last executing test programs: 7m22.572182347s ago: executing program 4 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf2549"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x90) 7m21.01074324s ago: executing program 4 (id=61): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 7m20.450525417s ago: executing program 4 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000005740)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r5, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) 7m19.087122354s ago: executing program 4 (id=70): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 7m17.338923891s ago: executing program 4 (id=73): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 7m13.49868859s ago: executing program 4 (id=107): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) 6m58.391397899s ago: executing program 32 (id=107): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) 2m29.791685094s ago: executing program 1 (id=2061): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 2m28.423594672s ago: executing program 1 (id=2062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m28.207028991s ago: executing program 1 (id=2064): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r0, 0x0, 0x0) 2m28.060565577s ago: executing program 1 (id=2067): r0 = semget(0x3, 0x1, 0x40) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000000)=""/199) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa6bfe1003167a00000000000000000700000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4202, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000a00)=""/4096) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x290, 0x1e, 0x109, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x8, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x24c, 0x1, [@m_ctinfo={0xe0, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffff7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x9c, 0x6, "7d8d67fadbe07b1f5ef7a79e47269fd5ac2a90f89afd99564b72d718b3fe64a969a4142711681782ee1b8e0b2b87248281209aa36b0f78f291d9d3b10439d4fb6cf76948880e74647c15075636b0ccbb9bfd32c332548f54345f169171861000a0f2008a27e35716c908d62d0da2ac8bffa412c2b1ff8a6a752cdaa53a85895e6b9822379521808b7385b15e93037d477377ef819568ac8f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x5c, 0x14, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "91c22fcac77666782f55da9ca713e2b5"}]}, {0x1e, 0x6, "36b77062f91a8f6c726820a843872214a57dfa1efdd8d379d88d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x10c, 0x5, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x8, 0xffffffffffffffff, 0x0, 0x380}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x3, 0x10000000, 0x2, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc, 0x5, 0xdc4a2bc3d018c379, 0x2, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xc, 0x20000000, 0x5, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xcae, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x25b6, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x4ef, 0x20000000, 0x9, 0xfffffff8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xfbf, 0x4}}]}, {0x43, 0x6, "9143c2982b8bdfc675240c2f4b31fb3a1a61f0e53d4d0fbeba5c6bb9c4c81d803115ea1b1b34ae5fc2a791ec9269c81ad21b11c7367e3b3c2f3c8febd31312"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x290}, 0x1, 0x2b1e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r5 = inotify_init() inotify_add_watch(r5, 0x0, 0x5000828) 2m27.026553819s ago: executing program 1 (id=2071): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x9, {{0x8, 0x9, 0x1, r2}}}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x100000000003ff, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000088c0)="4580093898a1d16b31cb53b0531f71a24a5b16ae40538efd584367d8522393a724be4985a9234289e0a62e5d9f4b77e235d059981bb4467fdef6b1fe779ab734263d9b3bd46378b1c6399295e7c1e8e04c5b356add1915b7e45b9e381867914e2cc80cd84e62cba8a9388be6679add1c7f801288db0f703ba884b3e0b4e64b227dedf9e86cea33761b16d7bed53bb6c2ca9485022fbbe2854f0ab1cf379bf4e8b53631525338c05e8d8201150169057d7f91506fe413fd930062efbbc2f2e299f1ee56a0e2eb000aa18b21448bb4c74bedc875f3c1060b02dfaa6b09bfedc5f6a21e6af2c270d0874bf56695e4fa97f2a01a4454652ec26710ca2c0e085610c1ec535d2d2520e34f8e995655fc3813751bb05093bce378eb6e7c52daa5943013677e2de843a01cd6b8da3ede72cd58a6e3551e0a63c2d3c2a2a2e19476169d9fd5206973bb01a309b083b2a6e6599678c63f4c79ea43b05873ac8110c0c36600b1c542ec5dacd40f7afbb744556ff81b63e192bdccdcf29f87c250ebc4cc1c7ad9063e646c3b8cb8e2671f9cb03e559232339f29ee8faedc557de70d1f28ff4250c44bf0d5d848d22c0ecc6c2dddde581f59179a1f110712585313f0d79cd9e8d0af6c0995a1688d85bd9919347b0bd4ded8b35606780e070dd1921affe83f1bbe5288692ef99d5266e74e1a321ae4549693720348ac5ed7bed7f65a0a86c2537b19b62120f541c76e607bca0c27c9eeacf8e36190ce2d7ab194d8893306edd40a0893e1612c0a1b2ed8a3f02587967d031e58ada05b1663bd3f23c81effb5f36c661c2c2a8968a64a488d6a93472031519d1086b7256586009a0ecc7ca765dcf9cf77e51abcafe124c65cd5303265b15bc7748340eca92d53e2d40a67e9171cd9ac663ce10f66d345b620f0373caf524a329e5919b3bb6aae9366963668737ccfcd6e738d66407416e813cfcf07094c9e852f280aeb8f2d2dca47e5d3be2c0a212b3165fdeab9b04ae43a7b8bb4b85868e237481906dd1011399e4eff809e88c2d7c01f413aee2a1de58f6856b6ab09b04455b724107fed5d18b786b626039a8ac8e6c53b080bec59bfecf7c4100441e4cb899a351d89422a5e1b3dbcefc0badd0398c54d91d9cf06d3d8643efb51da9c7ffb55e76d2eeac599e162ddea7d399b6d101a1e70e2615824d508c2b5f1550eb1bb825bedf17870765796c0a4090c85aeca36a79a