] ? __pfx_worker_thread+0x10/0x10 [ 1038.678676][ T5628] kthread+0x370/0x450 [ 1038.678735][ T5628] ? __pfx_kthread+0x10/0x10 [ 1038.678798][ T5628] ret_from_fork+0x72b/0xd50 [ 1038.678852][ T5628] ? __pfx_ret_from_fork+0x10/0x10 [ 1038.678910][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.678956][ T5628] ? __switch_to+0x800/0x10f0 [ 1038.679017][ T5628] ? __switch_to_asm+0x39/0x70 [ 1038.679070][ T5628] ? __pfx_kthread+0x10/0x10 [ 1038.679134][ T5628] ret_from_fork_asm+0x1a/0x30 [ 1038.679212][ T5628] [ 1038.680021][ T5628] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1039.105551][ T5628] Bluetooth: hci1: failed to register connection device [ 1046.092812][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 1046.092838][ T30] audit: type=1804 audit(1785754443.757:468): pid=20595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4168" name="file0" dev="tmpfs" ino=2492 res=1 errno=0 [ 1054.163285][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.186301][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.918691][T20656] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5621] was attempted by " [ 1058.238848][T20674] fuse: fd is not a fuse device [ 1070.511939][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1070.552238][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1070.565283][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1070.591633][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1070.599433][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1073.287366][ T5644] Bluetooth: hci5: command tx timeout [ 1074.458725][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4221'. [ 1074.724796][T20022] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.482830][ T5644] Bluetooth: hci5: command tx timeout [ 1075.583305][T20774] bridge6: port 1(erspan0) entered blocking state [ 1075.639796][T20774] bridge6: port 1(erspan0) entered disabled state [ 1075.676836][T20774] erspan0: entered allmulticast mode [ 1075.734735][T20774] erspan0: entered promiscuous mode [ 1075.809690][T20774] bridge6: port 1(erspan0) entered blocking state [ 1075.816366][T20774] bridge6: port 1(erspan0) entered forwarding state [ 1077.564113][ T5644] Bluetooth: hci5: command tx timeout [ 1077.783829][T20022] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.718089][ T5644] Bluetooth: hci5: command tx timeout [ 1082.750423][T20875] tipc: Failed to remove unknown binding: 66,0,0/65793:1692541933/1692541935 [ 1082.759336][T20875] tipc: Failed to remove unknown binding: 66,0,0/65793:1692541933/1692541934 [ 1082.773648][T20875] tipc: Failed to remove unknown binding: 66,0,0/65793:1692541933/1692541935 [ 1082.783912][T20875] tipc: Failed to remove unknown binding: 66,0,0/65793:1692541933/1692541934 [ 1083.422246][T20022] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.768079][T20882] bridge0: port 3(syz_tun) entered disabled state [ 1083.774749][T20882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.638299][T20893] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4262'. [ 1085.000785][T20894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.200169][T20022] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.476285][T20731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.483473][T20731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.490735][T20731] bridge_slave_0: entered allmulticast mode [ 1085.498810][T20731] bridge_slave_0: entered promiscuous mode [ 1085.507512][T20731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.514646][T20731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.521856][T20731] bridge_slave_1: entered allmulticast mode [ 1085.530402][T20731] bridge_slave_1: entered promiscuous mode [ 1085.642668][T20731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.656434][T20731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.698251][T20731] team0: Port device team_slave_0 added [ 1085.707078][T20731] team0: Port device team_slave_1 added [ 1085.828278][T20731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.835316][T20731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.882470][T20731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.202020][T20928] netlink: 'syz.9.4269': attribute type 4 has an invalid length. [ 1086.277343][T20731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.284760][T20731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.311063][T20731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.374502][T20731] hsr_slave_0: entered promiscuous mode [ 1090.381416][T20731] hsr_slave_1: entered promiscuous mode [ 1090.388077][T20731] debugfs: 'hsr0' already exists in 'hsr' [ 1090.393903][T20731] Cannot create hsr debugfs directory [ 1091.119354][T20979] netlink: 'syz.7.4282': attribute type 1 has an invalid length. [ 1091.322888][T20979] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1092.008130][T20982] bond5: (slave veth0_to_bond): Releasing backup interface [ 1092.822560][T20982] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1092.844881][T21010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4290'. [ 1092.863154][T21010] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4290'. [ 1093.440951][ T30] audit: type=1800 audit(1785754491.899:469): pid=20995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4284" name="bus" dev="ramfs" ino=67244 res=0 errno=0 [ 1093.475774][T20978] bond6: entered promiscuous mode [ 1093.480973][T20978] bond6: entered allmulticast mode [ 1103.240148][T20022] bridge_slave_1: left allmulticast mode [ 1103.251516][T20022] bridge_slave_1: left promiscuous mode [ 1103.258794][T20022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.998341][T20022] bridge_slave_0: left allmulticast mode [ 1104.725479][T20022] bridge_slave_0: left promiscuous mode [ 1104.733411][T20022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.870080][T21114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4314'. [ 1105.133262][T20022] batman_adv: batadv0: Interface deactivated: gretap2 [ 1107.756842][T20022] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1108.027328][T20022] batman_adv: batadv0: Removing interface: gretap2 [ 1108.542903][T20022] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1110.300233][T20022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.486692][T20022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.497479][T20022] bond0 (unregistering): Released all slaves [ 1110.656603][T20022] bond1 (unregistering): Released all slaves [ 1110.706735][T20022] bond2 (unregistering): (slave veth3): Releasing active interface [ 1111.107291][T20022] bond2 (unregistering): Released all slaves [ 1111.160200][T20022] bond3 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1111.483595][T20022] bond3 (unregistering): Released all slaves [ 1111.504702][T20022] bond4 (unregistering): Released all slaves [ 1111.522401][T20022] bond5 (unregistering): Released all slaves [ 1111.707726][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4309'. [ 1112.279184][T21122] bridge3: port 1(veth9) entered blocking state [ 1112.285632][T21122] bridge3: port 1(veth9) entered disabled state [ 1112.292021][T21122] veth9: entered allmulticast mode [ 1112.298942][T21122] veth9: entered promiscuous mode [ 1112.738827][T21127] bridge3: port 2(veth11) entered blocking state [ 1112.745377][T21127] bridge3: port 2(veth11) entered disabled state [ 1112.751896][T21127] veth11: entered allmulticast mode [ 1112.759037][T21127] veth11: entered promiscuous mode [ 1112.777834][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1115.234133][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.342890][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.404945][T18012] IPVS: starting estimator thread 0... [ 1115.418701][T21191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4328'. [ 1115.533745][T21191] tipc: Enabling of bearer rejected, already enabled [ 1115.577369][T21199] netlink: 'syz.7.4329': attribute type 1 has an invalid length. [ 1115.596734][T21195] IPVS: using max 22 ests per chain, 52800 per kthread [ 1115.811295][T21202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4329'. [ 1115.867325][T21202] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1115.991296][T21201] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1116.351476][ T5801] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1116.488209][ T5974] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1117.281683][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1119.383570][T21246] xt_CT: No such helper "netbios-ns" [ 1121.919942][T21285] fuse: Bad value for 'fd' [ 1128.736622][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1128.747547][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1128.757946][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1128.765978][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1129.135221][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1129.572038][T21379] netlink: 'syz.9.4369': attribute type 1 has an invalid length. [ 1130.829693][T20022] hsr_slave_0: left promiscuous mode [ 1131.320124][T20022] hsr_slave_1: left promiscuous mode [ 1131.333999][T20022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.653723][T20022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.351473][ T5628] Bluetooth: hci4: command tx timeout [ 1133.606444][T20022] team0 (unregistering): Port device team_slave_1 removed [ 1134.226869][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1134.234711][T21366] tipc: Enabling of bearer rejected, failed to enable media [ 1134.581338][ T5628] Bluetooth: hci4: command tx timeout [ 1138.315935][ T5628] Bluetooth: hci4: command tx timeout [ 1140.859172][ T5628] Bluetooth: hci4: command tx timeout [ 1141.460378][T21483] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4391'. [ 1144.522748][T21502] xt_CT: No such helper "netbios-ns" [ 1144.766254][T21510] fuse: fd is not a fuse device [ 1145.213414][T21517] fuse: fd is not a fuse device [ 1145.221390][T21517] fuse: fd is not a fuse device [ 1146.422261][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1149.311065][T21575] xt_CT: No such helper "netbios-ns" [ 1149.946418][T21588] CIFS: Attempting to mount //127.0.0.1/share [ 