last executing test programs: 1m32.107547267s ago: executing program 3 (id=2719): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x3, 0x1fa, &(0x7f0000000180)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf250000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m30.620822943s ago: executing program 3 (id=2723): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x2c}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x401, 0x192, 0x175, 0xffff, 0x3, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3507, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x844) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r2, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 1m28.615048778s ago: executing program 3 (id=2727): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x0, 0x0}) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010100, 0x2, 0x6c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0) r1 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) 1m28.46717149s ago: executing program 3 (id=2729): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x218018, &(0x7f0000001100)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="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"], 0xff, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x22, &(0x7f00000000c0)={[{@gid}]}) 1m27.366001243s ago: executing program 3 (id=2732): syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) close(r3) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r4, 0x0, 0x0, 0x0) 1m26.678485969s ago: executing program 3 (id=2735): inotify_init() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@local, r4}, 0x14) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) 1m25.928307839s ago: executing program 32 (id=2735): inotify_init() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@local, r4}, 0x14) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) 8.686431378s ago: executing program 4 (id=2956): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x3, 0x1fa, &(0x7f0000000180)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.268229246s ago: executing program 2 (id=2959): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) 7.242249684s ago: executing program 2 (id=2963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r3 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) pselect6(0x40, &(0x7f0000000180)={0x1de80000000000, 0x1, 0x5c, 0x40, 0x4, 0x1000, 0xffffffffffffff47, 0x7}, &(0x7f00000001c0)={0x1, 0x8000, 0x6, 0x0, 0x800000000, 0x5f, 0x8000000000000000, 0x11}, &(0x7f0000000280)={0x7, 0x0, 0xc5d2, 0xa35a, 0x1, 0x800, 0x10, 0x7fffffffffffffff}, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0}) 7.130729238s ago: executing program 1 (id=2964): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000d00)={[{@grpjquota}, {@dioread_lock}, {@nobarrier}]}, 0xfe, 0x244, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') r3 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40040) 7.11762876s ago: executing program 4 (id=2965): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) 6.97873627s ago: executing program 4 (id=2966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r4, r4, 0x7, 0x0, 0x0, 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) 6.227604859s ago: executing program 2 (id=2968): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELTABLE={0xc4, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x88, 0x6, "389ccbb6ef03fc85a06f6c3f003c2b67e12c3e01cb71258545bc3cbbec9a7ddae7b805f4f4261c6cec68a393af38bd409549b566656747ccfe5c07c789e591a4262d43e3729a5ab1438ff8b1956f0e78813ebb28e40be720d4cb9a32ad111fa2e565bca5e4e869e9e0759f7472d17d5a54ab673cecc9617aeb18f205e2109e2d370cea40"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x107, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xd, 0x6, "36fb9e4f28ebed75ac"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x274}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0)) dup(0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000100df"], 0x4080) 5.768126836s ago: executing program 0 (id=2969): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}}, 0x20008000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4007}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 4.771151128s ago: executing program 0 (id=2970): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f00000002c0)="c5469e3602c607ca68", 0x9) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x1, 0x0, 0x2, 0x8, 0x0, 0x6, 0x0, 0x0, 0x7, 0x6, 0x7, 0x3], 0x8000000, 0x59352}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.770876918s ago: executing program 1 (id=2971): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) 4.770503028s ago: executing program 4 (id=2972): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) 4.437814569s ago: executing program 0 (id=2973): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x3, 0x1fa, &(0x7f0000000180)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.206801308s ago: executing program 0 (id=2974): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) 3.896489444s ago: executing program 0 (id=2975): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./bus\x00', 0x323080a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32], 0x11, 0x444d, &(0x7f0000013680)="$eJzs3c9vG1kdAPDvOOluUnZLsuxhkZCwxEogQFGyJyArSNO02bQNRYVWiIvrJG4bcOIqcRCHHsKtEickDohDBRIHpJyqHLiWP4ELx3KuRA9ckJAqjGyPk8zEVtwQJ6T6fKTked6b98P+esZvRrJfIVV/uLpZXN0slteLteX7m58Uf16rbq1VonBKzrp/+tMtTu9E20m2Kfan49aVaz+8+0nEX1b+9rLRaDRagRyOrqYOPP7XPx8vH0w7Crk6zXa7t3ZSfhIRHx4aV9NQRPz4zxFJRFxO82bTdDQiLkW77O7jX90r9njOb+rZi8qnpdeLT3anP76+83S393NPIn5X/eI3H6z94ytD03//+sn0DgAAAAAAAAAAAAAAAADAeTd/+9adH0xOxfMkhneSw9/XnU/TYo/6jRPz5cE/WQAAAAAAAAAAAAAAAAAAAPg/tf/9/2LyQZfv/8+l6Uym1jt7jxrfO51xMhgL3781d3VyKl3/PXkvX/6tpJ2+ujwU413Wfc+v/345V7/7+u/JiY2/M75Ov2ORFCYy24XCxETEH9KF3z9KLhaqtc36N+7XttZXTmwY51Y2/vnV+/cX9H/1p/7iP5urPvj1/79w6N3U3L53cm+xt1o2/kM99/vjL5O+4n8lV+804s/xZeM/3MobjZH9HWbaJ4Bm/H89fHT853LtDyr+lyKimDTHWsycAZpzmGb+zCA6fQtl43+hlZc5daYvZK/j/9+5+F/NtX9W5//t2QM/ThUxPNgxnF/Z+Lfn9SOZPfaP//HC0cf/tVz7ZxH/5vi3ff73JRv/d9uZ2aOl9Ur2e/6fz7U/qPjfKaTjvJRk3gE7STu/1+/VkZWN/8ih8v3rv0Jf87/PcvVP6/qv02/n+q9zHfK1pH39R3fZ+I/23K/f438hV2/Q5/+Z1vyP48rG/2IrLzt3Hmv97zP+Sf7Q/p/if6F3UWtWMtKJ/36n/3m3nf/7/I0IusrG/3PtzMxtoO3W/9b8Lzl6/n8j1/5ZzP+a49/uciuLw7LxP3T7d08z/n/t4/P/Zq7e4OMfMWmuf2zZ+L/fc7/W8T9ydPwXc/UGHf+vDrJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHNgNk3HIilMZLYLhYmJiCvp9kdxMWk0VkpL1dryzzYj5lq5342ID5IH1dpSuVpaXa+tVErlarW2HHE1rfdhjCSb1Vq9tFZ+dG2vrdHkYaW8UV+qlOsRMZ/mfyne77S1tFpfKz+KiM/2yj5fqG08elheL62sbnxncnJyMhbSsmKMJ5Vf1Cvr9Xbv7dKI63t1x5IDg2sV39gby3vJT2tbG+vlaiv/5oE61dpyuXqgzmJa9psYT+obW+vL5XqlVK096PR3lmbSdG7h9o9u35w6VH4vaaezpzssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN7Q8+lv/zabU0wiohARSfqX8exF5dPS68Unu9MfX995uvuy2z79uXDcIQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2UHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKu3SM0jAUxgH8e89BR4/hFJLNNaKIDkYET6DH8DB6FC/hHRw6dO3QljYJhJDSLu1Qfr/lg/zJex+8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ+XxrXl/LauIFFfLy4jfz7//Yf7cze+76f8vTrAjx/P00tw/lFX37mnzaTXMb1M7Z3Xepov510dMzN7PqCfjPrXS3r129W2s36+/9zpSLiKi7vKblHNRHHYWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBmBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86ir4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfgUAAP//ZIEonQ==") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) shutdown(r1, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x10040) 3.771619s ago: executing program 2 (id=2976): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x2, 0x40000000, 0xffffffffffffffff, &(0x7f0000000000)='.\x00') 3.590720899s ago: executing program 2 (id=2977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r3 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) pselect6(0x40, &(0x7f0000000180)={0x1de80000000000, 0x1, 0x5c, 0x40, 0x4, 0x1000, 0xffffffffffffff47, 0x7}, &(0x7f00000001c0)={0x1, 0x8000, 0x6, 0x0, 0x800000000, 0x5f, 0x8000000000000000, 0x11}, &(0x7f0000000280)={0x7, 0x0, 0xc5d2, 0xa35a, 0x1, 0x800, 0x10, 0x7fffffffffffffff}, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0}) 3.357975868s ago: executing program 4 (id=2978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x4, 0x8, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0xa300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) dup2(r4, r3) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r5, &(0x7f0000001f00)=""/4091, 0xffb) 2.693568359s ago: executing program 1 (id=2979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.811687036s ago: executing program 2 (id=2980): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x23a, 0x101000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:04.0/resource\x00', 0x0, 0x0) read(r0, 0x0, 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc}, 0x10}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) 1.674812545s ago: executing program 1 (id=2981): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) 1.430668707s ago: executing program 1 (id=2982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) 1.377834438s ago: executing program 4 (id=2983): setns(0xc9, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 117.612286ms ago: executing program 1 (id=2984): r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) 0s ago: executing program 0 (id=2985): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) kernel console output (not intermixed with test programs): 856.138782][T10821] ceph: No mds server is up or the cluster is laggy [ 857.939997][ T5775] libceph: connect (1)[c::]:6789 error -101 [ 857.958332][ T5775] libceph: mon0 (1)[c::]:6789 connect error [ 858.247520][ T5775] libceph: connect (1)[c::]:6789 error -101 [ 858.261980][ T5775] libceph: mon0 (1)[c::]:6789 connect error [ 858.734648][T10856] ceph: No mds server is up or the cluster is laggy [ 858.805478][ T8769] libceph: connect (1)[c::]:6789 error -101 [ 858.822767][ T8769] libceph: mon0 (1)[c::]:6789 connect error [ 859.985694][T10883] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 862.558731][ T27] libceph: connect (1)[c::]:6789 error -101 [ 862.564831][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 862.893205][ T27] libceph: connect (1)[c::]:6789 error -101 [ 862.920109][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 863.545412][T10904] ceph: No mds server is up or the cluster is laggy [ 864.612797][T10927] ip_tables: iptables: counters copy to user failed while replacing table [ 865.832058][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1505'. [ 865.873528][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 865.880407][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 866.153041][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 866.159244][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 866.675649][T10934] ceph: No mds server is up or the cluster is laggy [ 866.732697][ T9] libceph: connect (1)[c::]:6789 error -101 [ 866.749151][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 866.878783][T10947] kAFS: No cell specified [ 869.870191][ T27] libceph: connect (1)[c::]:6789 error -101 [ 869.893662][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 870.190690][ T27] libceph: connect (1)[c::]:6789 error -101 [ 870.216728][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 870.359032][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.365652][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.591552][T10977] ceph: No mds server is up or the cluster is laggy [ 872.550482][T10998] kAFS: No cell specified [ 873.768651][ T9] libceph: connect (1)[c::]:6789 error -101 [ 873.779302][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 874.045432][ T9] libceph: connect (1)[c::]:6789 error -101 [ 874.053891][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 874.821312][ T9] libceph: connect (1)[c::]:6789 error -101 [ 874.933108][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 874.935410][T11008] ceph: No mds server is up or the cluster is laggy [ 877.024173][T11035] kAFS: No cell specified [ 879.095698][T11049] fuse: Bad value for 'group_id' [ 880.837791][T11072] kAFS: No cell specified [ 883.334796][T11105] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 884.001232][T11111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 884.051269][ T27] libceph: connect (1)[c::]:6789 error -101 [ 884.058587][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 884.067857][T11123] IPVS: Unknown mcast interface: pim6reg [ 884.315698][ T27] libceph: connect (1)[c::]:6789 error -101 [ 884.331319][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 885.512791][ T27] libceph: connect (1)[c::]:6789 error -101 [ 885.541357][T11118] ceph: No mds server is up or the cluster is laggy [ 885.580735][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 886.085326][T11147] fuse: Bad value for 'user_id' [ 887.372164][T11161] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 887.555329][ T8] libceph: connect (1)[c::]:6789 error -101 [ 887.561470][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 887.572923][ T8] libceph: connect (1)[c::]:6789 error -101 [ 888.327930][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 888.375828][T11166] ceph: No mds server is up or the cluster is laggy [ 890.886379][T11208] ceph: No mds server is up or the cluster is laggy [ 894.482959][T11243] ceph: No mds server is up or the cluster is laggy [ 895.260008][ T5775] libceph: connect (1)[c::]:6789 error -101 [ 895.274813][ T5775] libceph: mon0 (1)[c::]:6789 connect error [ 895.537097][ T5775] libceph: connect (1)[c::]:6789 error -101 [ 895.543179][ T5775] libceph: mon0 (1)[c::]:6789 connect error [ 895.829744][T11290] warning: `syz.1.1626' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 896.041998][T11277] ceph: No mds server is up or the cluster is laggy [ 896.065391][ T5775] libceph: connect (1)[c::]:6789 error -101 [ 896.155160][ T5775] libceph: mon0 (1)[c::]:6789 connect error [ 897.074102][ T5775] libceph: connect (1)[c::]:6789 error -101 [ 897.096999][ T5775] libceph: mon0 (1)[c::]:6789 connect error [ 901.376038][T11331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 902.425290][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 903.465160][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 924.245366][T11507] fuse: Unknown parameter 'grou00000000000000000000' [ 929.307317][T11548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.314825][T11548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.516004][T11548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.523891][T11548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.573292][T11557] syz.1.1712 