74f42056ef0a05901d808c496234c893a71d5e76a002696045cd2f88afb7235cc2620891c046d8c08ffb71f7b7cafeb4d10976264a9606d5db8472b4a55a5abcbc6bee60394defcde03abc1c4659b63dbfb32198f9d3923607ba11e1728cd5dffa0a29e50f9d55ccd98fecb3e9fe42f08a41739bd0fe48a72e925fa747a483a5bfbf7830d54e8c5513d1bc6201afafef1743a705f2af9055f8fbcefc352b8f6ce3abfc2984e464947e22f3a26305d6421a633f6db0c3949df8d4f051d51e3c9daa0e00c47750b9c8c49e93905a9f3d5b98e6a098eed84d7d16102d24e82a4e85bf95d114b4137dc23f14cc0d7159c67d47a0394e7edf8f84086d6ec5d3db779cb560d9eb4163bd8992b50468105b05d5152688f8df2310f2652889202bc460d3aed5f50167c689ffde48eb8836501239bf80a12c5ade458db4fc618e23e254675a1c510491ddde26062c22833a5d80bf43bc05fc2db6f554a9da0a33026115661fe37a7e6d2905f8e763828564b2787e0d4eecfdf077866de9b33c53efca0da9c4cff7948b083bf7fa79c4fe0060583e0f6e53dec70cb700d1e29f2ad58f16ef642e2bbad4c1b79aa19781fd243f161f9a1176430e58a3909e9f4e250860ef8ff3654879e83b784cf660b72899ee251aadbc479e1276d05850867653b09bd92b85b6cb3001448ef886c75482dc0c3bcd721cad899b6a3a805dcaddb2d3ac61d269a160264642ef93c6ed39f75f08f900dfdfbef529fd537e4470b99d2d5deddea41bf9615d1d1e62cc01a7847513318fbd746fd76445b1073979b6fca255c0f49b18a477341d9336e2c2ae1d107ecf46e0cb92a99a5282e7338cdbedbae2f8f5b36313f507324712d535236c68cbf4bc837d5a1b80d68a4ac517ec313c870f3be015e0ad43c83716685baaf31eee7edfb23af6422a91dd167c6c2e6a585a1d14aafecf8d2bb7d9973a8dffe5838cccd5a385c6258e66f8bf54b378f38afa1e112ac3f785e163257d1f8b5337234b5079d16700187831e3a7df5508fecc1d93e4d926ed1ded9ecce4290de878035f8af16f2dbcbedf929987f355c389ae6c791e796e46326efffeb8a2506d40b8a9ef7c35a90e10eadae0e767b63e0f169ca5a30fdfa43546e2c5171dd801133c6ab986c545b4e73aaa9b3572f92690afc498f1248f8923ebe207f11c0587275569d20895d4662256c3a29ba4518781f8871b84a6b9b6d40d58dc149c38f4eb48bfb70d1b3c5cf2191825ac3b5e554f31c99ea292787fc2e10ad66893b19f22814fc0cfbb82413a8b8856eb13c9e9ced57255d9fb043f882008b7e4439ef068c8d81a60d1affafc43210b827144c1014799f2ebb91d04344e945fdf22d638dca602782c5f17c0e8fc68d00e305bde420231f51449c9fb8b20b329dd21a353085e255ca3522d05b429a49f9ec6c837be07194fef1f9be89080972c3b1f7452e8c9c48c1430efb2558b128f9d58f17576a0a839e3e17e23f74c6227d6481edfd8fd3cb65360577db6ac173a169e932bb1af16963f3c9175b62bc9a221fdc77c029dea920a0ed119248d256264bbf9b85ad4b73b3caaf5faad6546566889dd49e789f188fb6464afdfd160d6208556d52149369d5c29159eb910377af1ade2e3cb6263585c170150e40793120fe24aae427742445ce75ffa76571ebf39aec1e7f94da5b936a58eadd9daa2efeb701e8caa4bc0cecec3e4a5012f8b33e1b895b12acd3b5575691438840bd8df25f60e087563b63d59413fc404b0337e3969db4ffc318110a74f400b261dfecaa54a4f0eac627b3906a121ba316c023bd92bc6aebb4bd4eff374e6c076f7785680ee9768dde2e8d5b7d7287493b9b090af28ab2899c2f0220a4be2979c282f0a062c501dacf69121907a4d746a5578fb6323870b2e113908056df94f5548c5509577c0512b6f16090b79540487238cde05b529397104c43471e6b806e487452dbe1fc7ec60842f9597da099af5c29777f3f9866a118c02bc62a1defdd863ab6dedebd3739290fb547ceca0253bc60f842f15697203ab4a4bd9314e825039f9ba648a3642df81692a5fef5b62ba32b6b78c23650ad56a02cee90a20d7be1a54376e3f0ee4e2f36bdde8eee8d61a8fe24172d695318ac42485f9dc837a4f8d071f910253aa256f875a0bab8ec82b2fd5e20e443bb8d6857ddb0bb69c1efe527785ad1eedc8f5543dbfa811781a0e0a5657795726730fdf5b1434ce981071fb8abfc10b07ee2acab7056bd3476eb850510c2caa80587bd1533574bd7f029d0ef416c22b5b451348612827a15589d0ec74006f0acaa91aeffb2b39fa2ba98f9ab32937f62b9fda193da816f009b05247af1c76ddfea0ea9c3a83f5ee58bf470cfcad1687243819282242f9f3169429a105cd6ab468d6107d2206624e05c4b26128744029cec346bbe787f5cf2bfbe79690624341d41dcbd10a648fc49f3b331b08d73ce2f887530b075ff8ffa8dae8f69446e45123d947454bc8f5e93fccddada1f223bd84d7a9cc08816d58d6fad16e4d40cd52ea4cf8ca28bdff995968a2ce1fc0532dd0e50397534b9fef5b9e4d8986593d43cf179530aab329bc4afd26e7ea7c4e875f9bd7c51db55674939cc1a57ac3299d5a0320acda5e54acdf6d8bb61af7577bb92dbbf70b59d69678b06ea04ace4288da1690e737549d0e61cc814843f4ee0773a78b02c4b203616fbf63402a6352e31fc561cb3b48f3f887a5d98252b649c7faaa967cbecafd4363c214c00760d19d925349523028aff2436cddeef29b452a05934527862e7fb6528de83e3f2d2969633fc70bef596daed510832dc44e810b2e34a2fb67a13f985f94fecb93fcd0c24c0a1356c76a00d6fc813e94638231b8c5b66a429ac7b4950e7a93ed32d0078c2f8883f318e2b2bbdb2733cb29b1ca0395cace62f488ad5bfb149a5985abe3b837a65006653d55c0c71ab8a1c0f4994b28b20a010e93a21193648c08285c52e3b8ea60fc4b1692daeee22ac8c40cc67c477f73a706e60ae3750a9c6099283c923490b238d3161073b47603e625f8ec3050cf6bcea7e066162970d7d7a0bc4c157a8386e716f9819b72e0baed00ec6e59d14a8f18d0a71c3a663ff52b8f7e61c920757ce9b132887d4500d109d6c98c2ce2a69baa7b58c9047c135851ef62a60fd420834152c028ab60e2279c68772455083d5805b3064a765e285833493b2c7fac19d1dc7e5c909757a6a1fb78a983f5fa66323698c05e166b25234362cd379a8fd5338c48fc15ba59c1dcbb6172f9d65076446b7a0db1deb7c3bec42d6cf39e21619bd8c7834c4c972f2fa330c18edb3f8ab157655d3cfe9aaf104de7a546bc256ff856c9037de1de70122efa4c1ad7bb62b7697db86f69d4c0517708925fb0c9404a9b64067f644b17d8bb20ec560d783827058473066c110200893f623bbc48e6001682d09cb0144f58c153ee43abb15249a49d6d6d1438338535b02989c95df2f66a772553fba8f1f61023e6f91af7db6d874388c8002eb4a11bd719526643738dd2ff19662bd1fd5c9c46dd691ab65f2247f45522976ac32352ffbb5a431a6a08934ea7fed11c37aaaae99202262a42958fa77ca0f35a6c67a85b4a46164843b8625e47b2a282481415dfa7f83c2ed4fcbabbc8b3684742001ce98bdb5c15188233c4e7bb87ee3af08313af7822d3c45c027a061bace195fac29f0083dbe553e078c266343880d84373cf195e0c728fb2921d7e988c5c715d44ff02d849603e55cf4b2f744a90088c7a28d396f47a98a23e2312627b78e6715e6703a58db3c83f8c42da33ce86c9a3c17ed9ae636e53e70ea924e22