1151.202876][T21588] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1151.347940][T21588] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1151.746816][T20022] IPVS: stop unused estimator thread 0... [ 1152.132612][T21363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.147615][T21363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.155521][T21363] bridge_slave_0: entered allmulticast mode [ 1152.164059][T21363] bridge_slave_0: entered promiscuous mode [ 1152.217150][T21363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.245550][T21363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.271382][T21363] bridge_slave_1: entered allmulticast mode [ 1152.355437][T21363] bridge_slave_1: entered promiscuous mode [ 1152.567078][T21363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.634650][T21363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.818931][T21363] team0: Port device team_slave_0 added [ 1155.965900][T21648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4424'. [ 1156.059417][T21363] team0: Port device team_slave_1 added [ 1156.568527][T21363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.575653][T21363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.601824][T21363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.615008][T21363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.621977][T21363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.685610][T21363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.851802][T21363] hsr_slave_0: entered promiscuous mode [ 1156.859672][T21363] hsr_slave_1: entered promiscuous mode [ 1156.866527][T21363] debugfs: 'hsr0' already exists in 'hsr' [ 1156.872362][T21363] Cannot create hsr debugfs directory [ 1158.072968][T21694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4437'. [ 1160.031011][T20022] bridge_slave_1: left allmulticast mode [ 1160.036778][T20022] bridge_slave_1: left promiscuous mode [ 1160.042597][T20022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.845297][T20022] bridge_slave_0: left allmulticast mode [ 1160.861087][T20022] bridge_slave_0: left promiscuous mode [ 1160.870348][T20022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.839530][T20022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.179186][T21742] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4431'. [ 1162.514589][T20022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.076074][T21749] Line length is too long: Should be less than 4094 [ 1163.144945][T20022] bond0 (unregistering): Released all slaves [ 1166.021613][T21363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1166.705152][T21784] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4442'. [ 1166.744672][T21363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1166.761958][T21363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1167.403498][T21363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1169.147207][T20022] hsr_slave_0: left promiscuous mode [ 1169.559308][T20022] hsr_slave_1: left promiscuous mode [ 1169.565462][T20022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.620943][T20022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.696325][T20022] team0 (unregistering): Port device team_slave_1 removed [ 1171.020446][T20022] team0 (unregistering): Port device team_slave_0 removed [ 1171.428621][T21363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1171.518647][T21363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1171.548101][T21363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1171.685938][T21363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1172.953227][T21363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.978416][T21363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.998773][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.005991][T10820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1173.052438][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.059643][T10820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.355705][T21879] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4454'. [ 1174.511268][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4458'. [ 1174.585130][T21363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.917698][T21915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4457'. [ 1176.309311][T21363] veth0_vlan: entered promiscuous mode [ 1176.324020][T21363] veth1_vlan: entered promiscuous mode [ 1176.413442][T21363] veth0_macvtap: entered promiscuous mode [ 1176.425875][T21363] veth1_macvtap: entered promiscuous mode [ 1176.533600][T21363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1176.557787][T21363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1176.630548][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.637500][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.895556][T10564] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.921487][ T5801] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.524115][T10824] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.542027][T10824] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.604154][T10824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.647000][T10824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.575572][T10813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.639195][T10813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.994086][T22011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4471'. [ 1190.188023][T22080] loop5: detected capacity change from 0 to 512 [ 1196.842872][T22113] Process accounting resumed [ 1198.606851][T22111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4485'. [ 1200.412078][T18027] IPVS: starting estimator thread 0... [ 1200.551599][T22148] IPVS: using max 22 ests per chain, 52800 per kthread [ 1200.744641][T22143] fuse: fd is not a fuse device [ 1201.824844][T22154] tc_dump_action: action bad kind [ 1201.947376][T22157] loop5: detected capacity change from 0 to 512 [ 1201.982820][T22157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1202.081172][T22164] 9p: Bad value for 'wfdno' [ 1202.091961][T22157] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 1202.136487][T22157] System zones: 0-2, 18-18, 34-34 [ 1202.160139][T22157] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1202.181865][T22157] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.4504: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1202.259132][T22157] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 1202.259717][T22157] EXT4-fs error (device loop5): ext4_quota_enable:7234: comm syz.5.4504: Bad quota inode: 4, type: 1 [ 1202.291331][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1202.297777][ C1] EXT4-fs (loop5): last error at time 1785754600: ext4_ext_check_inode:521: inode 4 [ 1202.350463][T22157] loop5: lost filesystem error report for type 5 error -117 [ 1202.352264][T22157] EXT4-fs warning (device loop5): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1202.425376][T22157] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1202.438274][T22157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1203.592505][T21363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.219024][T22193] loop5: detected capacity change from 0 to 4096 [ 1204.891947][T22193] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1205.235002][T22193] ntfs3(loop5): Failed to load $Extend (-22). [ 1205.241188][T22193] ntfs3(loop5): Failed to initialize $Extend. [ 1206.379866][T22239] loop5: detected capacity change from 0 to 256 [ 1206.409873][T22239] exfat: Deprecated parameter 'utf8' [ 1206.520663][T22239] exfat: Deprecated parameter 'namecase' [ 1206.526363][T22239] exfat: Deprecated parameter 'utf8' [ 1206.558882][T22239] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1207.863081][T22239] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 1208.292029][T22244] netlink: 'syz.0.4520': attribute type 1 has an invalid length. [ 1209.956823][T22267] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 1210.009502][T22298] fuse: fd is not a fuse device [ 1210.686361][ T5628] Bluetooth: hci3: unexpected event for opcode 0x042c [ 1211.537049][T22244] bond7: (slave bridge5): Enslaving as a backup interface with a down link [ 1218.288732][T22378] netlink: 182 bytes leftover after parsing attributes in process `syz.3.4556'. [ 1221.295626][ T30] audit: type=1326 audit(1785754619.887:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22386 comm="syz.5.4559" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46a359e019 code=0x0 [ 1222.691471][T22413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1225.868384][T22436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.877314][T22436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.323402][T22469] fuse: Bad value for 'fd' [ 1234.451893][T22502] virtio-fs: tag not found [ 1236.141268][T22519] bridge0: port 1(macvlan2) entered blocking state [ 1236.147957][T22519] bridge0: port 1(macvlan2) entered disabled state [ 1236.155122][T22519] macvlan2: entered allmulticast mode [ 1236.180694][T22519] ip6gretap0: entered allmulticast mode [ 1236.203169][T22519] macvlan2: entered promiscuous mode [ 1236.772343][T22528] usb3503 0-0008: unknown mode is requested [ 1236.778591][T22528] usb3503 0-0008: usb3503_probe: probed in standby mode [ 1236.787340][T22528] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 1238.098842][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.105204][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.904729][T22562] loop5: detected capacity change from 0 to 32768 [ 1239.924428][T22562] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4604 (22562) [ 1241.324666][T22562] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1241.334997][T22562] BTRFS info (device loop5): using sha256 checksum algorithm [ 1242.131550][T22562] BTRFS info (device loop5): enabling ssd optimizations [ 1242.138586][T22562] BTRFS info (device loop5): turning on sync discard [ 1242.145340][T22562] BTRFS info (device loop5): enabling free space tree [ 1242.152610][T22562] BTRFS info (device loop5): use zlib compression, level 3 [ 1243.609088][T21363] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1246.046078][T22623] hub 8-0:1.0: USB hub found [ 1246.053081][T22623] hub 8-0:1.0: 