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 931.492237][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 931.505073][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 931.516451][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 931.528065][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 931.791941][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.798755][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.268657][T11624] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1729'. [ 948.836061][T11708] netlink: 'syz.2.1763': attribute type 1 has an invalid length. [ 948.844275][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1763'. [ 950.934780][T11736] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 950.942613][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 953.406664][T11768] netlink: 'syz.1.1781': attribute type 1 has an invalid length. [ 953.414437][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'. [ 957.396973][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 959.853215][T11856] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1804'. [ 962.083910][T11869] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1813'. [ 964.094657][T11898] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1824'. [ 968.680644][T11935] overlayfs: failed to clone upperpath [ 974.065480][T11979] nftables ruleset with unbound set [ 977.335351][T12013] fuse: Bad value for 'fd' [ 981.395271][T12043] fuse: Bad value for 'fd' [ 984.575330][T12079] fuse: Bad value for 'fd' [ 986.260041][T12113] netlink: 'syz.1.1888': attribute type 1 has an invalid length. [ 987.215315][T12111] fuse: Bad value for 'fd' [ 987.454332][T12113] bond1: entered promiscuous mode [ 987.478896][T12113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 987.540966][T12119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 987.595688][T12119] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 987.668402][T12119] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 987.727323][T12119] bond1: (slave wireguard0): making interface the new active one [ 987.763115][T12119] wireguard0: entered promiscuous mode [ 987.805667][T12119] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 993.239352][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.247725][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.102876][T12196] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1000.224990][T12227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.232514][T12227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.240153][T12227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.247313][T12227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.524409][ T8769] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1000.553432][T12227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1001.745389][ T27] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1006.293568][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1944'. [ 1009.043390][T12287] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1009.137488][T12287] CIFS: Attempting to mount //127.0.0.1/share [ 1009.238093][T12287] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1009.259542][T12287] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1011.285723][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1953'. [ 1011.296322][T12308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1953'. [ 1015.057031][T12313] 9pnet_fd: Insufficient options for proto=fd [ 1016.172408][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'. [ 1016.520145][T12339] hsr_slave_0 (unregistering): left promiscuous mode [ 1016.597330][T12349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1017.785287][T12351] fuse: Bad value for 'rootmode' [ 1017.994943][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1976'. [ 1018.004060][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 1018.049092][T12360] netlink: 'syz.0.1976': attribute type 4 has an invalid length. [ 1018.075552][T12360] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1976'. [ 1018.099475][T12360] .`: renamed from bond0 [ 1018.731684][T12370] IPVS: Error connecting to the multicast addr [ 1020.375217][T12376] mmap: syz.3.1982 (12376): VmData 26099712 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1022.285331][T12387] fuse: Bad value for 'rootmode' [ 1025.691113][T12432] tmpfs: Unknown parameter 'QO V¢òÿ' [ 1026.499347][T12436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1027.672756][T12451] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2003'. [ 1028.451092][T12475] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2012'. [ 1031.128768][T12502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1032.551507][T12492] fuse: Unknown parameter 'use00000000000000000000' [ 1032.771799][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 1032.785525][T12521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'. [ 1032.833988][T12523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2027'. [ 1032.844075][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 1032.915157][T12521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'. [ 1033.367798][T12534] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2030'. [ 1035.165334][T12554] fuse: Unknown parameter 'use00000000000000000000' [ 1035.826626][T12566] trusted_key: encrypted_key: key user:syz not found [ 1037.235206][T12578] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 1038.995324][T12589] fuse: Unknown parameter 'use00000000000000000000' [ 1043.065210][T12656] netlink: 'syz.2.2063': attribute type 1 has an invalid length. [ 1043.073849][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 1043.896709][T12667] jffs2: notice: (12667) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1046.162822][T12689] netlink: 'syz.3.2073': attribute type 1 has an invalid length. [ 1046.170655][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 1046.568621][T12704] ip_tables: iptables: counters copy to user failed while replacing table [ 1052.421732][T12809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2103'. [ 1053.793206][T12846] overlayfs: failed to clone upperpath [ 1054.669841][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.676548][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.805372][T12873] fuse: Unknown parameter 'user_id00000000000000000000' [ 1057.751480][T12897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1058.569914][T12901] netlink: 'syz.2.2137': attribute type 1 has an invalid length. [ 1058.577790][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 1061.263982][T12922] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 1061.272379][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2146'. [ 1061.623940][T12930] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2149'. [ 1063.946727][T12950] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 1063.954579][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 1064.375954][T12964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2158'. [ 1065.033106][T12986] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2168'. [ 1065.526116][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 1065.540746][T12997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'. [ 1065.551903][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 1065.561228][T12997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'. [ 1065.868138][T13007] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2177'. [ 1069.673051][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'. [ 1069.708903][T13026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2183'. [ 1069.737757][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'. [ 1069.761794][T13026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2183'. [ 1069.788803][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2184'. [ 1069.941166][T13036] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2187'. [ 1069.944484][T13031] macvlan2: entered promiscuous mode [ 1069.975687][T13031] macvlan2: entered allmulticast mode [ 1069.982613][T13031] bond2: entered promiscuous mode [ 1069.989499][T13031] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1070.002407][T13031] bond2: left promiscuous mode [ 1070.544947][T10681] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1071.126453][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 1071.140881][T13056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2195'. [ 1071.150749][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 1071.160467][T13056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2195'. [ 1071.225485][T10681] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1074.425468][T13079] fuse: Unknown parameter '0x0000000000000003' [ 1074.935187][T13109] veth0: entered promiscuous mode [ 1074.950267][T13109] veth0: left promiscuous mode [ 1074.971966][T13109] __nla_validate_parse: 2 callbacks suppressed [ 1074.972002][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'. [ 1075.745339][T13112] fuse: Unknown parameter '0x0000000000000003' [ 1075.970211][T13115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2218'. [ 1076.107675][T13122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2221'. [ 1077.305330][T13139] fuse: Unknown parameter '0x0000000000000003' [ 1077.578422][T13146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2231'. [ 1079.648005][T13173] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2240'. [ 1080.304681][T13188] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2246'. [ 1080.340410][T13188] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1080.365261][T13188] openvswitch: netlink: Message has 1 unknown bytes. [ 1081.095334][T13163] fuse: Unknown parameter '0x0000000000000003' [ 1081.220935][T13195] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2249'. [ 1081.573889][T13209] delete_channel: no stack [ 1082.355300][T13212] fuse: Unknown parameter '0x0000000000000003' [ 1084.010991][T13242] netlink: 'syz.3.2268': attribute type 29 has an invalid length. [ 1084.035479][T13242] netlink: 'syz.3.2268': attribute type 29 has an invalid length. [ 1084.064844][T13245] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2260'. [ 1084.082616][T13242] netlink: 'syz.3.2268': attribute type 29 has an invalid length. [ 1084.112934][T13242] netlink: 'syz.3.2268': attribute type 29 has an invalid length. [ 1084.146533][T13242] netlink: 'syz.3.2268': attribute type 29 has an invalid length. [ 1086.130863][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 1086.156181][T13290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 1086.181384][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 1086.215075][T13290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 1087.151921][T13298] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2280'. [ 1087.960254][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'. [ 1087.975241][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'. [ 1088.045535][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'. [ 1088.065494][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'. [ 1088.168639][T13316] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2298'. [ 1088.999759][T13341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1089.010741][T13341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1089.021246][T13341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1089.029824][T13341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1089.041694][T13341] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1089.055327][T13341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1089.380849][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.567815][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.958768][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.704403][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.741434][T13338] chnl_net:caif_netlink_parms(): no params data found [ 1091.660533][ T5086] Bluetooth: hci4: command tx timeout [ 1091.737826][ T59] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.773376][ T59] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.843025][ T59] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.981867][ T59] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1092.417976][T13338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.449192][T13338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.456904][T13338] bridge_slave_0: entered allmulticast mode [ 1092.479363][T13338] bridge_slave_0: entered promiscuous mode [ 1092.506898][T13338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.525055][T13338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.532762][T13338] bridge_slave_1: entered allmulticast mode [ 1092.557674][T13338] bridge_slave_1: entered promiscuous mode [ 1092.600838][T13395] __nla_validate_parse: 2 callbacks suppressed [ 1092.600857][T13395] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2325'. [ 1092.810841][T13338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.863361][T13338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.182138][T13338] team0: Port device team_slave_0 added [ 1093.274298][T13338] team0: Port device team_slave_1 added [ 1093.455833][T13338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.462827][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.539159][T13338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.618876][T13338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.652286][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.705878][ T5086] Bluetooth: hci4: command tx timeout [ 1093.713627][T13338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.761795][T13424] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2333'. [ 1094.091369][T13338] hsr_slave_0: entered promiscuous mode [ 1094.108474][T13338] hsr_slave_1: entered promiscuous mode [ 1094.125299][T13338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.133107][T13338] Cannot create hsr debugfs directory [ 1095.582324][ T59] hsr_slave_0: left promiscuous mode [ 1095.613994][ T59] hsr_slave_1: left promiscuous mode [ 1095.642177][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.659008][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.677953][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.695169][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.711308][ T59] bridge_slave_1: left allmulticast mode [ 1095.725012][ T59] bridge_slave_1: left promiscuous mode [ 1095.732609][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.760614][ T59] bridge_slave_0: left allmulticast mode [ 1095.772345][ T59] bridge_slave_0: left promiscuous mode [ 1095.787637][T13341] Bluetooth: hci4: command tx timeout [ 1095.799120][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.891000][ T59] veth1_macvtap: left promiscuous mode [ 1095.924385][ T59] veth0_macvtap: left promiscuous mode [ 1095.938600][ T59] veth1_vlan: left promiscuous mode [ 1095.961366][ T59] veth0_vlan: left promiscuous mode [ 1097.246491][ T59] bond1 (unregistering): Released all slaves [ 1097.865372][T13341] Bluetooth: hci4: command tx timeout [ 1099.913644][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1100.044666][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1100.488345][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1100.670599][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.555564][ T59] bond0 (unregistering): Released all slaves [ 1102.048206][T13338] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.221517][T13338] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.449067][T13338] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.501255][T13338] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.544372][ T59] IPVS: stop unused estimator thread 0... [ 1103.884273][T13338] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1104.304093][T13338] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1104.345899][T13338] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1104.386875][T13338] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1105.433882][T13338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.619318][T13338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.670496][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.677778][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.746372][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.753646][ T8377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.129542][T13338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.336189][T13338] veth0_vlan: entered promiscuous mode [ 1108.392982][T13338] veth1_vlan: entered promiscuous mode [ 1108.468456][T13338] veth0_macvtap: entered promiscuous mode [ 1108.490565][T13338] veth1_macvtap: entered promiscuous mode [ 1108.539600][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.565958][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.604963][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.628334][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.651764][T13338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.683864][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.720493][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.749480][T13338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.772200][T13338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.795724][T13338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.821923][T13338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.841311][T13338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.033482][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.109622][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.265875][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.273745][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.975598][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1113.986862][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1113.996096][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1114.004145][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1114.011870][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1114.020178][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1115.647330][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1115.647343][ T28] audit: type=1326 audit(1790735619.396:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.3.2390" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6879e159 code=0x7ffc0000 [ 1115.720389][ T7498] syz_tun (unregistering): left allmulticast mode [ 1115.747240][ T28] audit: type=1326 audit(1790735619.396:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.3.2390" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6879e159 code=0x7ffc0000 [ 1115.842966][T13651] chnl_net:caif_netlink_parms(): no params data found [ 1115.855565][ T28] audit: type=1326 audit(1790735619.396:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.3.2390" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6879e159 code=0x7ffc0000 [ 1115.914966][ T28] audit: type=1326 audit(1790735619.426:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.3.2390" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6879e159 code=0x7ffc0000 [ 1115.995111][ T28] audit: type=1326 audit(1790735619.426:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.3.2390" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2c6879e159 code=0x7ffc0000 [ 1116.050422][ T28] audit: type=1326 audit(1790735619.426:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.3.2390" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6879e159 code=0x7ffc0000 [ 1116.117845][ T5086] Bluetooth: hci3: command tx timeout [ 1116.176425][ T28] audit: type=1326 audit(1790735619.426:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.3.2390" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6879e159 code=0x7ffc0000 [ 1116.188760][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.207338][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.216824][ T28] audit: type=1326 audit(1790735619.426:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.3.2390" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6879e159 code=0x7ffc0000 [ 1116.241435][ T28] audit: type=1326 audit(1790735619.436:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.3.2390" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2c6879e159 code=0x7ffc0000 [ 1116.252801][ T3439] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.266307][ T28] audit: type=1326 audit(1790735619.436:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.3.2390" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6879e159 code=0x7ffc0000 [ 1116.304977][ T3439] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.511432][ T3439] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.522188][ T3439] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.670085][ T3439] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.685400][ T3439] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.754089][T13651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.775094][T13651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.785898][T13651] bridge_slave_0: entered allmulticast mode [ 1116.793234][T13651] bridge_slave_0: entered promiscuous mode [ 1116.826401][T13651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.833581][T13651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.863535][T13651] bridge_slave_1: entered allmulticast mode [ 1116.989680][T13651] bridge_slave_1: entered promiscuous mode [ 1117.167627][ T3439] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.689692][ T3439] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.548656][ T5086] Bluetooth: hci3: command tx timeout [ 1118.709705][T13651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.560801][T13651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.680325][T13651] team0: Port device team_slave_0 added [ 1119.818308][ T3439] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1119.857550][T13651] team0: Port device team_slave_1 added [ 1119.877376][ T3439] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1119.924354][ T3439] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1120.047088][ T3439] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1120.146326][T13651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.153337][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.204583][T13651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.240091][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'. [ 1120.266668][T13651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.295895][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.365069][T13651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.592355][ T5086] Bluetooth: hci3: command tx timeout [ 1121.477547][T13732] loop3: detected capacity change from 0 to 128 [ 1121.521442][T13732] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 1121.521761][T13651] hsr_slave_0: entered promiscuous mode [ 1121.596146][T13651] hsr_slave_1: entered promiscuous mode [ 1121.615985][T13651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1121.640674][T13651] Cannot create hsr debugfs directory [ 1122.671337][ T5086] Bluetooth: hci3: command tx timeout [ 1123.116417][T13651] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.277745][T13651] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.410246][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2407'. [ 1123.427521][ T3439] IPVS: stopping backup sync thread 12196 ... [ 1123.449338][T13651] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.634277][T13770] loop3: detected capacity change from 0 to 2048 [ 1123.650631][T13651] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.776679][T13612] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1124.093125][ T5086] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1124.209865][T13790] loop3: detected capacity change from 0 to 128 [ 1124.232030][T13790] UDF-fs: bad mount option "uid=ÿ" or missing value [ 1124.806134][ T3439] hsr_slave_0: left promiscuous mode [ 1124.819824][ T3439] hsr_slave_1: left promiscuous mode [ 1124.828781][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.838908][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.849579][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.878027][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.900300][ T3439] bridge_slave_1: left allmulticast mode [ 1124.910510][ T3439] bridge_slave_1: left promiscuous mode [ 1124.921741][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.940345][ T3439] bridge_slave_0: left allmulticast mode [ 1124.948881][ T3439] bridge_slave_0: left promiscuous mode [ 1124.955800][ T3439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.023811][ T3439] veth1_macvtap: left promiscuous mode [ 1125.035108][ T3439] veth0_macvtap: left promiscuous mode [ 1125.050929][ T3439] veth1_vlan: left promiscuous mode [ 1125.057882][ T3439] veth0_vlan: left promiscuous mode [ 1127.873003][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1127.873018][ T28] audit: type=1326 audit(1790735631.616:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13833 comm="syz.1.2427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe2fd9e159 code=0x0 [ 1128.268672][T13839] loop3: detected capacity change from 0 to 1024 [ 1129.108954][T13848] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2431'. [ 1129.150663][ T1865] hfsplus: b-tree write err: -5, ino 25 [ 1129.173065][ T1865] hfsplus: b-tree write err: -5, ino 4 [ 1129.206120][ T1865] hfsplus: b-tree write err: -5, ino 2 [ 1129.375541][ T3439] team0 (unregistering): Port device team_slave_1 removed [ 1130.267280][T13856] loop3: detected capacity change from 0 to 512 [ 1130.388941][ T3439] team0 (unregistering): Port device team_slave_0 removed [ 1130.389370][T13856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.440701][T13856] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.556751][ T3439] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.657306][T13338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.749476][ T3439] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.824206][T13866] loop3: detected capacity change from 0 to 2048 [ 1130.899321][T13866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1130.961085][T13338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.532329][ T3439] .` (unregistering): Released all slaves [ 1133.319634][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2437'. [ 1133.370152][T13870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2437'. [ 1133.379829][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2437'. [ 1133.395214][T13870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2437'. [ 1133.405030][T13651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1133.448694][T13651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1133.510132][T13651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1133.550074][T13651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1133.895411][T13651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.020030][T13651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.114280][ T1865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.121535][ T1865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.184598][ T1865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.191866][ T1865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.714281][ T3439] IPVS: stop unused estimator thread 0... [ 1135.043403][T13909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2450'. [ 1136.160252][T13651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.173723][T13651] veth0_vlan: entered promiscuous mode [ 1137.250182][T13651] veth1_vlan: entered promiscuous mode [ 1137.391317][T13651] veth0_macvtap: entered promiscuous mode [ 1137.420641][T13651] veth1_macvtap: entered promiscuous mode [ 1137.452274][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.469509][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.479945][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.494943][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.523139][T13651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.565076][T13651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.591800][T13651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.619169][T13651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.652206][T13651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.676154][T13651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.686068][T13651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.695299][T13651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.710664][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 1137.721218][T13938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2451'. [ 1137.739749][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 1137.750338][T13938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2451'. [ 