f15a157811ea6d2fc96114e94ba2f475cf762fb494176a6d149d099fd508208c80644518f395f792eaba914409e54fb7c77319bc713c449a335ae4234b365308f9ba8d5fc5892f3e49e3d47394175f0947725b1233e6d142c8daa82d93a6ae26511116339284b5c229ca72c47c130fae5f42b753e72e77629bce4ee34ba274c2eb5db9a037786b6cc5cb1164f7be373144a6fde69930ee0e39a6e1d353a0e5e19b0476e39be3f2e243ba4a0db5f0a9e73538291736c22f57d4117897939217da05ea31ca54106b4ede1a61cfa8f3338f24d382dbfb6f9d828c0a4aad0dcfd0d2b0d4eccbae71c72b855167069c2705efaaaa789a11ff5dee5186420a5ea7fd8ce7d96168b66c595d3d367a9b0122606c1a027cf52cd387e8e5e4d7acb4d29981b1c48da04dca0276f11936cfe03d0e654e0df00727c8f6df166d2af99b3a5c00d7e78bbda294e80928935c5c4054f1544def46929eb9c3ea436e7e1e4a6af8a29c7fc5a614dc737721e8315fafe8e668a5707228620226553fe092e70cf8a31299a95464d57c44eb99d49b7ee4e21531d2b1277e0e1e1a16c2c7ff90aa49d7bddd86dc2dd24ed51fb4ea3026cdd38e07a515af157ccc1655967d1344858fffef8dfba2becbdb2383ec1fa7ae7c0ebc3ffe973b8fc4c3a43e2c2de61d7c2429b80354e54174a9256ed4142d86eb89784fc65fdd2e0695f3e457cb118eb70de1c3f90a56a28a2a2d1c438f9dde30b1eb759a7c109e6a5c5d1086285fac72eabb26233fe6cce54a581dfcdb41cc5fac1732823a9c303d77294a108b4d29010664b5e3a513d6875221c20baa55ff273e77346d6223939b3d8b2efe570446fe9e77f2be5367587cfbe98d4b6847c9b13ed0b818cc3469bd8f3988043b880667c07566ccfa8975be5995011fd1349cdc5cb06a95a355c5a11a1688468df7e6a537eb0efc5010ecf72d4c53faa74b93a809532f3038991014b391adfa6d17c3cd6bf9df18cb4941aa228e402009418f67952e5f22455f89ed434dcf522b02f350f0d1a79db837630830306a094d82ddcba3657e6ef13b7e7252b76f05c5f78127d16b13443d337911f988479ea1d8d78f60f516fc22118d64b982013dcc272160488bf16fcc4674bed5ab2b3af7f8089fa679d009a60bd23c82cce41837784f8c208ec8177ef63aa1f492ae9b7791e94006f60f606c3f35c5e53073485da4a4a714cb6f0dcedaea0fe49ab85568e215695efa82053b58842bf4e4df721304fc9c5ac0828ca66c7223cff63aa13afb68436635b374ccf1b14ea528ab7e4acacfd7285d88521161086a99133f1ba2ea483ba69c38fe32e2afa6cb079fb268b585fe90bbefaef5eebdec882ab3863bccb7bcb3c49f4f9ae3bb43c087ce30b2f05e780aa7b80886ba2506322ee793fd99e7d56632a468b53635811247033208de3d17a36142f53b2f1dbd57727c4935ecb554b5e91038f342b035285f1eb4a1e65e577f407312aed0dd68983d6e20d56aa3302c888a889b5c1b485303c7591105642cc96e7d34eef7808b51e1a0f845ce63d904704527f4acfcc0a5d8fa69bd0648e721daff09b70ec95ff2f173f2d62bd566829a55eb2e6d45465cf520e0b505550014851db1fbf84dde8412d1aac3df64a8b39d42cd18d699e94d0a16b5ee63fc7ea82c19688893790360773445c439e1fe5e5ccafa85a4fc45e5b811861fe9d8d6a3994a8c658b6fab904852f80a3276c4df48d4bbd36fac4d16103eef0e422488221a9189d910a204d8d1a79f755fccab38754d6b5e5c5b4f1cba75658bd43f2fb0752ef479a23d62dd7631aa7d9c76467ac2917b9e4b33d14ef56cd950f9ba114e94f1db8234ece2b3787f2806314df385de62b86228ce20a6579f9933c8bb9401c41642b00e644b78cd1d04ebfec1178237cd7e706d79d332b0e766ffc6f6353417c4726b6dbef648ed779c329485a9dc48c7111b447372e2042f402a079c2de283fa2221932c1ae1882018d8bda50b79f49ec3cdce34c09b783b1923036b95378ba4c1c343889e8bfba59e47c7b40364a78c8597ce696e43d3cf81fa78e106c9bd6a99c56fa4e0e0ae1d7a78355337c135ae75e4f9b754807fca65fd06dec18561d57b2855836c4340c179ea76959abde59f5e8b8a5f573d844fe26a3536e4f8b0c75ecc66b6e4625bc6185fc41fd5bbe96351e71958f87a6d28aa50039b16f26a71975a4c37cc0c028ba8a608b66de5ede49ccf3d78bd7a81a9322854a9589b4dd6f962972ef05f8deb8d331b9e21c6a63cdb78f58f86927bff15e319166478c53d08ad8e2ad155aefa2d43a51bac1e4450b7c52b92d75567a2297290ec04ea5f5b65f1f8ad0bb0502504aacd37b8a67d0c957e3cdb7f2eb8d1412e3cea7e69f7398dbb4e4986a24c7070e786ec60157ca3996ec0142e677665629480bee5de63b13384512e6c5fc7d6a5bddfdf63911fa888f71ab601e6018ed28fcd3577cceef79a7e22c84b77621a8e3561af825ed82eee51c24ed0665a06afdde6e53db6c75e27f2049dbfce61da141c5c338541b3bb4d03c8acacac73e1e60228aac37f0675d8ed56b4e940cd5522dcd6c86a6fc71654f6f6994dec3af199eaca80e8888777cdbd6142518f12111e81e4ffe1cdd8b93545cdd64baac4f37751723b5e96f5aaa67da6685cfcc4267ca2696f81371a40cb43d16f69c6b2884b270dc66a41102fd2ecb20e565fc48fb85ac08471d35d17cd9eb01953534fe958cd6661397cccbfcc93e288543c3bcdbd3fef547cb62765a9eb25218c4799a36037ddcc1087d9ff1f071db65d1bef02a7f71a3a9b2ea574cc7807d400608f07f0ad49fdc1f78b31ca2c1325978a062a678034c8bf7c5ba2b568a2e363b3a28b4d919106d70e0399e231ea50cadc1be84e7781fa49e5334ce5e66b62d1939df3c48cfd52fd42ac5d80bca8a98d5ac9fe5a1b55606bf92d7c5ac294ab45691b235229ab984ddc35424eaa8a52dc9eada4ec0070553ede17e603580cc87fd5def48b53b8d9f8a28537859c0cb248a760dd434b6147f7380a4791cfd6aed2ca157e86703d7051ebb8a1ab077bad6b7c526b2e53dd6bbc5825bcff00657f78d808f6b80d04192fbfba468a54bdb068e14ecd1c746b9827efa99828b223691ad03b51a0d65653cd31e320032805f6773b31c6f7055389ea64d881b43a99f50bb4ce088548d32f14ea8a1b76b5251384609583a2bde4f2a43ef410b007079254405b5748a46aa322a6a5d95e03b23995a0242362d47e011c53b1ad08b24608c841317e8cdf3667c8ad9666d14704c7c2997a43b1a46c60e41ceb35449b72aa8f9ed99c7e1740dd2d4af0b7fa8d9ae022b7739968c3d93de715fb239400f96ac936a55d82c2e5be0c062c3fd807e5cc96e1afe310d7973e2bbc5dd23b4e48a96ebc8956df7be624c6fdbde324e884cfef902f485b5d38a7d019020da89190c989966dec55f8e4c5e433cfe36a6042b6fe9af91788ad0ce5d70878ef8c483b095b2dd4b62e8ebfba2f2d8a5005df1a7055eef6a7f40a35d79ad782ae73e4977fcd39b38cfdf4cbbdcb0a94ab6e7648f054d044766355dd54f2720247aa36ce7876d449ee41191f1e7f60feb0b4928f6bce900e089727f8d7595a1c4fc483353e713f53846b40a09e88e642d0a42678a324a743d965a709c1967e2262eee92b153841917ae0fb923e687f5eb56167c10a3495b9412cb2e0004978fdb6109d70fe93d532c13b09cab04bfabfed657e61b436d52ee3d504cd3fa34f530226437ab76024e574601e3a9480d809de9ee3f7c5f438aad36234dc522de47a18a5c993da28fac3717206e57674156b40