1 port detected [ 1247.251309][T22636] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1249.328156][T22640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1249.340248][T22640] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1251.506089][T21254] Process accounting resumed [ 1251.537941][T22668] Process accounting resumed [ 1255.845310][T22693] netlink: 'syz.1.4643': attribute type 4 has an invalid length. [ 1256.660947][ T5644] Bluetooth: hci4: command 0x0406 tx timeout [ 1257.459695][T22717] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1260.406220][ T30] audit: type=1326 audit(1785754658.999:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22736 comm="syz.3.4654" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83119e019 code=0x7ffc0000 [ 1260.495282][ T30] audit: type=1326 audit(1785754658.999:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22736 comm="syz.3.4654" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83119e019 code=0x7ffc0000 [ 1260.561226][T18044] libceph: connect (1)[c::]:6789 error -101 [ 1260.567502][T18044] libceph: mon0 (1)[c::]:6789 connect error [ 1260.602568][ T30] audit: type=1326 audit(1785754658.999:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22736 comm="syz.3.4654" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83119e019 code=0x7ffc0000 [ 1260.675849][ T30] audit: type=1326 audit(1785754658.999:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22736 comm="syz.3.4654" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83119e019 code=0x7ffc0000 [ 1260.731093][ T30] audit: type=1326 audit(1785754658.999:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22736 comm="syz.3.4654" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fc83119e019 code=0x7ffc0000 [ 1260.758930][ T30] audit: type=1326 audit(1785754658.999:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22736 comm="syz.3.4654" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83119e019 code=0x7ffc0000 [ 1260.784791][ T30] audit: type=1326 audit(1785754658.999:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22736 comm="syz.3.4654" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83119e019 code=0x7ffc0000 [ 1260.816349][ T30] audit: type=1326 audit(1785754658.999:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22736 comm="syz.3.4654" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83119e019 code=0x7ffc0000 [ 1260.842672][T18012] libceph: connect (1)[c::]:6789 error -101 [ 1260.849839][T18012] libceph: mon0 (1)[c::]:6789 connect error [ 1260.893711][ T30] audit: type=1326 audit(1785754658.999:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22736 comm="syz.3.4654" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc83119dd82 code=0x7ffc0000 [ 1260.919525][ T30] audit: type=1326 audit(1785754658.999:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22736 comm="syz.3.4654" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc83119de17 code=0x7ffc0000 [ 1260.967970][T22738] ceph: No mds server is up or the cluster is laggy [ 1261.404130][T18012] libceph: connect (1)[c::]:6789 error -101 [ 1261.477086][T18012] libceph: mon0 (1)[c::]:6789 connect error [ 1264.291455][T22761] bridge0: port 3(macvlan2) entered blocking state [ 1264.298109][T22761] bridge0: port 3(macvlan2) entered disabled state [ 1264.304796][T22761] macvlan2: entered allmulticast mode [ 1264.310181][T22761] ip6gretap0: entered allmulticast mode [ 1264.349987][T22761] macvlan2: entered promiscuous mode [ 1267.581970][T22809] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4661'. [ 1271.031126][T22809] bridge5: port 1(erspan0) entered blocking state [ 1271.037903][T22809] bridge5: port 1(erspan0) entered disabled state [ 1271.048815][T22809] erspan0: entered allmulticast mode [ 1271.077492][T22809] erspan0: entered promiscuous mode [ 1274.261684][T22856] loop5: detected capacity change from 0 to 16 [ 1274.274501][T22856] erofs (device loop5): mounted with root inode @ nid 36. [ 1274.471223][ T5628] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1274.502843][T22856] erofs (device loop5): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 1274.517503][T22856] erofs (device loop5): read error -117 @ 1 of nid 89 [ 1274.856144][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 1274.856170][ T30] audit: type=1800 audit(1785754673.130:579): pid=22856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4674" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1279.552343][T22889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4679'. [ 1280.736246][T22906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1280.743565][T22906] IPv6: NLM_F_CREATE should be set when creating new route [ 1304.996711][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.003058][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.944943][T20736] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1305.980572][T20736] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1305.995901][T20736] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1306.008404][T20736] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1306.018825][T20736] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1306.199483][ T5628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1306.289070][ T5628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1306.297954][ T5628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1306.308708][ T5628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1306.317812][ T5628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1306.454216][T20736] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1306.465972][T20736] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1306.473912][T20736] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1306.481996][T20736] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1306.489789][T20736] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1306.847247][T20736] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1307.101504][T22957] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1307.119218][T22957] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1307.137340][T22957] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1307.178316][T22957] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1307.192308][T22957] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1307.207487][T22957] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1307.225493][T22957] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1307.259603][T22957] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1307.269326][T22957] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1307.278340][T22957] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1307.285788][T22957] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1307.300324][T22957] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1307.397795][T20736] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1307.662339][T22959] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1308.270395][T22959] Bluetooth: hci5: command tx timeout [ 1308.407755][T22959] Bluetooth: hci7: command tx timeout [ 1308.621818][T22959] Bluetooth: hci8: command tx timeout [ 1309.487758][T22959] Bluetooth: hci11: command tx timeout [ 1309.495379][T22959] Bluetooth: hci10: command tx timeout [ 1310.021637][ T5628] Bluetooth: hci9: command tx timeout [ 1310.580480][ T5628] Bluetooth: hci5: command tx timeout [ 1310.753383][ T5628] Bluetooth: hci7: command tx timeout [ 1310.761484][ T5628] Bluetooth: hci8: command tx timeout [ 1311.236150][T20313] tipc: Resetting bearer [ 1311.705714][T22959] Bluetooth: hci10: command tx timeout [ 1311.705730][ T5628] Bluetooth: hci11: command tx timeout [ 1311.725493][T20313] bond0: (slave syz_tun): Releasing backup interface [ 1311.856921][T20313] tipc: Resetting bearer [ 1311.863461][T20313] tipc: Disabling bearer [ 1312.074926][ T5628] Bluetooth: hci9: command tx timeout [ 1312.327578][T20170] syz_tun (unregistering): left allmulticast mode [ 1312.334028][T20170] syz_tun (unregistering): left promiscuous mode [ 1312.340400][T20170] bridge0: port 1(syz_tun) entered disabled state [ 1312.676137][ T5628] Bluetooth: hci5: command tx timeout [ 1312.765020][ T5628] Bluetooth: hci8: command tx timeout [ 1312.770472][ T5628] Bluetooth: hci7: command tx timeout [ 1313.203105][T16187] tipc: Resetting bearer [ 1313.359334][T16187] syz_tun (unregistering): left allmulticast mode [ 1313.365782][T16187] syz_tun (unregistering): left promiscuous mode [ 1313.372195][T16187] bridge0: port 3(syz_tun) entered disabled state [ 1313.496774][T16187] tipc: Disabling bearer [ 1313.735409][ T5628] Bluetooth: hci11: command tx timeout [ 1313.790100][ T5628] Bluetooth: hci10: command tx timeout [ 1313.846619][T12592] syz_tun (unregistering): left allmulticast mode [ 1313.857099][T12592] bridge0: port 1(syz_tun) entered disabled state [ 1314.229166][ T5628] Bluetooth: hci9: command tx timeout [ 1314.774899][ T5628] Bluetooth: hci5: command tx timeout [ 1314.833518][ T5628] Bluetooth: hci8: command tx timeout [ 1314.841217][ T5628] Bluetooth: hci7: command tx timeout [ 1315.293473][T22941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.303827][T22941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.311329][T22941] bridge_slave_0: entered allmulticast mode [ 1315.319774][T22941] bridge_slave_0: entered promiscuous mode [ 1315.366936][T22941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.380779][T22941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.388700][T22941] bridge_slave_1: entered allmulticast mode [ 1315.397151][T22941] bridge_slave_1: entered promiscuous mode [ 1315.539703][T22935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.547226][T22935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.554453][T22935] bridge_slave_0: entered allmulticast mode [ 1315.562278][T22935] bridge_slave_0: entered promiscuous mode [ 1315.795021][ T5628] Bluetooth: hci11: command tx timeout [ 1315.800566][T22959] Bluetooth: hci10: command tx timeout [ 1315.840634][T22935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.847851][T22935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.857313][T22935] bridge_slave_1: entered allmulticast mode [ 1315.864987][T22935] bridge_slave_1: entered promiscuous mode [ 1315.914824][T22941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.939822][T22941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.070065][T22941] team0: Port device team_slave_0 added [ 1316.079593][T22941] team0: Port device team_slave_1 added [ 1316.117121][T22941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.124097][T22941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.157631][T22941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.176664][T22935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.205850][T22935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.222005][T22941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.229905][T22941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.257279][T22941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.302264][T22959] Bluetooth: hci9: command tx timeout [ 1316.408351][T22935] team0: Port device team_slave_0 added [ 1316.436774][T22941] hsr_slave_0: entered promiscuous mode [ 1316.443795][T22941] hsr_slave_1: entered promiscuous mode [ 1316.451650][T22941] debugfs: 'hsr0' already exists in 'hsr' [ 1316.457428][T22941] Cannot create hsr debugfs directory [ 1316.530659][T22935] team0: Port device team_slave_1 added [ 1318.289382][T22935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.298275][T22935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.324274][T22935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.439632][T22935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.446821][T22935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.472812][T22935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.581083][T22954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.588267][T22954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.595469][T22954] bridge_slave_0: entered allmulticast mode [ 1318.603991][T22954] bridge_slave_0: entered promiscuous mode [ 1319.191221][T22954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.198712][T22954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.270017][T22954] bridge_slave_1: entered allmulticast mode [ 1319.277874][T22954] bridge_slave_1: entered promiscuous mode [ 1319.310176][T22950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.319166][T22950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.326623][T22950] bridge_slave_0: entered allmulticast mode [ 1319.334176][T22950] bridge_slave_0: entered promiscuous mode [ 1319.404751][T22954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.419586][T22954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.725272][T22950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.732449][T22950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.739624][T22950] bridge_slave_1: entered allmulticast mode [ 1319.747250][T22950] bridge_slave_1: entered promiscuous mode [ 1319.777556][T22954] team0: Port device team_slave_0 added [ 1319.911446][T22954] team0: Port device team_slave_1 added [ 1319.939191][T22935] hsr_slave_0: entered promiscuous mode [ 1319.945720][T22935] hsr_slave_1: entered promiscuous mode [ 1319.951944][T22935] debugfs: 'hsr0' already exists in 'hsr' [ 1319.957707][T22935] Cannot create hsr debugfs directory [ 1320.052114][T22950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.070176][T22945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.077880][T22945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.085036][T22945] bridge_slave_0: entered allmulticast mode [ 1320.092818][T22945] bridge_slave_0: entered promiscuous mode [ 1320.139482][T22954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.146463][T22954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.176417][T22954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.193313][T22950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.232141][T22945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.240833][T22945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.248409][T22945] bridge_slave_1: entered allmulticast mode [ 1320.256071][T22945] bridge_slave_1: entered promiscuous mode [ 1320.286588][T22955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.300626][T22955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.317369][T22955] bridge_slave_0: entered allmulticast mode [ 1320.333345][T22955] bridge_slave_0: entered promiscuous mode [ 1320.363841][T22954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.370788][T22954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.396670][T22954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.536577][T22955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.543732][T22955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.550988][T22955] bridge_slave_1: entered allmulticast mode [ 1320.558569][T22955] bridge_slave_1: entered promiscuous mode [ 1320.889114][T22945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.978205][T22955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.990871][T22955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.015258][T22950] team0: Port device team_slave_0 added [ 1321.027759][T22950] team0: Port device team_slave_1 added [ 1321.123867][T22945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.283364][T22950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.290915][T22950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.316854][T22950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.342952][T22945] team0: Port device team_slave_0 added [ 1321.860188][T22955] team0: Port device team_slave_0 added [ 1321.874380][T22954] hsr_slave_0: entered promiscuous mode [ 1321.881835][T22954] hsr_slave_1: entered promiscuous mode [ 1321.888177][T22954] debugfs: 'hsr0' already exists in 'hsr' [ 1321.893896][T22954] Cannot create hsr debugfs directory [ 1321.902096][T22950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.909088][T22950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.935202][T22950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.968830][T22945] team0: Port device team_slave_1 added [ 1322.550247][T10820] macvlan2: left allmulticast mode [ 1322.555729][T10820] ip6gretap0: left allmulticast mode [ 1322.567046][T10820] macvlan2: left promiscuous mode [ 1322.572458][T10820] bridge0: port 1(macvlan2) entered disabled state [ 1322.816921][T10820] bond2: left allmulticast mode [ 1324.216219][T10820] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1324.948270][T10820] bond0 (unregistering): Released all slaves [ 1325.264425][T10820] bond1 (unregistering): Released all slaves [ 1325.283002][T10820] bond2 (unregistering): Released all slaves [ 1325.302103][T10820] bond3 (unregistering): Released all slaves [ 1325.376193][T10820] bond4 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1325.511269][T10820] bond4 (unregistering): Released all slaves [ 1325.666842][T22955] team0: Port device team_slave_1 added [ 1325.729535][T22945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.736498][T22945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.762972][T22945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.840584][T22950] hsr_slave_0: entered promiscuous mode [ 1325.847656][T22950] hsr_slave_1: entered promiscuous mode [ 1325.854405][T22950] debugfs: 'hsr0' already exists in 'hsr' [ 1325.860162][T22950] Cannot create hsr debugfs directory [ 1325.871311][T22955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.878839][T22955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.904748][T22955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.918080][T22955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.925065][T22955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.950977][T22955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.991622][T10820] tipc: Disabling bearer [ 1326.006924][T10820] tipc: Disabling bearer [ 1326.012259][T10820] tipc: Left network mode [ 1326.023860][T22945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.030853][T22945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.056776][T22945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.206016][T22955] hsr_slave_0: entered promiscuous mode [ 1326.212616][T22955] hsr_slave_1: entered promiscuous mode [ 1326.220531][T22955] debugfs: 'hsr0' already exists in 'hsr' [ 1326.226286][T22955] Cannot create hsr debugfs directory [ 1326.488773][T22945] hsr_slave_0: entered promiscuous mode [ 1326.495362][T22945] hsr_slave_1: entered promiscuous mode [ 1326.501557][T22945] debugfs: 'hsr0' already exists in 'hsr' [ 1326.508329][T22945] Cannot create hsr debugfs directory [ 1327.440419][ T5280] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1328.264452][ T5280] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1328.399412][T10820] hsr_slave_0: left promiscuous mode [ 1328.413371][T10820] hsr_slave_1: left promiscuous mode [ 1330.385698][ T5280] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1331.515463][ T5280] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1333.092054][T10820] IPVS: stop unused estimator thread 0... [ 1333.619895][T22941] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1333.716751][T22941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1333.724881][T22941] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1333.847417][T22941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1334.205831][T22941] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1334.226298][T22941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1334.234891][T22941] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1334.319090][T22941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1335.293233][T22941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.317995][T22941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.341169][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.348337][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.372440][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.379629][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.779794][T22941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.298805][T22941] veth0_vlan: entered promiscuous mode [ 1338.313341][T22941] veth1_vlan: entered promiscuous mode [ 1338.364966][T22941] veth0_macvtap: entered promiscuous mode [ 