1137.986987][T12343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.014612][T13941] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2454'. [ 1138.024372][T12343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.126017][ T8377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.144185][ T8377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.985207][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1140.029842][T13964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1140.066653][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1140.163595][T13964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1141.131309][T13972] loop3: detected capacity change from 0 to 128 [ 1141.169735][ T5773] syz_tun (unregistering): left allmulticast mode [ 1141.186207][T13972] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1141.220726][T13972] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1141.291231][ T5773] syz-executor (5773) used greatest stack depth: 20936 bytes left [ 1141.386491][T12343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.532260][T13338] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1141.583576][T12343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.600260][T13341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1141.614779][T13341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1141.625600][T13341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1141.642571][T13341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1141.661447][T13341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1141.670128][T13341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1141.749361][T12343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.760881][T13987] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2465'. [ 1141.927217][T12343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.113230][T12343] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.180884][T12343] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.255543][T12343] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.302953][T12343] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.346813][T13981] chnl_net:caif_netlink_parms(): no params data found [ 1143.705048][T13341] Bluetooth: hci0: command tx timeout [ 1143.904333][T14022] loop0: detected capacity change from 0 to 1024 [ 1144.142577][T13981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.165290][T13981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.182753][T13981] bridge_slave_0: entered allmulticast mode [ 1144.202946][T13981] bridge_slave_0: entered promiscuous mode [ 1144.273872][T13981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.299150][T13981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.330716][T13981] bridge_slave_1: entered allmulticast mode [ 1144.360654][T13981] bridge_slave_1: entered promiscuous mode [ 1144.439107][T14041] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2479'. [ 1144.477189][T13981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.524385][T13981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.285349][T13981] team0: Port device team_slave_0 added [ 1145.379079][T13981] team0: Port device team_slave_1 added [ 1145.643146][T13981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.661327][T13981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.729962][T13981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.785310][T13341] Bluetooth: hci0: command tx timeout [ 1145.798813][T14055] loop3: detected capacity change from 0 to 512 [ 1145.828961][T14055] EXT4-fs: Ignoring removed bh option [ 1145.885944][T13981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.912899][T14055] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1145.935008][T13981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.003640][T13981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.026937][T14073] loop0: detected capacity change from 0 to 1024 [ 1146.039499][T14055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.083546][T14055] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.323405][T13981] hsr_slave_0: entered promiscuous mode [ 1146.353244][T13981] hsr_slave_1: entered promiscuous mode [ 1146.377378][T13981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1146.404534][T13981] Cannot create hsr debugfs directory [ 1146.693357][T14090] loop0: detected capacity change from 0 to 1764 [ 1146.783851][T14090] ISOFS: unable to read i-node block [ 1146.802780][T14090] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1146.955132][T14095] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2489'. [ 1146.985612][T12343] hsr_slave_1: left promiscuous mode [ 1147.002041][T12343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.025678][T12343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.041302][T13338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.051407][T12343] bridge_slave_1: left allmulticast mode [ 1147.057900][T12343] bridge_slave_1: left promiscuous mode [ 1147.062850][T14097] loop0: detected capacity change from 0 to 4096 [ 1147.072473][T12343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.083133][T12343] bridge_slave_0: left allmulticast mode [ 1147.091100][T14097] EXT4-fs: inline encryption not supported [ 1147.105091][T12343] bridge_slave_0: left promiscuous mode [ 1147.111091][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.122099][T14097] EXT4-fs: Ignoring removed mblk_io_submit option [ 1147.174988][T14097] EXT4-fs: inline encryption not supported [ 1147.180946][T14097] ext4: Unknown parameter 'in' [ 1147.213535][T14100] loop3: detected capacity change from 0 to 128 [ 1147.225318][T12343] veth1_macvtap: left promiscuous mode [ 1147.235853][T12343] veth0_macvtap: left promiscuous mode [ 1147.242747][T12343] veth1_vlan: left promiscuous mode [ 1147.248331][T12343] veth0_vlan: left promiscuous mode [ 1147.634847][T14102] trusted_key: encrypted_key: insufficient parameters specified [ 1148.122210][T13341] Bluetooth: hci0: command tx timeout [ 1148.340720][T12343] bond2 (unregistering): Released all slaves [ 1148.388988][T12343] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 1148.405089][T12343] wireguard0 (unregistering): left promiscuous mode [ 1148.633388][T12343] bond1 (unregistering): Released all slaves [ 1149.134260][T12343] team0 (unregistering): Port device team_slave_1 removed [ 1149.184108][T12343] team0 (unregistering): Port device team_slave_0 removed [ 1149.236803][T12343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.288661][T12343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.674551][T12343] bond0 (unregistering): Released all slaves [ 1150.117888][T13981] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1150.185653][T13341] Bluetooth: hci0: command tx timeout [ 1150.245945][T14134] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2500'. [ 1150.290512][T13981] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1150.583676][T13981] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1150.827800][T13981] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1150.997320][T12343] IPVS: stop unused estimator thread 0... [ 1151.837957][T13981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1151.869620][T13981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1151.919592][T13981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1151.933956][T13981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1152.113818][T14166] loop3: detected capacity change from 0 to 2048 [ 1152.152574][T13981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.009910][T14166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1153.077655][T13981] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.126749][T12343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.133950][T12343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.166664][T12343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.174031][T12343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.575060][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1153.727241][T13981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.790863][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1153.802393][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 1153.821280][T13981] veth0_vlan: entered promiscuous mode [ 1153.829595][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.844627][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1153.862565][T13981] veth1_vlan: entered promiscuous mode [ 1153.870470][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1153.927127][T13981] veth0_macvtap: entered promiscuous mode [ 1153.935625][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.962621][ T8] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1153.970546][T13981] veth1_macvtap: entered promiscuous mode [ 1153.986197][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1154.012377][ T8] usb 4-1: Product: syz [ 1154.017555][ T8] usb 4-1: Manufacturer: syz [ 1154.049108][ T8] usb 4-1: Found UVC 1.00 device syz (8086:0ad2) [ 1154.051695][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.075306][ T8] usb 4-1: No streaming interface found for terminal 2. [ 1154.088747][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.109095][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.126095][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.210743][T13981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.242413][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.290426][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.324997][T13981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.343010][ T8769] usb 4-1: USB disconnect, device number 4 [ 1154.361226][T13981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.376290][T13981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.685838][T13981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.808007][T13981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.915248][T13981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.966054][T13981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.119506][T14206] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2514'. [ 1155.265957][T12343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.273899][T12343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.375713][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.383600][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.799921][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1156.809948][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1156.818133][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1156.826805][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1156.835120][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1156.842490][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1158.243739][T14251] loop1: detected capacity change from 0 to 4096 [ 1158.259280][T14251] EXT4-fs: inline encryption not supported [ 1158.273929][T14251] EXT4-fs: Ignoring removed mblk_io_submit option [ 1158.280549][T14251] EXT4-fs: inline encryption not supported [ 1158.287296][T14251] ext4: Unknown parameter 'in' [ 1158.498324][ T7363] syz_tun (unregistering): left allmulticast mode [ 1158.611933][T14263] trusted_key: encrypted_key: insufficient parameters specified [ 1158.940839][T13341] Bluetooth: hci2: command tx timeout [ 1159.081210][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'. [ 1159.141918][T14271] loop3: detected capacity change from 0 to 128 [ 1159.478760][T14277] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13338] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14277] [ 1160.182347][T14286] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2528'. [ 1161.408079][T13341] Bluetooth: hci2: command tx timeout [ 1161.428851][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.895471][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.938247][T14234] chnl_net:caif_netlink_parms(): no params data found [ 1162.056667][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.226137][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.221988][T14234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.265380][T14234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.295687][T14234] bridge_slave_0: entered allmulticast mode [ 1163.325289][T14234] bridge_slave_0: entered promiscuous mode [ 1163.340731][T14234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.368828][T14234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.388458][T14234] bridge_slave_1: entered allmulticast mode [ 1163.405917][T14234] bridge_slave_1: entered promiscuous mode [ 1163.453864][ T11] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1163.469921][T13341] Bluetooth: hci2: command tx timeout [ 1163.577646][ T11] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1163.610613][T14234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.667399][ T11] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1163.729636][ T11] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1163.758186][T14234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.217037][T14234] team0: Port device team_slave_0 added [ 1165.246314][T14234] team0: Port device team_slave_1 added [ 1165.253113][T14333] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2538'. [ 1165.367609][T14234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.374614][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.455240][T14234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.499729][T14234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.535198][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.546537][T13341] Bluetooth: hci2: command tx timeout [ 1165.600104][T14234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.371517][T14347] loop1: detected capacity change from 0 to 512 [ 1167.856284][T14234] hsr_slave_0: entered promiscuous mode [ 1167.909836][T14234] hsr_slave_1: entered promiscuous mode [ 1169.084310][T14366] loop0: detected capacity change from 0 to 2048 [ 1169.121280][T14234] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.163805][T14366] Alternate GPT is invalid, using primary GPT. [ 1169.256409][T14366] loop0: p2 p3 p7 [ 1169.292622][T14234] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.331976][T14372] usb usb8: usbfs: process 14372 (syz.3.2543) did not claim interface 0 before use [ 1169.461186][T14093] udevd[14093]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1169.468467][T13612] udevd[13612]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1169.480615][T13776] udevd[13776]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 