b822f47d68374b49ecc64e13940c19c33b7728c28cdd8f747b3176f5886c4ffe7b890a73a0cc0b28019fd6a6f239652c2fec8dfd4a7b6d7d18318a87c343892db5ff81f2ec2f94e1e0cb607815e0c783abd3e5c1c85dd6fc83677efd14bcc88c9c67e73769b5916662aca1470e28f91772d80baa3bf9e1bedeed8bc6194c8a2f77ca89ac69b3065a89beda8b035168070b4e2b8467e2bfd91248c62ebc1089a91803fcaf75cdc54428d5ee466d5c901ebc690a155a8ffd01e5976612a6ff524bb9c2c706aec7f89595b91ad7040d97b89fbb8729f57853abc30b7c85ed39b624593b1b3d40da689718dc8f2ea16c0d5e6a019e7764ddd528fab311f9ad1eac649640b9b681ac943c454b34dc9c7f490f51a19dcda40d84ce1cd2845a29b03bf1db1143bfb43cb0a05c027fa2b1e63e7b4cb43269203a12eaa3e7c4ada4a01c9a04a4ac7d9d69b3b8da50d96aa0d55121cf56c91b894a1beaeac59144abd5d421f3fe8ae45cc1755f99805d46058d9c44d4d77142553e7bcff51266d06498790ef69d58518932a1d5b914c516adabeafe140f4a56d62d4ff45f557c959597fcd67d443e7054bc69132eef9dc8a0be5833dfe68c6373cfbc165d47e46da75c1d44b14bd4c8b568988439de7ebf6cc34f16deef013846024c53e6364793bd56de3bdf086ebbd14941b942dccd13041fac950d8440438ee2455982bb0ae79e00217ec62b1bc31d2e2ef1dbeab36b729ac4ccf2074f4d8bb46dcf36000b80c74c5cae8db365d492d2f169d2da0227a97cc2523545d8a3e499a120be96a6f07abbb4dd5f348a3691db1d851f7039e2921eb8c263a87ec56850eb35bfcfd75d700c161954b3c42142d493f8b138e92540c5a90fa91cb117b1ec45e0911085d5b2458c17dddf4b220e50667d5fdbc95919d9b498eb748a92cce6bfca17339c886a26c9a0ed960226767b1f20cfbfdd82865d2ba8aa6305f6ce3bb8ec8a9decb275693af4abc71de61915361ec30e9ee2869073801cbce600c297177761b5a487fbe6e2c6e1689b7afb4c5cd612b0c14ae5255dd979fa8cc69e91126402190b79238db8b4a90a23c60144267e2f70f178343e1edde7c04066430a20048941fd6a5ac4e68e8fc91dee05845a037840e70f8e6ef4fc6a04ed6b4cf67ec4655f5fff615fa12b8d4083197e5d30b9fd4db5586c880a2edeedbbef14670418383179e7013e735f131d5f00620c8d2080f4ac63ccc90b77cae271782ed792a0db358302d58cb77420ecdc7544628ca1f300c337cbf0c0c8dc10387b5c214b0a6514896e092663c94d87e217fc80af8a2af0ae4d5dbb4888f7a6b19b709265f9e6510489685a8f2fa7354752c8338b526cd7e3f23011be1fcc1d09732494d53b3129df037b0f9f7a1d650e7f33747cd08c36dc4233e6e506d62bbf71a83b40bc3b9f5656e2e1fbdb2da87ae18307b44153afd1ac378bc198ab256da795cd6a73c613ee98c44172c029bc98f5dedb8e59e2f7f16a3da9ebb57d910163f051e83039cfe4a4665c9ad404c8b0cea48eafc1913262640f0de4beafdd8401fbc3a6c365082553588df6c049fab0c91d3368eff2fb9cec71d5fb7556525aeab4cfdbc3308c7573b02967893b20c7144b2041757aed6d2c8f97eeecb9f980b10ee5834b389a013de370ce100d5656da4669a65a8aaf071b8cc1f8d761cc4d5a68d7b66f59f24e1e5973d4ad4ccbd80460048b1722df76554f016a283c585cf94f0e142c62f2bd9647cc298bef173f07d39b0235170a82e8ed3f988afe97f7db65f33e841418bf3668fd87d2acd84235ecb75c006c0921dcb41e9aa63e23af391d3be43eef4052570572706d5fc91b86ccdbdc2d725506653947d19f8d1fcd6b8ce652f00f878ffd512060cd1e090bfcb04d37faf10b1ad9c9b42604de918f5f5fc6f2b1ea9cab85e1c7c28db8c3a395462231d64466706981776bee909a60f3c33d47f221f065f7a158548b4e6440606f1ed35414179bf3d2b525c19e288c040ac9e4a6c4dadcce8c20b37c3d3d030f0e4faf8088fde26dc5fd9fad0db9457b414a71ee9bf4860859f0110be4c0ccbf66f5f84753f6661ad754fb9f9fce4406ec02a5665cb5d24bd206758b0518dd916bdba0172d362a79970884f5ac27828b291e95675990688c1f50f8e602e0aff46c157d5974b2661cf1b1868f895e63b2c842b1425160928a37333e31eb8586677ca88e5106c3329268b3824c7a593c301ba2071d5751688164d8b1eef49b9f00d009b6df26ebd9c3e4462736e8dd7aa427f0f9738a4761fdcbc59f53bd4983025704084651cc48e311a3507db3267b4952b095f7ea22ff44bb0447859b29903fdf51873afa136a93918d1dc21c4fc830c2474f1d1408bbf2506d892a9a5ee73092ba9b85d9373eebdc60ef5349b13f0ec2b5031488be413afbbccde997ce8252aeaa2a74da28d0f7ee4575675e4fbb818f32c928c3d96a16344eee26b056d29f272d781043b9e261e3b0e33f7495d9ec86ff16e8a13e640dea5528925bf301d8f4df79200650bbe54e08286aa2504b18cc1274c75bc2c0bf90d65ed34b5162d3c75369d411c7b5d19b916b7a9a388ec57590d4f143b4697a5e924f7163a9611fcb1dd72e17da4a45b10d53b086fc66f4f41e8dcaf7e", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9000000000000000ff000000000000000300000000000000ace500000000000005"], 0x0, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000c80)=""/135, 0x20000) 2m26.826795876s ago: executing program 1 (id=2072): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sync() sync() 2m11.766147816s ago: executing program 33 (id=2072): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sync() sync() 12.984306794s ago: executing program 2 (id=2713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0a2}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.713364277s ago: executing program 0 (id=2715): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x50) socket$inet6(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[], 0x50) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.978804071s ago: executing program 0 (id=2718): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 9.724210182s ago: executing program 2 (id=2722): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x17c, 0x65, 0x2, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x140, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x96, 0xe, 0x2}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x11c, 0x1, [@m_skbedit={0xe8, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8e}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0xa3, 0x6, "e694237e5368d7ffa3b6902e867a74d28928d9c60c5545d197aed0ec6ae835ef8d6a9da336c44092b74bda2299f780b216b499fbe27d758019db25c266280e79bc55f4fa69e0bc5288f64828bf15b5160f77a26791ac04656dc2da929e6396a3d494a63bc9737729a32d8631b30d5dae8ad64e22cca01df471bba0300d563cd153d416bd231e3de075e047b883fd2ec2e650454a7c3483dc348da03b4ad0f5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 