1338.377812][T22941] veth1_macvtap: entered promiscuous mode [ 1338.401922][T22941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.420979][T22941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1339.052815][T10820] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.350598][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.366696][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.375869][T20016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.421178][T20016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.443271][T20016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.490240][T20016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.543287][T20016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.551152][T20016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.016341][T10820] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.815160][T10820] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.907669][T23313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4705'. [ 1344.198304][T10820] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.613764][T10820] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1346.320967][T23341] netlink: 'syz.4.4707': attribute type 4 has an invalid length. [ 1346.516317][T10820] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1346.688771][T22935] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1346.846799][T22935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1346.861106][T22935] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1346.916058][T22935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1347.437208][T22954] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1347.447241][T22954] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.514177][T22935] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1347.605940][T22935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1347.614114][T22935] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1347.720733][T22935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1347.784338][T10820] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.332316][T22954] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.550789][T22954] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.282236][T22935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1349.307768][T22935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1349.334774][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.342004][ T5801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.371019][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.378230][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.421564][T10820] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.617623][T22935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.347644][T22954] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1351.374689][T22954] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.672946][T23432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4712'. [ 1352.574102][T22954] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.583998][T22954] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.298910][T10820] bridge_slave_1: left allmulticast mode [ 1353.308375][T10820] bridge_slave_1: left promiscuous mode [ 1353.314185][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.484259][T10820] bridge_slave_0: left allmulticast mode [ 1353.489977][T10820] bridge_slave_0: left promiscuous mode [ 1353.495753][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.826057][T10820] erspan0: left allmulticast mode [ 1353.831145][T10820] erspan0: left promiscuous mode [ 1353.951878][T10820] bridge5: port 1(erspan0) entered disabled state [ 1355.392943][T10820] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1355.773300][T10820] bond3 (unregistering): (slave bridge1): Releasing active interface [ 1356.226803][T10820] bond0 (unregistering): Released all slaves [ 1356.239114][T10820] bond1 (unregistering): Released all slaves [ 1356.259476][T10820] bond2 (unregistering): Released all slaves [ 1356.282796][T10820] bond3 (unregistering): Released all slaves [ 1356.304939][T10820] bond4 (unregistering): Released all slaves [ 1356.329741][T10820] bond5 (unregistering): Released all slaves [ 1356.364136][T10820] bond6 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1356.373962][T10820] bond6 (unregistering): Released all slaves [ 1357.102856][T10820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.582926][T10820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.614572][T10820] bond0 (unregistering): Released all slaves [ 1358.512738][T10820] bond7 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1358.526848][T10820] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1359.072674][T10820] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1360.097040][T10820] bond0 (unregistering): Released all slaves [ 1360.222473][T10820] bond1 (unregistering): Released all slaves [ 1360.272868][T10820] bond2 (unregistering): (slave veth5): Releasing active interface [ 1360.515020][T10820] bond2 (unregistering): Released all slaves [ 1360.812502][T10820] bond3 (unregistering): Released all slaves [ 1360.831721][T10820] bond4 (unregistering): Released all slaves [ 1360.849789][T10820] bond5 (unregistering): Released all slaves [ 1360.919007][T10820] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1360.953936][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.960305][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.163365][T10820] bond6 (unregistering): Released all slaves [ 1361.187492][T10820] bond7 (unregistering): Released all slaves [ 1362.105018][T22935] veth0_vlan: entered promiscuous mode [ 1362.155139][T22935] veth1_vlan: entered promiscuous mode [ 1362.293403][T22935] veth0_macvtap: entered promiscuous mode [ 1362.303918][T22935] veth1_macvtap: entered promiscuous mode [ 1362.324211][T22935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.346344][T22935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.595975][T22954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1362.790977][T22954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1362.799130][T22954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1363.008358][T22954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1363.026992][T10820] tipc: Left network mode [ 1363.372491][T10824] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.703392][T22954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1363.762632][T22954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1363.996434][T10820] tipc: Left network mode [ 1364.346974][T20038] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.373715][T22954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1364.444174][T22954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1469.555946][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1469.562923][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22935/1:b..l [ 1469.572014][ C1] rcu: (detected by 1, t=10506 jiffies, g=149845, q=624 ncpus=2) [ 1469.579822][ C1] task:syz-executor state:R running task stack:23656 pid:22935 tgid:22935 ppid:22931 task_flags:0x400140 flags:0x00080000 [ 1469.594881][ C1] Call Trace: [ 1469.598167][ C1] [ 1469.601105][ C1] __schedule+0x125c/0x6730 [ 1469.605641][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.611296][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1469.616279][ C1] ? __pfx___schedule+0x10/0x10 [ 1469.621154][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.626807][ C1] ? mark_held_locks+0x40/0x70 [ 1469.631593][ C1] preempt_schedule_irq+0x50/0x90 [ 1469.636650][ C1] irqentry_exit+0x205/0xa00 [ 1469.641267][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.646927][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1469.652925][ C1] RIP: 0010:unwind_next_frame+0xdf6/0x2090 [ 1469.658767][ C1] Code: 84 f6 40 0f 95 c6 40 84 f7 0f 85 fe 0c 00 00 83 e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 e7 0c 00 00 0f b6 41 04 e8 04 3c 04 0f 84 8c 07 00 00 3c 08 0f 84 ce 06 00 00 84 c0 0f [ 1469.678385][ C1] RSP: 0018:ffffc90004176cb0 EFLAGS: 00000246 [ 1469.684465][ C1] RAX: 0000000000000083 RBX: 0000000000000001 RCX: ffffffff922d4b7a [ 1469.692440][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1469.700414][ C1] RBP: ffffc90004176d68 R08: ffffffff922d4b7e R09: 0000000000000007 [ 1469.708391][ C1] R10: 0000000000000200 R11: 0000000000065511 R12: ffffc90004176d70 [ 1469.716369][ C1] R13: ffffc90004176d20 R14: ffffc900041777c0 R15: ffffc90004176d54 [ 1469.724374][ C1] ? hwsim_new_radio_nl+0xc6b/0x13f0 [ 1469.729699][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1469.735894][ C1] arch_stack_walk+0x94/0xf0 [ 1469.740526][ C1] ? genl_family_rcv_msg_doit+0x214/0x300 [ 1469.746280][ C1] stack_trace_save+0x8e/0xc0 [ 1469.750994][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1469.756400][ C1] ? netlink_sendmsg+0x8b0/0xda0 [ 1469.761367][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.767020][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1469.771981][ C1] kasan_save_stack+0x30/0x50 [ 1469.776714][ C1] ? kasan_save_stack+0x30/0x50 [ 1469.781620][ C1] ? kasan_save_track+0x14/0x30 [ 1469.786502][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1469.791541][ C1] ? kmem_cache_alloc_lru_noprof+0x267/0x6a0 [ 1469.797551][ C1] ? alloc_inode+0x68/0x250 [ 1469.802072][ C1] ? new_inode+0x22/0x1c0 [ 1469.806417][ C1] ? __debugfs_create_file+0x105/0x4f0 [ 1469.811899][ C1] ? debugfs_create_file_short+0x41/0x60 [ 1469.817574][ C1] ? ieee80211_debugfs_recreate_netdev+0x850/0x1790 [ 1469.824216][ C1] ? ieee80211_if_add+0xe45/0x1a70 [ 1469.829347][ C1] ? ieee80211_register_hw+0x3c40/0x4580 [ 1469.835008][ C1] ? mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 1469.840929][ C1] ? hwsim_new_radio_nl+0xc6b/0x13f0 [ 1469.846382][ C1] kasan_save_track+0x14/0x30 [ 1469.851092][ C1] __kasan_slab_alloc+0x89/0x90 [ 1469.855955][ C1] kmem_cache_alloc_lru_noprof+0x267/0x6a0 [ 1469.861800][ C1] ? start_dirop+0x79/0xb0 [ 1469.866239][ C1] ? alloc_inode+0x68/0x250 [ 1469.870771][ C1] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1469.876435][ C1] alloc_inode+0x68/0x250 [ 1469.880789][ C1] new_inode+0x22/0x1c0 [ 1469.884967][ C1] __debugfs_create_file+0x105/0x4f0 [ 1469.890284][ C1] debugfs_create_file_short+0x41/0x60 [ 1469.895774][ C1] ieee80211_debugfs_recreate_netdev+0x850/0x1790 [ 1469.902232][ C1] ? ieee80211_clear_tpe+0x238/0x290 [ 1469.907552][ C1] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 1469.914473][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.920142][ C1] ? ieee80211_link_setup+0x81/0xa0 [ 1469.925369][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.931024][ C1] ? ieee80211_setup_sdata+0x620/0xdc0 [ 1469.936506][ C1] ieee80211_if_add+0xe45/0x1a70 [ 1469.941484][ C1] ? __pfx_minstrel_ht_add_debugfs+0x10/0x10 [ 1469.947502][ C1] ieee80211_register_hw+0x3c40/0x4580 [ 1469.953017][ C1] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1469.958940][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 1469.964618][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.970272][ C1] ? find_held_lock+0x2b/0x80 [ 1469.974984][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1469.980899][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.986551][ C1] ? __hrtimer_setup+0x208/0x330 [ 1469.991523][ C1] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 1469.997309][ C1] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1470.003419][ C1] hwsim_new_radio_nl+0xc6b/0x13f0 [ 1470.008557][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.014221][ C1] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1470.019805][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.025456][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.031112][ C1] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1470.038087][ C1] genl_family_rcv_msg_doit+0x214/0x300 [ 1470.043667][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1470.049759][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.055413][ C1] ? genl_get_cmd+0x3e7/0x760 [ 1470.060123][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.065776][ C1] ? security_capable+0x80/0x260 [ 1470.070755][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.076407][ C1] ? ns_capable+0xd2/0xf0 [ 1470.080757][ C1] genl_rcv_msg+0x560/0x800 [ 1470.085292][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1470.090343][ C1] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1470.095925][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.101585][ C1] netlink_rcv_skb+0x159/0x420 [ 1470.106374][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1470.111426][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1470.116748][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.122400][ C1] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1470.127718][ C1] genl_rcv+0x28/0x40 [ 1470.131718][ C1] netlink_unicast+0x585/0x850 [ 1470.136507][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1470.141910][ C1] netlink_sendmsg+0x8b0/0xda0 [ 1470.146701][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.152011][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.157663][ C1] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1470.163320][ C1] __sys_sendto+0x48b/0x4e0 [ 1470.167847][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.173154][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1470.178213][ C1] ? fd_install+0x223/0x580 [ 1470.182741][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.188429][ C1] ? __pfx___sys_socket+0x10/0x10 [ 1470.193482][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 1470.198269][ C1] ? do_syscall_64+0x90/0x870 [ 1470.202971][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.208622][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1470.213850][ C1] do_syscall_64+0x115/0x870 [ 1470.218471][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.224378][ C1] RIP: 0033:0x7fa062d5e84e [ 1470.228798][ C1] RSP: 002b:00007ffd4e851ce8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1470.237227][ C1] RAX: ffffffffffffffda RBX: 00005555921e3500 RCX: 00007fa062d5e84e [ 1470.245204][ C1] RDX: 0000000000000024 RSI: 00007fa063b54670 RDI: 0000000000000003 [ 1470.253179][ C1] RBP: 0000000000000001 R08: 00007ffd4e851d64 R09: 000000000000000c [ 1470.261155][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1470.269156][ C1] R13: 0000000000000000 R14: 00007fa063b54670 R15: 0000000000000000 [ 1470.277159][ C1] [ 1470.280177][ C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g149845 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1470.291469][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1470.301438][ C1] rcu: RCU grace-period kthread stack dump: [ 1470.307319][ C1] task:rcu_preempt state:R running task stack:28824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1470.320883][ C1] Call Trace: [ 1470.324156][ C1] [ 1470.327092][ C1] __schedule+0x125c/0x6730 [ 1470.331623][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.337301][ C1] ? __pfx___schedule+0x10/0x10 [ 1470.342169][ C1] ? find_held_lock+0x2b/0x80 [ 1470.346882][ C1] ? schedule+0x225/0x2c0 [ 1470.351234][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.356903][ C1] schedule+0xdd/0x2c0 [ 1470.360992][ C1] schedule_timeout+0x127/0x280 [ 1470.365859][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1470.371248][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1470.376578][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.382239][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1470.388069][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.393722][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1470.399207][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1470.403990][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.409651][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1470.415047][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1470.420008][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1470.425218][ C1] ? rcu_is_watching+0x12/0xc0 [ 1470.430012][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1470.435845][ C1] rcu_gp_kthread+0x179/0x230 [ 1470.440536][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1470.445754][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1470.451586][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.457244][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.462898][ C1] ? __kthread_parkme+0x18c/0x230 [ 1470.467952][ C1] ? kthread+0x13a/0x450 [ 1470.472225][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1470.477437][ C1] kthread+0x370/0x450 [ 1470.481537][ C1] ? __pfx_kthread+0x10/0x10 [ 1470.486172][ C1] ret_from_fork+0x72b/0xd50 [ 1470.490789][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1470.495926][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.501577][ C1] ? __switch_to+0x800/0x10f0 [ 1470.506290][ C1] ? __switch_to_asm+0x39/0x70 [ 1470.511136][ C1] ? __pfx_kthread+0x10/0x10 [ 1470.515768][ C1] ret_from_fork_asm+0x1a/0x30 [ 1470.520584][ C1] [ 1470.523610][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1470.529935][ C1] CPU: 1 UID: 0 PID: 5801 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1470.540974][ C1] Tainted: [L]=SOFTLOCKUP [ 1470.545291][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1470.555380][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1470.561921][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870 [ 1470.568621][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 34 9a 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 [ 1470.588241][ C1] RSP: 0018:ffffc90004467858 EFLAGS: 00000293 [ 1470.594316][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fdb6f2 [ 1470.602291][ C1] RDX: ffff888032993e00 RSI: ffffffff81fdb6cc RDI: ffff888032993e00 [ 1470.610270][ C1] RBP: ffff8880b84434e0 R08: 0000000000000005 R09: 0000000000000000 [ 1470.618245][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1470.626218][ C1] R13: ffffed101708869d R14: 0000000000000001 R15: ffff8880b853c9c0 [ 1470.634325][ C1] FS: 0000000000000000(0000) GS:ffff888123ed9000(0000) knlGS:0000000000000000 [ 1470.643264][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1470.649855][ C1] CR2: 00007f34403eb700 CR3: 000000000e994000 CR4: 0000000000350ef0 [ 1470.657832][ C1] Call Trace: [ 1470.661108][ C1] [ 1470.664046][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1470.669120][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1470.675466][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1470.680883][ C1] ? __pfx___text_poke+0x10/0x10 [ 1470.685854][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1470.690910][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1470.696042][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1470.701970][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 1470.707710][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.713366][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1470.719629][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.725281][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1470.731536][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.737192][ C1] ? find_held_lock+0x2b/0x80 [ 1470.741899][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.747559][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1470.753558][ C1] jump_label_update+0x37a/0x550 [ 1470.758536][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 1470.764469][ C1] static_key_enable+0x1a/0x20 [ 1470.769264][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 1470.774588][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1470.780520][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.786176][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.791826][ C1] ? rcu_is_watching+0x12/0xc0 [ 1470.796633][ C1] process_one_work+0xa23/0x1940 [ 1470.801605][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1470.806986][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.812654][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.818313][ C1] worker_thread+0x5ef/0xe50 [ 1470.822933][ C1] ? kthread+0x13a/0x450 [ 1470.827205][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1470.832324][ C1] kthread+0x370/0x450 [ 1470.836423][ C1] ? __pfx_kthread+0x10/0x10 [ 1470.841045][ C1] ret_from_fork+0x72b/0xd50 [ 1470.845661][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1470.850799][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1470.856449][ C1] ? __switch_to+0x800/0x10f0 [ 1470.861157][ C1] ? __switch_to_asm+0x39/0x70 [ 1470.865949][ C1] ? __pfx_kthread+0x10/0x10 [ 1470.870578][ C1] ret_from_fork_asm+0x1a/0x30 [ 1470.875395][ C1] [ 1607.808289][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [kworker/u8:9:5801] [ 1607.808331][ C1] Modules linked in: [ 1607.808349][ C1] irq event stamp: 5724787 [ 1607.808361][ C1] hardirqs last enabled at (5724786): [] get_random_u32+0x581/0x7d0 [ 1607.808410][ C1] hardirqs last disabled at (5724787): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1607.808468][ C1] softirqs last enabled at (5724720): [] __irq_exit_rcu+0x162/0x210 [ 1607.808522][ C1] softirqs last disabled at (5724729): [] __irq_exit_rcu+0x162/0x210 [ 1607.808585][ C1] CPU: 1 UID: 0 PID: 5801 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1607.808639][ C1] Tainted: [L]=SOFTLOCKUP [ 1607.808652][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1607.808676][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1607.808736][ C1] RIP: 0010:get_random_u32+0x434/0x7d0 [ 1607.808773][ C1] Code: fc 48 85 ed 0f 85 63 01 00 00 e8 37 75 64 fc 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 6f 64 fc 48 85 db 0f 85 84 01 00 00 17 75 64 fc 8b 5c 24 38 e8 0e 75 64 fc 48 b8 00 00 00 00 00 fc [ 1607.808809][ C1] RSP: 0018:ffffc90000a08b38 EFLAGS: 00000246 [ 1607.808837][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff85a5dd43 [ 1607.808861][ C1] RDX: ffff888032993e00 RSI: ffffffff85a5dd51 RDI: ffff888032993e00 [ 1607.808886][ C1] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 1607.808908][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880b8537160 [ 1607.808932][ C1] R13: 1ffff9200014116a R14: ffff8880b8537188 R15: 0000000000000006 [ 1607.809090][ C1] FS: 0000000000000000(0000) GS:ffff888123ed9000(0000) knlGS:0000000000000000 [ 1607.809122][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1607.809147][ C1] CR2: 00007f34403eb700 CR3: 000000000e994000 CR4: 0000000000350ef0 [ 1607.809172][ C1] Call Trace: [ 1607.809183][ C1] [ 1607.809202][ C1] ? __pfx_get_random_u32+0x10/0x10 [ 1607.809241][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.809286][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1607.809357][ C1] __get_random_u32_below+0x18/0xa0 [ 1607.809398][ C1] mrp_join_timer_arm+0x1f/0x70 [ 1607.809448][ C1] mrp_join_timer+0x14a/0x180 [ 1607.809501][ C1] ? __pfx_mrp_join_timer+0x10/0x10 [ 1607.809550][ C1] call_timer_fn+0x19a/0x610 [ 1607.809589][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1607.809624][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.809679][ C1] ? __pfx_mrp_join_timer+0x10/0x10 [ 1607.809728][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.809773][ C1] ? mark_held_locks+0x40/0x70 [ 1607.809819][ C1] ? __pfx_mrp_join_timer+0x10/0x10 [ 1607.809868][ C1] __run_timers+0x757/0xb00 [ 1607.809921][ C1] ? __pfx___run_timers+0x10/0x10 [ 1607.809967][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.810020][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.810067][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1607.810118][ C1] run_timer_base+0x114/0x190 [ 1607.810158][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1607.810197][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.810249][ C1] run_timer_softirq+0x1a/0x50 [ 1607.810288][ C1] handle_softirqs+0x1ea/0x9b0 [ 1607.810346][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1607.810394][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.810439][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1607.810478][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.810523][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1607.810587][ C1] __irq_exit_rcu+0x162/0x210 [ 1607.810633][ C1] irq_exit_rcu+0x9/0x30 [ 1607.810675][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1607.810724][ C1] [ 1607.810735][ C1] [ 1607.810748][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1607.810790][ C1] RIP: 0010:smp_call_function_many_cond+0x593/0x1870 [ 1607.810836][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 34 9a 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 41 [ 1607.810873][ C1] RSP: 0018:ffffc90004467858 EFLAGS: 00000293 [ 1607.810900][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fdb6f2 [ 1607.810924][ C1] RDX: ffff888032993e00 RSI: ffffffff81fdb6cc RDI: ffff888032993e00 [ 1607.810949][ C1] RBP: ffff8880b84434e0 R08: 0000000000000005 R09: 0000000000000000 [ 1607.810973][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1607.810996][ C1] R13: ffffed101708869d R14: 0000000000000001 R15: ffff8880b853c9c0 [ 1607.811032][ C1] ? smp_call_function_many_cond+0x5b2/0x1870 [ 1607.811076][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 1607.811125][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 1607.811173][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1607.811243][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1607.811287][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1607.811358][ C1] ? __pfx___text_poke+0x10/0x10 [ 1607.811418][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1607.811474][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1607.811519][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1607.811581][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 1607.811626][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.811673][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1607.811717][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.811762][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1607.811802][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.811847][ C1] ? find_held_lock+0x2b/0x80 [ 1607.811903][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.811957][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1607.811998][ C1] jump_label_update+0x37a/0x550 [ 1607.812063][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 1607.812125][ C1] static_key_enable+0x1a/0x20 [ 1607.812183][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 1607.812244][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1607.812308][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.812361][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.812405][ C1] ? rcu_is_watching+0x12/0xc0 [ 1607.812467][ C1] process_one_work+0xa23/0x1940 [ 1607.812523][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1607.812559][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.812618][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.812669][ C1] worker_thread+0x5ef/0xe50 [ 1607.812723][ C1] ? kthread+0x13a/0x450 [ 1607.812778][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1607.812813][ C1] kthread+0x370/0x450 [ 1607.812869][ C1] ? __pfx_kthread+0x10/0x10 [ 1607.812931][ C1] ret_from_fork+0x72b/0xd50 [ 1607.812981][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1607.813033][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1607.813077][ C1] ? __switch_to+0x800/0x10f0 [ 1607.813136][ C1] ? __switch_to_asm+0x39/0x70 [ 1607.813187][ C1] ? __pfx_kthread+0x10/0x10 [ 1607.813248][ C1] ret_from_fork_asm+0x1a/0x30 [ 1607.813328][ C1] [ 1607.813341][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1608.484079][ C0] NMI backtrace for cpu 0 [ 1608.484107][ C0] CPU: 0 UID: 0 PID: 23540 Comm: syz.4.4717 Tainted: G L syzkaller #0 PREEMPT(full) [ 1608.484153][ C0] Tainted: [L]=SOFTLOCKUP [ 1608.484165][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1608.484184][ C0] RIP: 0010:rcu_is_watching+0x5c/0xc0 [ 1608.484238][ C0] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5c 48 03 1c ed 20 29 47 8e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b [ 1608.484270][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00000016 [ 1608.484296][ C0] RAX: dffffc0000000000 RBX: ffff8880b8433c68 RCX: 0000000000000000 [ 1608.484318][ C0] RDX: 1ffff1101708678d RSI: ffffffff8c401a00 RDI: ffffffff8e472920 [ 1608.484340][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1608.484360][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1608.484379][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1608.484454][ C0] FS: 00007f344131c6c0(0000) GS:ffff888123dd9000(0000) knlGS:0000000000000000 [ 1608.484484][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1608.484506][ C0] CR2: 00007f1d04b7f368 CR3: 000000005a182000 CR4: 0000000000350ef0 [ 1608.484528][ C0] Call Trace: [ 1608.484539][ C0] [ 1608.484552][ C0] lock_acquire+0x301/0x370 [ 1608.484589][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.484629][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1608.484674][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.484715][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1608.484763][ C0] _raw_spin_lock+0x2e/0x40 [ 1608.484798][ C0] ? advance_sched+0xe5/0xd20 [ 1608.484842][ C0] advance_sched+0xe5/0xd20 [ 1608.484887][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.484937][ C0] ? find_held_lock+0x2b/0x80 [ 1608.484986][ C0] ? __hrtimer_run_queues+0x37b/0x9c0 [ 1608.485037][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.485075][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1608.485120][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1608.485165][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1608.485222][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1608.485285][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1608.485338][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1608.485382][ C0] [ 1608.485392][ C0] [ 1608.485403][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1608.485439][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1608.485481][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 0f 29 f6 48 89 df e8 3e 5f 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 6e 18 f6 65 8b 05 4e 97 a7 08 85 c0 74 16 5b [ 1608.485513][ C0] RSP: 0018:ffffc900040f7778 EFLAGS: 00000246 [ 1608.485537][ C0] RAX: 0000000000000002 RBX: ffff88807e50de80 RCX: 0000000000000040 [ 1608.485558][ C0] RDX: 0000000000000000 RSI: ffffffff8e1ac5dd RDI: ffffffff8c401a80 [ 1608.485580][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 1608.485600][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880556a4b40 [ 1608.485620][ C0] R13: 0000000000000246 R14: ffff88807e50de68 R15: ffffc900040f78f8 [ 1608.485657][ C0] __skb_try_recv_datagram+0x16a/0x500 [ 1608.485701][ C0] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1608.485738][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1608.485787][ C0] __unix_dgram_recvmsg+0x1bc/0xc30 [ 1608.485841][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1608.485889][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.485938][ C0] ? rcu_is_watching+0x12/0xc0 [ 1608.485986][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.486030][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.486069][ C0] ? iovec_from_user+0xda/0x140 [ 1608.486124][ C0] unix_dgram_recvmsg+0xcd/0x100 [ 1608.486172][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1608.486219][ C0] ____sys_recvmsg+0x5eb/0x670 [ 1608.486258][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1608.486300][ C0] ? rcu_is_watching+0x12/0xc0 [ 1608.486345][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.486385][ C0] ? kfree+0x1e5/0x6c0 [ 1608.486429][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 1608.486466][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1608.486501][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.486555][ C0] ? __pfx___might_resched+0x10/0x10 [ 1608.486597][ C0] do_recvmmsg+0x2f3/0x740 [ 1608.486637][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1608.486676][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.486716][ C0] ? do_futex+0x190/0x440 [ 1608.486770][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.486809][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.486853][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 1608.486904][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1608.486962][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1608.487006][ C0] do_syscall_64+0x115/0x870 [ 1608.487054][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.487088][ C0] RIP: 0033:0x7f344039e019 [ 1608.487113][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.487144][ C0] RSP: 002b:00007f344131c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1608.487173][ C0] RAX: ffffffffffffffda RBX: 00007f3440626090 RCX: 00007f344039e019 [ 1608.487198][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1608.487219][ C0] RBP: 00007f344043500c R08: 0000000000000000 R09: 0000000000000000 [ 1608.487239][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1608.487259][ C0] R13: 00007f3440626128 R14: 00007f3440626090 R15: 00007ffc05782498 [ 1608.487295][ C0] [ 1609.035308][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 1609.042009][ C1] CPU: 1 UID: 0 PID: 5801 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1609.053068][ C1] Tainted: [L]=SOFTLOCKUP [ 1609.057398][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1609.067462][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1609.074007][ C1] Call Trace: [ 1609.077286][ C1] [ 1609.080131][ C1] dump_stack_lvl+0x100/0x190 [ 1609.084829][ C1] vpanic+0x552/0x970 [ 1609.088822][ C1] ? __pfx_vpanic+0x10/0x10 [ 1609.093334][ C1] ? __entry_text_end+0x1020b5/0x1020b9 [ 1609.098903][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1609.104133][ C1] panic+0xd1/0xe0 [ 1609.107862][ C1] ? __pfx_panic+0x10/0x10 [ 1609.112293][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.117946][ C1] ? __pfx_printk_trigger_flush+0x10/0x10 [ 1609.123700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.129352][ C1] ? wq_watchdog_touch+0xec/0x1a0 [ 1609.134420][ C1] ? watchdog_timer_fn.cold+0x5/0x25 [ 1609.139723][ C1] ? watchdog_timer_fn+0x702/0x7a0 [ 1609.144856][ C1] watchdog_timer_fn.cold+0x16/0x25 [ 1609.150076][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1609.155554][ C1] __hrtimer_run_queues+0x13f/0x9c0 [ 1609.160795][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1609.165784][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1609.171796][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 1609.177452][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1609.183446][ C1] RIP: 0010:get_random_u32+0x434/0x7d0 [ 1609.188917][ C1] Code: fc 48 85 ed 0f 85 63 01 00 00 e8 37 75 64 fc 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 6f 64 fc 48 85 db 0f 85 84 01 00 00 17 75 64 fc 8b 5c 24 38 e8 0e 75 64 fc 48 b8 00 00 00 00 00 fc [ 1609.208535][ C1] RSP: 0018:ffffc90000a08b38 EFLAGS: 00000246 [ 1609.214611][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff85a5dd43 [ 1609.222582][ C1] RDX: ffff888032993e00 RSI: ffffffff85a5dd51 RDI: ffff888032993e00 [ 1609.230558][ C1] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 1609.238531][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880b8537160 [ 1609.246505][ C1] R13: 1ffff9200014116a R14: ffff8880b8537188 R15: 0000000000000006 [ 1609.254493][ C1] ? get_random_u32+0x593/0x7d0 [ 1609.259353][ C1] ? get_random_u32+0x5a1/0x7d0 [ 1609.264226][ C1] ? get_random_u32+0x5a1/0x7d0 [ 1609.269089][ C1] ? __pfx_get_random_u32+0x10/0x10 [ 1609.274302][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.279950][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1609.285006][ C1] __get_random_u32_below+0x18/0xa0 [ 1609.290223][ C1] mrp_join_timer_arm+0x1f/0x70 [ 1609.295097][ C1] mrp_join_timer+0x14a/0x180 [ 1609.299801][ C1] ? __pfx_mrp_join_timer+0x10/0x10 [ 1609.305021][ C1] call_timer_fn+0x19a/0x610 [ 1609.309628][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1609.314750][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.320419][ C1] ? __pfx_mrp_join_timer+0x10/0x10 [ 1609.325642][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.331291][ C1] ? mark_held_locks+0x40/0x70 [ 1609.336075][ C1] ? __pfx_mrp_join_timer+0x10/0x10 [ 1609.341296][ C1] __run_timers+0x757/0xb00 [ 1609.345827][ C1] ? __pfx___run_timers+0x10/0x10 [ 1609.350872][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.356531][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.362185][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1609.367235][ C1] run_timer_base+0x114/0x190 [ 1609.371926][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1609.377139][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.382796][ C1] run_timer_softirq+0x1a/0x50 [ 1609.387574][ C1] handle_softirqs+0x1ea/0x9b0 [ 1609.392365][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1609.397673][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.403324][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1609.408188][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.413838][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1609.419508][ C1] __irq_exit_rcu+0x162/0x210 [ 1609.424205][ C1] irq_exit_rcu+0x9/0x30 [ 1609.428466][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1609.434122][ C1] [ 1609.437051][ C1] [ 1609.439979][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1609.445975][ C1] RIP: 0010:smp_call_function_many_cond+0x593/0x1870 [ 1609.452671][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 34 9a 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 41 [ 1609.472289][ C1] RSP: 0018:ffffc90004467858 EFLAGS: 00000293 [ 1609.478372][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fdb6f2 [ 1609.486353][ C1] RDX: ffff888032993e00 RSI: ffffffff81fdb6cc RDI: ffff888032993e00 [ 1609.494342][ C1] RBP: ffff8880b84434e0 R08: 0000000000000005 R09: 0000000000000000 [ 1609.502318][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1609.510295][ C1] R13: ffffed101708869d R14: 0000000000000001 R15: ffff8880b853c9c0 [ 1609.518285][ C1] ? smp_call_function_many_cond+0x5b2/0x1870 [ 1609.524376][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 1609.530501][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 1609.536591][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1609.541661][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1609.548006][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1609.553427][ C1] ? __pfx___text_poke+0x10/0x10 [ 1609.558395][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1609.563453][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1609.568583][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1609.574511][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 1609.580248][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.585900][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1609.592158][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.597808][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1609.604061][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.609712][ C1] ? find_held_lock+0x2b/0x80 [ 1609.614425][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.620085][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1609.626079][ C1] jump_label_update+0x37a/0x550 [ 1609.631055][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 1609.636983][ C1] static_key_enable+0x1a/0x20 [ 1609.641777][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 1609.647099][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1609.653029][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.658685][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.664334][ C1] ? rcu_is_watching+0x12/0xc0 [ 1609.669137][ C1] process_one_work+0xa23/0x1940 [ 1609.674109][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1609.679490][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.685155][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.690814][ C1] worker_thread+0x5ef/0xe50 [ 1609.695435][ C1] ? kthread+0x13a/0x450 [ 1609.699706][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1609.704826][ C1] kthread+0x370/0x450 [ 1609.708925][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.713551][ C1] ret_from_fork+0x72b/0xd50 [ 1609.718166][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1609.723301][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1609.728950][ C1] ? __switch_to+0x800/0x10f0 [ 1609.733658][ C1] ? __switch_to_asm+0x39/0x70 [ 1609.738447][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.743074][ C1] ret_from_fork_asm+0x1a/0x30 [ 1609.747884][ C1] [ 1610.901643][ C1] Shutting down cpus with NMI [ 1610.906833][ C1] Kernel Offset: disabled [ 1610.911148][ C1] Rebooting in 86400 seconds..