1169.525903][T14234] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.418778][T14234] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.075098][T14234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1172.106950][T14234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1172.218374][T14234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1172.306842][ T11] hsr_slave_0: left promiscuous mode [ 1172.344269][ T11] hsr_slave_1: left promiscuous mode [ 1172.370335][ T11] bridge_slave_1: left allmulticast mode [ 1172.385037][ T11] bridge_slave_1: left promiscuous mode [ 1172.390896][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.421229][ T11] bridge_slave_0: left allmulticast mode [ 1172.438814][ T11] bridge_slave_0: left promiscuous mode [ 1172.444624][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.491669][ T11] veth1_macvtap: left promiscuous mode [ 1172.503099][ T11] veth0_macvtap: left promiscuous mode [ 1172.511114][ T11] veth1_vlan: left promiscuous mode [ 1172.520371][ T11] veth0_vlan: left promiscuous mode [ 1173.852323][T14415] loop1: detected capacity change from 0 to 512 [ 1173.911130][T14415] EXT4-fs: Ignoring removed bh option [ 1173.924686][T14415] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1173.959348][T14415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.981355][T14415] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1174.917771][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1174.966645][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1175.025377][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.075519][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.407805][T14428] loop3: detected capacity change from 0 to 256 [ 1175.455705][T14428] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1175.464794][T14428] FAT-fs (loop3): bogus number of directory entries (1) [ 1175.503031][ T11] bond0 (unregistering): Released all slaves [ 1175.509160][T14428] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1175.655788][T14234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1175.673994][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 1175.684179][T14410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2546'. [ 1175.689353][T14433] loop3: detected capacity change from 0 to 128 [ 1175.726219][T14410] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.736009][T14410] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.744760][T14410] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.753896][T14410] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1175.767346][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 1175.779438][T14410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2546'. [ 1176.054051][T14234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.373132][T14234] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.382641][T13981] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.487411][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.494599][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.549641][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.556450][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.607973][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.615220][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.800043][ T11] IPVS: stop unused estimator thread 0... [ 1177.945016][ T5832] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1178.029986][T14462] netlink: 508 bytes leftover after parsing attributes in process `syz.0.2563'. [ 1178.176016][ T5832] usb 2-1: config 1 has an invalid interface number: 64 but max is 0 [ 1178.184169][ T5832] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.228327][ T5832] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1178.250456][ T5832] usb 2-1: config 1 has no interface number 1 [ 1178.267991][ T5832] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1178.284702][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.300036][T14234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.303428][ T5832] usb 2-1: Product: syz [ 1178.312349][ T5832] usb 2-1: Manufacturer: syz [ 1178.328915][ T5832] usb 2-1: SerialNumber: syz [ 1178.356923][ T5832] usb-storage 2-1:1.64: USB Mass Storage device detected [ 1178.396542][ T5832] usb-storage 2-1:1.64: Quirks match for vid 174c pid 55aa: 400000 [ 1178.441924][T14234] veth0_vlan: entered promiscuous mode [ 1178.445190][ T5832] scsi host1: usb-storage 2-1:1.64 [ 1178.464470][ T5832] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1178.510587][T14234] veth1_vlan: entered promiscuous mode [ 1178.518735][ T5832] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1178.592390][T14234] veth0_macvtap: entered promiscuous mode [ 1178.604429][T14234] veth1_macvtap: entered promiscuous mode [ 1178.639755][ T5832] usb 2-1: USB disconnect, device number 6 [ 1178.660549][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.697897][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.734967][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.760217][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.770765][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.782233][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.801063][T14234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.880591][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 1178.915043][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'. [ 1178.938344][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.960760][T14490] loop3: detected capacity change from 0 to 512 [ 1178.967464][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.983547][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.995279][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.010491][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.023880][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.586629][T14234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.606896][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 1179.647203][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'. [ 1179.677977][T14234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.699965][T14234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.728137][T14234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.752630][T14234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.237091][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.245144][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.361936][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.382830][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.556794][T14554] loop1: detected capacity change from 0 to 128 [ 1188.615018][T14554] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1188.724949][ T28] audit: type=1800 audit(1790735692.456:284): pid=14554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2585" name="bus" dev="loop1" ino=1048607 res=0 errno=0 [ 1188.837134][T14554] syz.1.2585: attempt to access beyond end of device [ 1188.837134][T14554] loop1: rw=0, sector=124, nr_sectors = 8 limit=128 [ 1189.162098][ T3464] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1189.189884][ T3464] kworker/u4:10: attempt to access beyond end of device [ 1189.189884][ T3464] loop1: rw=1, sector=132, nr_sectors = 24 limit=128 [ 1190.459502][T14565] syz.1.2590 (14565) used greatest stack depth: 17384 bytes left [ 1190.643095][T14572] fuse: Unknown parameter 'group_id00000000000000000000' [ 1191.745828][ T5811] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1194.355079][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 1194.415651][ T5811] usb 2-1: device descriptor read/all, error -71 [ 1198.558494][T14608] loop2: detected capacity change from 0 to 1024 [ 1198.644532][T14608] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1198.670777][T14608] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1198.729326][T14608] EXT4-fs (loop2): invalid journal inode [ 1198.749700][T14608] EXT4-fs (loop2): can't get journal size [ 1198.780345][T14608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1198.929107][T14234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.059455][T14627] loop2: detected capacity change from 0 to 1024 [ 1202.090323][T14627] hfsplus: umask requires a value [ 1202.145014][T14627] hfsplus: unable to parse mount options [ 1207.418064][T14650] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2610'. [ 1208.036525][T14655] loop0: detected capacity change from 0 to 16 [ 1208.085925][T14655] erofs: (device loop0): mounted with root inode @ nid 36. [ 1208.143062][T14655] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 1209.249049][T14669] loop2: detected capacity change from 0 to 128 [ 1209.279962][T14669] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1209.324043][T14669] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1210.126361][T14234] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1212.168298][T14685] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2626'. [ 1212.458244][T14696] block nbd3: NBD_DISCONNECT [ 1216.950554][ T5812] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1216.964996][ T5086] Bluetooth: hci4: command 0x0406 tx timeout [ 1217.000261][T14711] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2636'. [ 1217.145138][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 1217.152454][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.175207][ T5812] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1217.184247][ T5812] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1217.211496][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.254754][ T5812] usb 4-1: config 0 descriptor?? [ 1218.064972][ T5775] usb 4-1: USB disconnect, device number 5 [ 1220.842372][T14730] block nbd3: NBD_DISCONNECT [ 1225.886254][T14752] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2647'. [ 1226.840959][T14764] loop3: detected capacity change from 0 to 128 [ 1226.888049][T14767] block nbd0: NBD_DISCONNECT [ 1227.059652][T14764] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1227.876006][T14764] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.446851][T13338] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1231.500936][T14781] loop3: detected capacity change from 0 to 1024 [ 1231.641572][T14781] EXT4-fs: Ignoring removed mblk_io_submit option [ 1231.844493][T14781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1232.008526][T14781] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1232.357517][T14781] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #11: comm syz.3.2656: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1232.410538][T14781] EXT4-fs (loop3): Remounting filesystem read-only [ 1232.426413][T14781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1233.828058][T13338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.107182][T14798] block nbd2: NBD_DISCONNECT [ 1236.112364][T14810] loop2: detected capacity change from 0 to 736 [ 1236.224025][T14810] Bluetooth: MGMT ver 1.22 [ 1238.264994][T14714] Bluetooth: hci0: command 0x0c13 tx timeout [ 1238.264990][T13341] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1238.450437][T14826] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2659'. [ 1238.994046][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.039555][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.078174][T13341] Bluetooth: hci3: command 0x0406 tx timeout [ 1242.275279][T13939] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1242.402426][ T28] audit: type=1326 audit(1790735746.146:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.1.2670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1243.294951][ T28] audit: type=1326 audit(1790735746.176:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.1.2670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1243.326357][T13939] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.345245][T13939] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1243.367126][ T28] audit: type=1326 audit(1790735746.176:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.1.2670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1243.384944][T13939] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1243.423104][ T28] audit: type=1326 audit(1790735746.176:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.1.2670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1243.425068][T13939] usb 1-1: New USB device found, idVendor=056a, idProduct=51ab, bcdDevice= 0.00 [ 1243.485009][ T28] audit: type=1326 audit(1790735746.176:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.1.2670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1243.504949][T13939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.550458][T13939] usb 1-1: config 0 descriptor?? [ 1243.550527][ T28] audit: type=1326 audit(1790735746.186:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.1.2670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1243.618050][ T28] audit: type=1326 audit(1790735747.006:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.1.2670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1243.683825][ T28] audit: type=1326 audit(1790735747.006:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.1.2670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f329ab9dec2 code=0x7ffc0000 [ 1245.398614][T13939] usbhid 1-1:0.0: can't add hid device: -71 [ 1245.411844][T13939] usbhid: probe of 1-1:0.0 failed with error -71 [ 1245.455450][T13939] usb 1-1: USB disconnect, device number 6 [ 1245.529945][T14857] loop0: detected capacity change from 0 to 128 [ 1245.567555][T14857] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1248.572032][ T28] audit: type=1800 audit(1790735752.316:293): pid=14857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2678" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 1249.820793][T14876] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2677'. [ 1250.150474][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2684'. [ 1250.167562][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2684'. [ 1250.216601][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2684'. [ 1250.240224][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2684'. [ 1250.413088][T14895] loop3: detected capacity change from 0 to 16 [ 1250.428708][T14895] erofs: (device loop3): mounted with root inode @ nid 36. [ 1250.511960][T14897] netlink: 79 bytes leftover after parsing attributes in process `syz.2.2687'. [ 1251.444239][ T28] audit: type=1326 