9.579668636s ago: executing program 0 (id=2723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 7.808180756s ago: executing program 7 (id=2728): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 7.78289541s ago: executing program 2 (id=2729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 7.612712632s ago: executing program 3 (id=2731): sendmsg$rds(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0xc48}, 0x0, 0x0, 0x6, 0x1d9d, 0xffff, 0xe, 0x8, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {0x0}, 0x0, 0x0, 0x0, 0x2}}], 0xa0}, 0x4000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) 7.538739249s ago: executing program 0 (id=2733): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r2, r1, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) close(0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[]) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, 0x0, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) socket$kcm(0x10, 0x7, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 7.457535002s ago: executing program 7 (id=2734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0a2}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.389429327s ago: executing program 3 (id=2735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x405, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x40}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x3, 0xc, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002c7060000000000000000a51efda6e9d10018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 6.487531682s ago: executing program 0 (id=2737): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a000000000000000000000a0000090900010073797a310000000000000000000ff03000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@flag='rw'}]}, 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x500, 0x10e) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) ioctl$FITRIM(r2, 0xc4009420, &(0x7f0000000180)={0x5, 0x204}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 6.051169138s ago: executing program 5 (id=2738): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000200)={0x0, 0x72b1, 0x8, 0x4, 0x364}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4c, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 5.587038706s ago: executing program 2 (id=2739): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="4b9ddfd130cd99fb9af465dec66436050f657fa87225857202db1b", 0x1b}], 0x1, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) gettid() ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 5.473179396s ago: executing program 6 (id=2740): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x1, 0x4000003}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) 5.233983517s ago: executing program 5 (id=2741): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x17c, 0x65, 0x2, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x140, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x96, 0xe, 0x2}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x11c, 0x1, [@m_skbedit={0xe8, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8e}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0xa3, 0x6, "e694237e5368d7ffa3b6902e867a74d28928d9c60c5545d197aed0ec6ae835ef8d6a9da336c44092b74bda2299f780b216b499fbe27d758019db25c266280e79bc55f4fa69e0bc5288f64828bf15b5160f77a26791ac04656dc2da929e6396a3d494a63bc9737729a32d8631b30d5dae8ad64e22cca01df471bba0300d563cd153d416bd231e3de075e047b883fd2ec2e650454a7c3483dc348da03b4ad0f5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.021702263s ago: executing program 6 (id=2742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r2, r1, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) close(0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[]) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x442a, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) socket$kcm(0x10, 0x7, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 3.374738351s ago: executing program 5 (id=2743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x6b, 0x0, 0x1, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8, 0x8001, 0x800}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/134, 0x86}, {&(0x7f00000007c0)=""/198, 0xc6}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000005800)=""/4064, 0xfe0}, {&(0x7f0000004080)=""/4116, 0x1014}, {&(0x7f0000000340)=""/180, 0xb4}], 0x7}, 0x5}], 0x2, 0x12040, 0x0) 3.337958428s ago: executing program 3 (id=2744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa6e4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10, 0x0}, 0x1) 3.285851443s ago: executing program 6 (id=2745): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xac, &(0x7f0000000140)=""/172, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000380)={0x2, @local, 0x4e20, 0x1, 'lblcr\x00', 0x18, 0x70397163, 0x65}, 0x2c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x700, 0x700, 0x4, 0x7fffffff, {{0x1a, 0x4, 0x1, 0x4, 0x68, 0x68, 0x0, 0x73, 0x4, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x54, 0x61, 0x3, 0x1, [{@multicast1, 0x5}, {@private=0xa010101}, {@broadcast, 0x9}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x4, 0x0}, 0x9}, {@loopback, 0x1}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4}, {@private=0xa010101, 0xffff}, {@loopback, 0x4}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1d, 0x7, 0x1000, 0x0, 0x4000, r5, 0x8, '\x00', r6, 0xffffffffffffffff, 0x4, 0x3}, 0x50) keyctl$describe(0x11, r4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) pread64(0xffffffffffffffff, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x1, 0x1, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x234f, 0x1, 0x0, 0x7, 0x5, 0x8, 0x3, 0x5, 0xfd, 0xfffffffa, 0x1, 0x1, 0x1, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x2, 0x40000003, 0x8c, 0xca9f, 0x0, 0x20001e58, 0xb, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0xfbfffff8]}) 3.267118071s ago: executing program 7 (id=2746): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 2.983656874s ago: executing program 5 (id=2747): sendmsg$rds(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0xc48}, 0x0, 0x0, 0x6, 0x1d9d, 0xffff, 0xe, 0x8, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x2}}], 0xa0}, 0x4000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) 2.448251042s ago: executing program 3 (id=2748): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.976308106s ago: executing program 6 (id=2749): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r2, r1, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) close(0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[]) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, 0x0, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) socket$kcm(0x10, 0x7, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 1.74647067s ago: executing program 7 (id=2750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.743245287s ago: executing program 0 (id=2751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 754.685325ms ago: executing program 5 (id=2752): socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0xc48}, 0x0, 0x0, 0x6, 0x1d9d, 0xffff, 0xe, 0x8, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x2}}], 0xa0}, 0x4000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) 591.970924ms ago: executing program 2 (id=2753): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000200)={0x0, 0x72b1, 0x8, 0x4, 0x364}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4c, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 591.011205ms ago: executing program 3 (id=2754): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x1, 0x4000003}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) 519.424332ms ago: executing program 6 (id=2755): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder-control\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x2000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x0, 0x0) bind$llc(r1, &(0x7f0000000200)={0x1a, 0x304, 0xa8, 0x14, 0x8, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=@profile={'permprofile ', '&\x00\x00\x02'}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980), 0x0, 0x20008000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000001300)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="26a9", 0x2}], 0x1}}], 0x1, 0x4884) 474.721441ms ago: executing program 7 (id=2756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x17c, 0x65, 0x2, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x140, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x96, 0xe, 0x2}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x11c, 0x1, [@m_skbedit={0xe8, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8e}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x200}]}, {0xa3, 0x6, "e694237e5368d7ffa3b6902e867a74d28928d9c60c5545d197aed0ec6ae835ef8d6a9da336c44092b74bda2299f780b216b499fbe27d758019db25c266280e79bc55f4fa69e0bc5288f64828bf15b5160f77a26791ac04656dc2da929e6396a3d494a63bc9737729a32d8631b30d5dae8ad64e22cca01df471bba0300d563cd153d416bd231e3de075e047b883fd2ec2e650454a7c3483dc348da03b4ad0f5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 370.644048ms ago: executing program 5 (id=2757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r2, r1, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) close(0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[]) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x442a, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) socket$kcm(0x10, 0x7, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 176.842946ms ago: executing program 3 (id=2758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c0a2}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 46.612679ms ago: executing program 2 (id=2759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/134, 0x86}, {&(0x7f00000007c0)=""/198, 0xc6}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000005800)=""/4064, 0xfe0}, {&(0x7f0000004080)=""/4116, 0x1014}, {&(0x7f0000000340)=""/180, 0xb4}], 0x7}, 0x5}], 0x2, 0x12040, 0x0) 7.793534ms ago: executing program 7 (id=2760): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a\x00'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=2761): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a000000", @ANYRES32], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000022c0)=""/213, 0xd5}], 0x1}, 0x4}], 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) kernel console output (not intermixed with test programs): p5: detected capacity change from 0 to 64 [ 282.405125][T10348] minix: Unknown parameter '/sys/power/pm_print_times' [ 283.089614][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1426'. [ 283.914981][T10378] loop1: detected capacity change from 0 to 32768 [ 