audit(1790735755.186:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1251.475258][ T28] audit: type=1326 audit(1790735755.186:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1251.505234][ T28] audit: type=1326 audit(1790735755.226:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1251.545460][ T28] audit: type=1326 audit(1790735755.226:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1251.570036][ T28] audit: type=1326 audit(1790735755.226:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1251.598054][ T28] audit: type=1326 audit(1790735755.226:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1251.682582][ T28] audit: type=1326 audit(1790735755.226:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1251.707350][ T28] audit: type=1326 audit(1790735755.256:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1252.184328][ T28] audit: type=1326 audit(1790735755.266:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1253.755351][ T28] audit: type=1326 audit(1790735755.266:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1254.515841][T14921] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 1255.199794][ T28] audit: type=1326 audit(1790735755.266:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1255.261806][T14928] loop3: detected capacity change from 0 to 16 [ 1255.307206][T14928] erofs: (device loop3): mounted with root inode @ nid 36. [ 1255.315481][ T28] audit: type=1326 audit(1790735755.276:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1255.395016][ T28] audit: type=1326 audit(1790735755.276:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1255.474939][ T28] audit: type=1326 audit(1790735755.276:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1255.565043][ T28] audit: type=1326 audit(1790735755.376:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1255.655615][ T28] audit: type=1326 audit(1790735755.376:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1255.758622][ T28] audit: type=1326 audit(1790735755.386:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1255.843701][ T28] audit: type=1326 audit(1790735755.386:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1255.894960][ T28] audit: type=1326 audit(1790735755.386:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.1.2690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1256.338386][T14714] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 1256.453451][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 1256.462712][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2695'. [ 1256.496987][T14945] loop2: detected capacity change from 0 to 256 [ 1256.535784][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 1256.545198][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2695'. [ 1256.886273][T14945] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1256.896973][T14945] FAT-fs (loop2): Filesystem has been set read-only [ 1256.903664][T14945] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1256.917253][T14945] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1257.698446][T14953] netlink: 79 bytes leftover after parsing attributes in process `syz.0.2704'. [ 1257.741471][T14958] loop2: detected capacity change from 0 to 256 [ 1257.773819][T14958] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1258.161230][T14967] loop1: detected capacity change from 0 to 16 [ 1258.897362][T14967] erofs: (device loop1): mounted with root inode @ nid 36. [ 1261.025674][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 1261.051751][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2713'. [ 1261.173525][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 1261.191468][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2713'. [ 1261.327052][T14986] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2715'. [ 1262.910613][T15000] loop1: detected capacity change from 0 to 256 [ 1263.990749][T15004] loop3: detected capacity change from 0 to 16 [ 1264.005772][T15004] erofs: (device loop3): mounted with root inode @ nid 36. [ 1265.761871][T15010] loop2: detected capacity change from 0 to 512 [ 1265.938713][T15010] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1266.182059][T15010] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1266.193227][T13341] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1266.203304][T13341] Bluetooth: hci2: Injecting HCI hardware error event [ 1266.213367][ T9067] Bluetooth: hci2: hardware error 0x00 [ 1266.542912][T15010] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2722: invalid indirect mapped block 9 (level 0) [ 1266.676251][T13341] Bluetooth: hci0: command 0x0c13 tx timeout [ 1267.024592][T15010] EXT4-fs (loop2): 1 truncate cleaned up [ 1267.031734][T15010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1267.102788][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 1267.102803][ T28] audit: type=1800 audit(1790735770.846:338): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2722" name="file0" dev="loop2" ino=19 res=0 errno=0 [ 1267.163275][T14234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.174622][T15015] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 1267.351239][T15022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2726'. [ 1267.543655][T15028] loop3: detected capacity change from 0 to 2048 [ 1267.585407][T14507] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1267.693194][T15031] block nbd0: NBD_DISCONNECT [ 1267.774970][T14507] usb 3-1: Using ep0 maxpacket: 16 [ 1268.425055][ T9067] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1268.511391][T15020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.521585][T15020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.545471][T14507] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1268.553325][T14507] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1268.571426][T14507] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1268.579375][T13338] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 1268.588337][T14507] usb 3-1: can't read configurations, error -71 [ 1268.595960][T13338] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 1268.602307][T15034] loop0: detected capacity change from 0 to 16 [ 1268.641716][T15034] erofs: (device loop0): mounted with root inode @ nid 36. [ 1269.880928][T14733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.032202][T14733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.128602][T14733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.206162][T15060] block nbd1: NBD_DISCONNECT [ 1270.700892][T14733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.025375][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 1271.034330][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2741'. [ 1271.136422][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 1271.145676][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2741'. [ 1271.279087][T14733] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.390339][T14733] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.993182][T14733] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.130453][T14733] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.004013][T15084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1273.012001][T15084] IPv6: NLM_F_CREATE should be set when creating new route [ 1273.083260][ T9067] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1273.099647][ T9067] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1273.155914][ T9067] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1273.194463][ T9067] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1273.201995][T15093] Bluetooth: MGMT ver 1.22 [ 1273.212867][ T9067] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1273.222905][ T9067] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1273.271240][T15084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1273.326999][T15093] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 1273.582509][T15106] loop2: detected capacity change from 0 to 1024 [ 1273.728358][T15114] block nbd1: NBD_DISCONNECT [ 1274.247681][T15106] ip_tables: iptables: counters copy to user failed while replacing table [ 1275.314211][T14714] Bluetooth: hci1: command tx timeout [ 1275.891845][T15127] nvme_tcp: malformed address passed: ::8009 [ 1277.060659][T15086] chnl_net:caif_netlink_parms(): no params data found [ 1277.072729][T15149] FAULT_INJECTION: forcing a failure. [ 1277.072729][T15149] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.088516][T15149] CPU: 0 PID: 15149 Comm: syz.2.2758 Not tainted syzkaller #0 [ 1277.096043][T15149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1277.106133][T15149] Call Trace: [ 1277.109440][T15149] [ 1277.112414][T15149] dump_stack_lvl+0x18c/0x250 [ 1277.117198][T15149] ? show_regs_print_info+0x20/0x20 [ 1277.122431][T15149] ? load_image+0x420/0x420 [ 1277.126984][T15149] ? __might_sleep+0xe0/0xe0 [ 1277.131651][T15149] ? __lock_acquire+0x7d80/0x7d80 [ 1277.136724][T15149] should_fail_ex+0x394/0x4c0 [ 1277.141452][T15149] should_failslab+0x9/0x20 [ 1277.145996][T15149] slab_pre_alloc_hook+0x59/0x300 [ 1277.151088][T15149] kmem_cache_alloc+0x5a/0x2c0 [ 1277.156095][T15149] ? security_inode_alloc+0x34/0x110 [ 1277.161447][T15149] security_inode_alloc+0x34/0x110 [ 1277.166572][T15149] inode_init_always+0x914/0xc90 [ 1277.171535][T15149] new_inode_pseudo+0x95/0x1d0 [ 1277.176324][T15149] new_inode+0x22/0x1d0 [ 1277.180503][T15149] ? init_timer_key+0x161/0x2a0 [ 1277.185361][T15149] bdev_alloc+0x24/0x340 [ 1277.189644][T15149] __alloc_disk_node+0x12b/0x570 [ 1277.194592][T15149] __blk_alloc_disk+0x2e/0x80 [ 1277.199288][T15149] dm_create+0x46f/0xf90 [ 1277.203584][T15149] dev_create+0x1f8/0x400 [ 1277.207977][T15149] ? list_devices+0x820/0x820 [ 1277.212658][T15149] ? __might_fault+0xaa/0x120 [ 1277.217344][T15149] ? __might_fault+0xc6/0x120 [ 1277.222025][T15149] ? __might_fault+0xaa/0x120 [ 1277.226706][T15149] ? list_devices+0x820/0x820 [ 1277.231392][T15149] dm_ctl_ioctl+0x975/0xd00 [ 1277.235904][T15149] ? list_devices+0x820/0x820 [ 1277.240582][T15149] ? dm_poll+0x120/0x120 [ 1277.244849][T15149] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1277.249807][T15149] ? security_file_ioctl+0x80/0xa0 [ 1277.254924][T15149] ? dm_poll+0x120/0x120 [ 1277.259165][T15149] __se_sys_ioctl+0xfd/0x170 [ 1277.263761][T15149] do_syscall_64+0x55/0xb0 [ 1277.268203][T15149] ? clear_bhb_loop+0x40/0x90 [ 1277.272906][T15149] ? clear_bhb_loop+0x40/0x90 [ 1277.277619][T15149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1277.283515][T15149] RIP: 0033:0x7f5c78d9e159 [ 1277.287937][T15149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.307647][T15149] RSP: 002b:00007f5c79ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.316082][T15149] RAX: ffffffffffffffda RBX: 00007f5c79025fa0 RCX: 00007f5c78d9e159 [ 1277.324074][T15149] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 1277.332079][T15149] RBP: 00007f5c78e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1277.340062][T15149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1277.348034][T15149] R13: 00007f5c79026038 R14: 00007f5c79025fa0 R15: 00007ffe5c597d88 [ 1277.356025][T15149] [ 1277.388116][T14714] Bluetooth: hci1: command tx timeout [ 1277.677063][T15157] block nbd1: NBD_DISCONNECT [ 1278.693695][ T28] audit: type=1326 audit(1790735782.436:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.2.2762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c78d9e159 code=0x7ffc0000 [ 1278.719202][ T28] audit: type=1326 audit(1790735782.436:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.2.2762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c78d9e159 code=0x7ffc0000 [ 1278.743919][ T28] audit: type=1326 audit(1790735782.466:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.2.2762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c78d9e159 code=0x7ffc0000 [ 1278.768974][ T28] audit: type=1326 audit(1790735782.466:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.2.2762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c78d9e159 code=0x7ffc0000 [ 1278.797753][T14733] hsr_slave_0: left promiscuous mode [ 1278.832048][ T28] audit: type=1326 audit(1790735782.466:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.2.2762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c78d9e159 code=0x7ffc0000 [ 1278.832094][ T28] audit: type=1326 audit(1790735782.466:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.2.2762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c78d9e159 code=0x7ffc0000 [ 1278.832135][ T28] audit: type=1326 audit(1790735782.536:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.2.2762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c78d9e159 code=0x7ffc0000 [ 1278.832175][ T28] audit: type=1326 audit(1790735782.536:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.2.2762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c78d9dec2 code=0x7ffc0000 [ 1278.832213][ T28] audit: type=1326 audit(1790735782.536:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.2.2762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5c78d9df57 code=0x7ffc0000 [ 1278.832251][ T28] audit: type=1326 audit(1790735782.546:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15169 comm="syz.2.2762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5c78d5ae51 code=0x7ffc0000 [ 1278.836322][T14733] hsr_slave_1: left promiscuous mode [ 1278.837226][T14733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.837269][T14733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.838036][T14733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.838058][T14733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.839326][T14733] bridge_slave_1: left allmulticast mode [ 1278.839348][T14733] bridge_slave_1: left promiscuous mode [ 1278.839554][T14733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.842989][T14733] bridge_slave_0: left allmulticast mode [ 1278.843011][T14733] bridge_slave_0: left promiscuous mode [ 1278.843178][T14733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.927752][T14733] veth1_macvtap: left promiscuous mode [ 1278.927878][T14733] veth0_macvtap: left promiscuous mode [ 1278.928045][T14733] veth1_vlan: left promiscuous mode [ 1278.928165][T14733] veth0_vlan: left promiscuous mode [ 1279.465204][T14714] Bluetooth: hci1: command tx timeout [ 1281.764645][T14714] Bluetooth: hci1: command tx timeout [ 1283.534552][T14507] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1283.697226][ T28] kauditd_printk_skb: 158 callbacks suppressed [ 1283.697241][ T28] audit: type=1326 