283.934559][T10378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1435 (10378) [ 283.956965][T10378] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 283.967341][T10378] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 284.309233][T10378] BTRFS info (device loop1): enabling ssd optimizations [ 284.316274][T10378] BTRFS info (device loop1): turning on async discard [ 284.323096][T10378] BTRFS info (device loop1): enabling free space tree [ 284.589920][T10378] BTRFS info (device loop1): balance: start -d -m [ 284.601213][T10378] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 284.664446][T10378] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 284.728181][T10378] BTRFS info (device loop1): found 11 extents, stage: move data extents [ 284.780475][T10378] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 284.818374][T10378] BTRFS info (device loop1): balance: ended with status: 0 [ 285.055068][T10414] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 285.317673][T10419] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1443'. [ 285.970425][T10447] syzkaller0: entered promiscuous mode [ 285.993374][T10447] syzkaller0: entered allmulticast mode [ 286.359933][T10468] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1463'. [ 287.324215][ T5967] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 287.457200][T10491] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 288.321138][ T5967] usb 6-1: unable to get BOS descriptor or descriptor too short [ 288.407990][ T5967] usb 6-1: no configurations [ 288.439613][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 288.488514][ T5967] usb 6-1: can't read configurations, error -22 [ 290.933088][ T5831] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.015514][T10496] loop2: detected capacity change from 0 to 512 [ 291.142183][T10507] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1478'. [ 291.500176][T10520] syzkaller0: entered promiscuous mode [ 291.510739][T10520] syzkaller0: entered allmulticast mode [ 291.759217][T10533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1484'. [ 292.009187][T10545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 292.039114][T10545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 292.094760][T10545] bond0: entered promiscuous mode [ 292.121807][T10545] bond0: left promiscuous mode [ 292.320810][T10564] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1494'. [ 292.775465][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1492'. [ 293.068436][T10570] loop2: detected capacity change from 0 to 512 [ 293.119162][T10570] ext2: Unknown parameter 'uid<00000000000000000000' [ 293.300030][T10583] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1499'. [ 293.705112][T10594] loop1: detected capacity change from 0 to 2048 [ 293.858349][T10594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.967169][T10594] overlay: ./bus is not a directory [ 294.095089][T10610] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 294.248955][T10625] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1511'. [ 295.068355][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.370114][T10642] netlink: 'syz.5.1517': attribute type 6 has an invalid length. [ 295.397613][T10644] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1515'. [ 295.569231][T10646] tipc: Enabled bearer , priority 0 [ 295.601584][T10646] syzkaller0: entered promiscuous mode [ 295.607219][T10646] syzkaller0: entered allmulticast mode [ 295.639977][T10646] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 295.812760][T10660] tipc: Resetting bearer [ 295.971086][T10645] tipc: Resetting bearer [ 296.524036][T10645] tipc: Disabling bearer [ 296.822046][T10685] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.1529'. [ 296.874702][T10701] netlink: 'syz.0.1533': attribute type 6 has an invalid length. [ 297.039559][T10707] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1536'. [ 297.220108][T10711] netlink: 'syz.5.1537': attribute type 12 has an invalid length. [ 298.781640][T10737] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1547'. [ 298.825348][T10751] netlink: 'syz.0.1550': attribute type 6 has an invalid length. [ 299.006175][T10755] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1551'. [ 299.173590][T10745] syzkaller0: entered promiscuous mode [ 299.179178][T10745] syzkaller0: entered allmulticast mode [ 299.186440][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1554'. [ 299.230901][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1554'. [ 299.385779][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1554'. [ 299.411190][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1554'. [ 299.753153][T10786] netlink: 'syz.2.1559': attribute type 12 has an invalid length. [ 300.291385][T10796] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1567'. [ 300.608381][T10805] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 301.516683][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1575'. [ 301.666228][T10822] netlink: 'syz.2.1574': attribute type 1 has an invalid length. [ 302.084365][T10832] __nla_validate_parse: 4 callbacks suppressed [ 302.084459][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1578'. [ 302.102674][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1578'. [ 302.872165][T10841] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1581'. [ 303.087221][T10845] netlink: 'syz.0.1582': attribute type 12 has an invalid length. [ 