audit(1790735787.446:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.0.2772" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a59e159 code=0x7ffc0000 [ 1283.780459][ T28] audit: type=1326 audit(1790735787.486:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.0.2772" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a59e159 code=0x7ffc0000 [ 1283.821975][T14507] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1283.835132][T14507] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1283.858568][ T28] audit: type=1326 audit(1790735787.486:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.0.2772" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a59e159 code=0x7ffc0000 [ 1283.883486][T14507] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1283.907680][T14507] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1283.918116][ T28] audit: type=1326 audit(1790735787.486:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.0.2772" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a59e159 code=0x7ffc0000 [ 1283.944963][T14507] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1283.954057][T14507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.997650][ T28] audit: type=1326 audit(1790735787.486:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.0.2772" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc5a59e159 code=0x7ffc0000 [ 1284.023466][T15187] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1284.060825][T15187] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1284.070551][T14507] pl2303 2-1:1.0: pl2303 converter detected [ 1284.101220][T14507] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 1284.115310][ T28] audit: type=1326 audit(1790735787.486:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.0.2772" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a59e159 code=0x7ffc0000 [ 1284.181593][ T28] audit: type=1326 audit(1790735787.486:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.0.2772" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a59e159 code=0x7ffc0000 [ 1284.215229][ T28] audit: type=1326 audit(1790735787.486:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.0.2772" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a59e159 code=0x7ffc0000 [ 1284.239855][ T28] audit: type=1326 audit(1790735787.486:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.0.2772" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a59e159 code=0x7ffc0000 [ 1284.264556][ T28] audit: type=1326 audit(1790735787.496:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.0.2772" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbc5a59e159 code=0x7ffc0000 [ 1284.420268][ T5775] usb 2-1: USB disconnect, device number 9 [ 1284.446894][T15187] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 1284.480458][T15208] block nbd2: NBD_DISCONNECT [ 1284.593149][T15187] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19 [ 1284.650450][T15187] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 1284.701190][T15187] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 1284.745668][T15187] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 1284.913108][ T5775] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1285.040352][ T5775] pl2303 2-1:1.0: device disconnected [ 1285.277300][T14733] team0 (unregistering): Port device team_slave_1 removed [ 1285.353510][T14733] team0 (unregistering): Port device team_slave_0 removed [ 1285.422260][T14733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.490344][T14733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1287.216662][T14733] bond0 (unregistering): Released all slaves [ 1287.515167][T15086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.523034][T15086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.561562][T15086] bridge_slave_0: entered allmulticast mode [ 1287.582535][T15086] bridge_slave_0: entered promiscuous mode [ 1287.592015][T15086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.607707][T15086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.622757][T15086] bridge_slave_1: entered allmulticast mode [ 1287.642384][T15086] bridge_slave_1: entered promiscuous mode [ 1290.611343][T15086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.633136][T15086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.633658][T15244] FAULT_INJECTION: forcing a failure. [ 1290.633658][T15244] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.670484][T15244] CPU: 1 PID: 15244 Comm: syz.2.2783 Not tainted syzkaller #0 [ 1290.678020][T15244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1290.688088][T15244] Call Trace: [ 1290.691368][T15244] [ 1290.694297][T15244] dump_stack_lvl+0x18c/0x250 [ 1290.699097][T15244] ? show_regs_print_info+0x20/0x20 [ 1290.704332][T15244] ? load_image+0x420/0x420 [ 1290.708850][T15244] ? __might_sleep+0xe0/0xe0 [ 1290.713453][T15244] ? __lock_acquire+0x7d80/0x7d80 [ 1290.718489][T15244] should_fail_ex+0x394/0x4c0 [ 1290.723278][T15244] should_failslab+0x9/0x20 [ 1290.727786][T15244] slab_pre_alloc_hook+0x59/0x300 [ 1290.732831][T15244] kmem_cache_alloc+0x5a/0x2c0 [ 1290.737692][T15244] ? __kernfs_new_node+0xe5/0x7f0 [ 1290.742854][T15244] __kernfs_new_node+0xe5/0x7f0 [ 1290.747806][T15244] ? kernfs_new_node+0x260/0x260 [ 1290.752763][T15244] ? kernfs_create_dir_ns+0x112/0x120 [ 1290.758144][T15244] ? sysfs_create_dir_ns+0x130/0x2a0 [ 1290.763434][T15244] ? sysfs_create_dir_ns+0x16b/0x2a0 [ 1290.768734][T15244] ? __lock_acquire+0x7d80/0x7d80 [ 1290.773765][T15244] kernfs_new_node+0x14c/0x260 [ 1290.778539][T15244] __kernfs_create_file+0x4b/0x2e0 [ 1290.783653][T15244] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1290.789029][T15244] sysfs_create_file_ns+0x12c/0x1b0 [ 1290.794228][T15244] ? sysfs_add_bin_file_mode_ns+0x200/0x200 [ 1290.800136][T15244] ? __dev_fwnode+0x50/0x80 [ 1290.804778][T15244] device_add+0x4d8/0xc40 [ 1290.809202][T15244] iommufd_test+0x121d/0x2a20 [ 1290.813919][T15244] ? iommufd_selftest_destroy+0xf0/0xf0 [ 1290.819467][T15244] ? __lock_acquire+0x7d80/0x7d80 [ 1290.824505][T15244] ? __lock_acquire+0x7d80/0x7d80 [ 1290.829556][T15244] ? __might_fault+0xaa/0x120 [ 1290.834239][T15244] ? __might_fault+0xaa/0x120 [ 1290.838931][T15244] iommufd_fops_ioctl+0x48b/0x540 [ 1290.843979][T15244] ? iommufd_ctx_put+0x40/0x40 [ 1290.848763][T15244] ? __fget_files+0x28/0x460 [ 1290.853365][T15244] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1290.858304][T15244] ? security_file_ioctl+0x80/0xa0 [ 1290.863429][T15244] ? iommufd_ctx_put+0x40/0x40 [ 1290.868193][T15244] __se_sys_ioctl+0xfd/0x170 [ 1290.872791][T15244] do_syscall_64+0x55/0xb0 [ 1290.877210][T15244] ? clear_bhb_loop+0x40/0x90 [ 1290.881976][T15244] ? clear_bhb_loop+0x40/0x90 [ 1290.886656][T15244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1290.892553][T15244] RIP: 0033:0x7f5c78d9e159 [ 1290.896983][T15244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.916594][T15244] RSP: 002b:00007f5c79ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1290.925022][T15244] RAX: ffffffffffffffda RBX: 00007f5c79025fa0 RCX: 00007f5c78d9e159 [ 1290.932998][T15244] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1290.940970][T15244] RBP: 00007f5c78e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1290.948941][T15244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1290.956909][T15244] R13: 00007f5c79026038 R14: 00007f5c79025fa0 R15: 00007ffe5c597d88 [ 1290.964897][T15244] [ 1290.989053][T15247] loop2: detected capacity change from 0 to 512 [ 1290.995361][T15086] team0: Port device team_slave_0 added [ 1291.017559][T15086] team0: Port device team_slave_1 added [ 1291.066534][T15247] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1291.119530][T15247] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1291.191747][T15247] EXT4-fs error (device loop2): ext4_quota_enable:7140: comm syz.2.2783: Bad quota inum: 393216, type: 0 [ 1291.209980][T15086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.226135][T15086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.243620][T15247] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=393216). Please run e2fsck to fix. [ 1291.303137][T15086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.321275][T15086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.328843][T15086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.357070][T15247] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1291.365577][T15247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1291.378141][T15086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.431811][T15086] hsr_slave_0: entered promiscuous mode [ 1291.438505][T15086] hsr_slave_1: entered promiscuous mode [ 1291.445574][T15086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1291.453833][T15086] Cannot create hsr debugfs directory [ 1291.594453][T14234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.601712][T15086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1292.622927][T15086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1292.645615][T15086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1292.666434][T15086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1292.859870][T15086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.910013][T15086] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.947879][T14733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.955095][T14733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.016913][T14733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.024107][T14733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.122102][T15086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.661412][T15086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.777661][T15307] netlink: 95 bytes leftover after parsing attributes in process `syz.1.2797'. [ 1294.839881][T15086] veth0_vlan: entered promiscuous mode [ 1294.912950][T15086] veth1_vlan: entered promiscuous mode [ 1295.038736][T15086] veth0_macvtap: entered promiscuous mode [ 1295.068628][T15086] veth1_macvtap: entered promiscuous mode [ 1295.156464][T15086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.174924][T15086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.196162][T15086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.215148][T15086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.235160][T15086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.255009][T15086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.278635][T15086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.326236][T15086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.344921][T15086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.365157][T15086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.394916][T15086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.415116][T15086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.426347][T15086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.447928][T15086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.452588][T15332] loop1: detected capacity change from 0 to 32768 [ 1295.487862][T15332] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2801 (15332) [ 1295.495660][T15086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.529843][T15086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.566094][T15086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.577649][T15086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.591695][T15332] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1295.620197][T15332] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1295.652492][T15332] BTRFS info (device loop1): force clearing of disk cache [ 1295.695584][T15332] BTRFS info (device loop1): use zlib compression, level 3 [ 1295.702875][T15332] BTRFS info (device loop1): enabling ssd optimizations [ 1295.715713][T15332] BTRFS info (device loop1): using spread ssd allocation scheme [ 1295.723558][T15332] BTRFS info (device loop1): using free space tree [ 1295.891326][T15332] BTRFS info (device loop1): auto enabling async discard [ 1295.932296][T15332] BTRFS info (device loop1): rebuilding free space tree [ 1296.053151][T15332] BTRFS info (device loop1): checking UUID tree [ 1296.272465][T15363] netlink: 95 bytes leftover after parsing attributes in process `syz.0.2806'. [ 1296.805845][T15309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1297.419681][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.449243][T15332] BTRFS info (device loop1): balance: start -d -m [ 1297.464161][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.529878][T15332] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 1297.567934][T14382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.595984][T14382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.771581][T15332] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 1298.605871][T15394] loop4: detected capacity change from 0 to 16 [ 1298.721620][T15394] erofs: (device loop4): mounted with root inode @ nid 36. [ 1298.744314][T15394] x_tables: unsorted entry at hook 3 [ 1299.214163][T15332] BTRFS info (device loop1): balance: canceled [ 1299.260367][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1299.260381][ T28] audit: type=1326 audit(1790735803.006:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15398 comm="syz.4.2812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ccb9e159 code=0x7ffc0000 [ 1299.340980][ T28] audit: type=1326 audit(1790735803.006:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15398 comm="syz.4.2812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ccb9e159 code=0x7ffc0000 [ 1299.435159][ T28] audit: type=1326 audit(1790735803.006:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15398 comm="syz.4.2812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ccb9e159 code=0x7ffc0000 [ 1300.687233][T15404] netlink: 95 bytes leftover after parsing attributes in process `syz.2.2814'. [ 1300.696775][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.703114][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.752996][ T28] audit: type=1326 audit(1790735803.006:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15398 comm="syz.4.2812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ccb9e159 code=0x7ffc0000 [ 1300.830651][T13981] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1300.881429][ T28] audit: type=1326 audit(1790735803.006:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15398 comm="syz.4.2812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ccb9e159 code=0x7ffc0000 [ 1300.941023][T15412] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1300.964493][ T28] audit: type=1326 audit(1790735803.006:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15398 comm="syz.4.2812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0ccb9e159 code=0x7ffc0000 [ 1300.997268][ T28] audit: type=1326 audit(1790735803.006:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15398 comm="syz.4.2812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ccb9e159 code=0x7ffc0000 [ 1301.081140][ T28] audit: type=1326 audit(1790735803.016:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15398 comm="syz.4.2812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ccb9e159 code=0x7ffc0000 [ 1301.192291][ T28] audit: type=1326 audit(1790735803.016:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15398 comm="syz.4.2812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ccb9e159 code=0x7ffc0000 [ 1301.237038][ T28] audit: type=1326 audit(1790735803.016:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15398 comm="syz.4.2812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc0ccb9e159 code=0x7ffc0000 [ 1303.156055][T15448] ip_tables: iptables: counters copy to user failed while replacing table [ 1303.200316][T15453] netlink: 87 bytes leftover after parsing attributes in process `syz.2.2826'. [ 1305.956657][T15488] loop4: detected capacity change from 0 to 16 [ 1305.995593][T15488] erofs: (device loop4): mounted with root inode @ nid 36. [ 1307.736009][T15521] netlink: 87 bytes leftover after parsing attributes in process `syz.2.2839'. [ 1308.504985][ C0] net_ratelimit: 10 callbacks suppressed [ 1309.272503][T15540] loop4: detected capacity change from 0 to 16 [ 1309.305488][T15540] erofs: (device loop4): mounted with root inode @ nid 36. [ 1310.531723][T15551] netlink: 87 bytes leftover after parsing attributes in process `syz.4.2849'. [ 1314.024942][ C1] net_ratelimit: 35 callbacks suppressed [ 1314.114733][T15585] loop2: detected capacity change from 0 to 2048 [ 1314.294796][T15589] netlink: 79 bytes leftover after parsing attributes in process `syz.0.2858'. [ 1314.309327][T15585] Alternate GPT is invalid, using primary GPT. [ 1314.352942][T15585] loop2: p1 p2 p3 [ 1314.375115][T15585] loop2: partition table partially beyond EOD, truncated [ 1314.632669][ T5141] Alternate GPT is invalid, using primary GPT. [ 1314.685342][ T5141] loop2: p1 p2 p3 [ 1314.689127][ T5141] loop2: partition table partially beyond EOD, truncated [ 1316.234672][T15590] udevd[15590]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1316.314271][T15602] udevd[15602]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1316.340189][T15601] udevd[15601]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1316.439868][T15590] udevd[15590]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1316.454436][T15601] udevd[15601]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1316.467856][T15602] udevd[15602]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1316.648749][T15608] loop4: detected capacity change from 0 to 16 [ 1316.705477][T15608] erofs: (device loop4): mounted with root inode @ nid 36. [ 1318.037390][ T9067] Bluetooth: hci3: command 0x0406 tx timeout [ 1318.415862][T15631] netlink: 79 bytes leftover after parsing attributes in process `syz.1.2867'. [ 1319.224945][ C1] net_ratelimit: 60 callbacks suppressed [ 1322.379505][T15681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 1324.375431][T15705] loop2: detected capacity change from 0 to 16 [ 1324.422559][T15705] erofs: (device loop2): mounted with root inode @ nid 36. [ 1325.145067][ C1] net_ratelimit: 40 callbacks suppressed [ 1325.669913][T15747] Bluetooth: ISO socket layer initialized [ 1325.881139][T15753] loop1: detected capacity change from 0 to 16 [ 1325.921213][T15753] erofs: (device loop1): mounted with root inode @ nid 36. [ 1326.595241][T15741] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1328.641103][T15762] loop4: detected capacity change from 0 to 32768 [ 1328.744233][T15762] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1329.117482][T15800] loop2: detected capacity change from 0 to 16 [ 1329.119216][T15762] XFS (loop4): Ending clean mount [ 1329.169519][T15800] erofs: (device loop2): mounted with root inode @ nid 36. [ 1329.221008][T15762] XFS (loop4): Quotacheck needed: Please wait. [ 1329.447927][T15762] XFS (loop4): Quotacheck: Done. [ 1329.641472][T15086] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1330.344966][ C1] net_ratelimit: 59 callbacks suppressed [ 1330.484110][T15814] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 1334.037240][T15845] loop4: detected capacity change from 0 to 16 [ 1334.070910][T15845] erofs: (device loop4): mounted with root inode @ nid 36. [ 1334.541507][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1334.541525][ T28] audit: type=1326 audit(1790735838.286:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.1.2911" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1334.620685][ T28] audit: type=1326 audit(1790735838.286:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.1.2911" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1334.703152][ T28] audit: type=1326 audit(1790735838.336:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.1.2911" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1334.773280][ T28] audit: type=1326 audit(1790735838.336:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.1.2911" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1334.871939][ T28] audit: type=1326 audit(1790735838.336:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.1.2911" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1334.931528][T15873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'. [ 1334.938746][ T28] audit: type=1326 audit(1790735838.336:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.1.2911" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1334.959611][T15873] vxlan: RTM_NEWNEIGH with invalid state 0x9 [ 1335.005088][ T28] audit: type=1326 audit(1790735838.336:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.1.2911" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1335.068177][ T28] audit: type=1326 audit(1790735838.336:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.1.2911" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1335.128939][ T28] audit: type=1326 audit(1790735838.336:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.1.2911" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1335.225052][ T28] audit: type=1326 audit(1790735838.346:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.1.2911" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ab9e159 code=0x7ffc0000 [ 1335.624976][ C1] net_ratelimit: 32 callbacks suppressed [ 1337.908651][T15913] loop2: detected capacity change from 0 to 128 [ 1337.925441][T15916] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2921'. [ 1338.020447][T15913] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1338.037338][T15913] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1338.939112][T14234] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1340.744945][ C0] net_ratelimit: 37 callbacks suppressed [ 1340.908124][T14714] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1341.822211][T15971] loop1: detected capacity change from 0 to 128 [ 1341.887386][T15971] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1341.917401][T15971] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1342.898590][T13981] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1343.664030][T15981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 1343.967891][T15993] loop1: detected capacity change from 0 to 64 [ 1345.293190][T16001] loop2: detected capacity change from 0 to 32768 [ 1345.304471][T16001] (syz.2.2947,16001,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "da ‹=writeback" or missing value [ 1345.319850][T16001] (syz.2.2947,16001,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1345.784956][ C1] net_ratelimit: 28 callbacks suppressed [ 1347.152479][T16017] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 1348.645707][T16046] loop4: detected capacity change from 0 to 16 [ 1348.688367][T16046] erofs: (device loop4): mounted with root inode @ nid 36. [ 1348.816609][T16054] loop1: detected capacity change from 0 to 128 [ 1348.968392][T16054] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1349.221838][T16054] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1350.985080][ C1] net_ratelimit: 44 callbacks suppressed [ 1351.060320][T16063] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 1351.200292][T13981] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1356.031770][T16120] netlink: 'syz.0.2985': attribute type 2 has an invalid length. [ 1356.104964][ C0] net_ratelimit: 38 callbacks suppressed [ 1356.159204][T16120] ------------[ cut here ]------------ [ 1356.165397][T16120] kernel BUG at net/phonet/socket.c:213! [ 1356.195036][T16120] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1356.201344][T16120] CPU: 0 PID: 16120 Comm: syz.0.2985 Not tainted syzkaller #0 [ 1356.208846][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1356.218934][T16120] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 1356.224814][T16120] Code: 41 5f 5d c3 e8 8c 50 cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 c5 1d 1a f8 e9 02 ff ff ff e8 db 91 c1 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 1356.244538][T16120] RSP: 0018:ffffc9000cee7c20 EFLAGS: 00010283 [ 1356.250639][T16120] RAX: ffffffff89c5f975 RBX: 0000000000000000 RCX: 0000000000080000 [ 1356.258637][T16120] RDX: ffffc9001bd19000 RSI: 0000000000000a45 RDI: 0000000000000a46 [ 1356.266631][T16120] RBP: ffffc9000cee7cd0 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 1356.274624][T16120] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: dffffc0000000000 [ 1356.282621][T16120] R13: ffff8880771bce00 R14: ffff888030578640 R15: 1ffff920019dcf88 [ 1356.290612][T16120] FS: 00007fbc5b42c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1356.299566][T16120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1356.306607][T16120] CR2: 00007ff1236d609d CR3: 000000005cfc4000 CR4: 00000000003506f0 [ 1356.314612][T16120] Call Trace: [ 1356.317910][T16120] [ 1356.320871][T16120] ? pn_socket_ioctl+0x350/0x350 [ 1356.325841][T16120] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1356.331148][T16120] ? security_socket_sendmsg+0x80/0xa0 [ 1356.336637][T16120] __sys_sendto+0x4a9/0x6b0 [ 1356.341246][T16120] ? __ia32_sys_getpeername+0x90/0x90 [ 1356.346663][T16120] ? __lock_acquire+0x7d80/0x7d80 [ 1356.351722][T16120] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1356.357728][T16120] ? lock_chain_count+0x20/0x20 [ 1356.363326][T16120] ? lock_chain_count+0x20/0x20 [ 1356.368210][T16120] __x64_sys_sendto+0xde/0xf0 [ 1356.372927][T16120] do_syscall_64+0x55/0xb0 [ 1356.377375][T16120] ? clear_bhb_loop+0x40/0x90 [ 1356.382077][T16120] ? clear_bhb_loop+0x40/0x90 [ 1356.386776][T16120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1356.392744][T16120] RIP: 0033:0x7fbc5a55e98e [ 1356.397186][T16120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1356.416906][T16120] RSP: 002b:00007fbc5b42ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1356.425357][T16120] RAX: ffffffffffffffda RBX: 00007fbc5b42c6c0 RCX: 00007fbc5a55e98e [ 1356.433521][T16120] RDX: 0000000000000020 RSI: 00007fbc5b42b000 RDI: 0000000000000006 [ 1356.441607][T16120] RBP: 0000000000000000 R08: 00007fbc5b42af04 R09: 000000000000000c [ 1356.449706][T16120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1356.457711][T16120] R13: 00007fbc5b42af58 R14: 00007fbc5b42b000 R15: 0000000000000000 [ 1356.465813][T16120] [ 1356.468856][T16120] Modules linked in: [ 1356.472962][ C0] virtqueue callback for ffff888021e0e200 (ffffffff85c745d0) [ 1356.484898][ C0] No more buffers in queue [ 1356.489395][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1356.495399][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1356.501238][ C0] No more buffers in queue [ 1356.506018][ C0] No more buffers in queue [ 1356.510459][ C0] eth0: xmit ffff88823bcf2f00 42:01:0a:80:00:01 [ 1356.517014][ C0] Added buffer head 17 to ffff888021e0e400 [ 1356.517046][ C0] virtqueue callback for ffff888021e0e400 (ffffffff85c746c0) [ 1356.534899][ C0] Sent skb ffff88823bcf2f00 [ 1356.539492][ C0] No more buffers in queue [ 1356.589643][T16120] ---[ end trace 0000000000000000 ]--- [ 1356.599674][T16120] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 1356.625688][T16120] Code: 41 5f 5d c3 e8 8c 50 cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 c5 1d 1a f8 e9 02 ff ff ff e8 db 91 c1 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 1356.660312][T16120] RSP: 0018:ffffc9000cee7c20 EFLAGS: 00010283 [ 1356.674392][T16120] RAX: ffffffff89c5f975 RBX: 0000000000000000 RCX: 0000000000080000 [ 1356.688340][T16112] kcov: kcov_task_exit: t = ffff8880275d9e00, kcov->t = ffff8880275d9e00 [ 1356.699098][T16120] RDX: ffffc9001bd19000 RSI: 0000000000000a45 RDI: 0000000000000a46 [ 1356.714951][T16120] RBP: ffffc9000cee7cd0 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 1356.732191][T16123] kcov: kcov_start: t = ffff88807c2c0000, size = 524288, area = ffffc9000dbb4000 [ 1356.732888][T16120] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: dffffc0000000000 [ 1356.746653][ C1] addr is not unicast. [ 1356.749719][ C0] wireguard: wg1: Sending keepalive packet to peer 34 (127.0.0.1:20003) [ 1356.754591][T16125] kcov: kcov_start: t = ffff88807c2c3c00, size = 524288, area = ffffc9000d7b3000 [ 1356.771957][ C1] wireguard: wg2: Receiving keepalive packet from peer 36 (127.0.0.1:20002) [ 1356.786177][T16123] kcov: kcov_task_exit: t = ffff88807c2c0000, kcov->t = ffff88807c2c0000 [ 1356.795918][T16120] R13: ffff8880771bce00 R14: ffff888030578640 R15: 1ffff920019dcf88 [ 1356.803992][ C0] virtqueue callback for ffff88801b665400 (ffffffff84a02460) [ 1356.804062][ C0] virtqueue interrupt with no work for ffff88801b665200 [ 1356.804075][ C0] virtqueue interrupt with no work for ffff88801b665000 [ 1356.827068][T14455] Added buffer head 0 to ffff88801b665400 [ 1356.833069][T16120] FS: 00007fbc5b42c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1356.842501][T16120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1356.880190][T16120] CR2: 00007ff1236d609d CR3: 000000005cfc4000 CR4: 00000000003506f0 [ 1356.892278][T16120] Kernel panic - not syncing: Fatal exception [ 1356.898515][T16120] Kernel Offset: disabled [ 1356.902855][T16120] Rebooting in 86400 seconds..