303.859368][T10864] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1586'. [ 304.312575][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1591'. [ 304.418709][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 304.428277][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1590'. [ 304.447365][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 304.523695][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1590'. [ 304.705872][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1593'. [ 305.097470][T10884] tipc: Started in network mode [ 305.120900][T10884] tipc: Node identity ea42ef4424a3, cluster identity 4711 [ 305.128220][T10884] tipc: Enabled bearer , priority 0 [ 305.279933][T10884] tipc: Resetting bearer [ 305.381536][T10882] tipc: Disabling bearer [ 307.694174][T10932] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 307.882333][T10938] __nla_validate_parse: 1 callbacks suppressed [ 307.882389][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 307.902710][T10938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1612'. [ 308.563246][T10948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1616'. [ 308.606257][T10948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1616'. [ 308.622507][T10951] loop6: detected capacity change from 0 to 512 [ 308.663463][T10951] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 308.689891][T10948] team0: entered promiscuous mode [ 308.699720][T10959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1617'. [ 308.706823][T10951] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 308.726900][T10948] team_slave_0: entered promiscuous mode [ 308.738620][T10948] team_slave_1: entered promiscuous mode [ 308.748526][T10948] bond0: entered promiscuous mode [ 308.757415][T10948] : entered promiscuous mode [ 308.763361][T10948] bond_slave_1: entered promiscuous mode [ 308.772098][T10948] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 308.823599][T10951] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 308.842059][T10951] EXT4-fs (loop6): 1 truncate cleaned up [ 308.851913][T10951] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.472294][T10964] loop3: detected capacity change from 0 to 32768 [ 309.491270][T10964] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1621 (10964) [ 309.506593][T10964] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.516756][T10964] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 309.681923][ T6536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.744604][T10964] BTRFS info (device loop3): enabling ssd optimizations [ 309.751677][T10964] BTRFS info (device loop3): turning on async discard [ 309.758570][T10964] BTRFS info (device loop3): enabling free space tree [ 310.000953][T10964] BTRFS info (device loop3): balance: start -d -m [ 310.009259][T10964] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 310.098131][T10964] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 310.351678][T10964] BTRFS info (device loop3): found 10 extents, stage: move data extents [ 310.396891][T10964] BTRFS info (device loop3): found 1 extents, stage: update data pointers [ 310.425526][T10964] BTRFS info (device loop3): balance: ended with status: 0 [ 310.445643][ T5828] Bluetooth: hci6: command 0x0405 tx timeout [ 310.766436][T11003] tipc: Enabled bearer , priority 0 [ 310.805063][T11003] syzkaller0: entered promiscuous mode [ 310.824338][T11003] syzkaller0: entered allmulticast mode [ 310.874450][T11003] tipc: Resetting bearer [ 310.902811][T11002] tipc: Resetting bearer [ 311.144927][T11002] tipc: Disabling bearer [ 311.330831][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 311.471187][ T5829] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.536609][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.566871][ T9] usb 6-1: config 0 has no interface number 0 [ 311.587272][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.627056][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.682656][ T9] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.721743][ T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 311.741152][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.776505][ T9] usb 6-1: config 0 descriptor?? [ 312.282047][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 312.440027][ T9] input: HID 28bd:0042 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0001/input/input13 [ 312.511142][ T5828] Bluetooth: hci6: command 0x0405 tx timeout [ 312.648914][ T9] uclogic 0003:28BD:0042.0001: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 312.746131][ T9] usb 6-1: USB disconnect, device number 7 [ 313.318623][T11032] fido_id[11032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 313.400323][T11036] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1643'. [ 313.440961][T11036] block nbd0: reconnected socket [ 313.445955][T11036] nbd: socks must be embedded in a SOCK_ITEM attr [ 313.536915][ T5839] block nbd0: Receive control failed (result -32) [ 316.455984][T11067] netlink: 'syz.1.1653': attribute type 1 has an invalid length. [ 316.464469][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.470919][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.847807][T11067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1653'. [ 319.012234][T11081] fuse: Bad value for 'user_id' [ 319.017153][T11081] fuse: Bad value for 'user_id' [ 319.051561][T11087] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1661'. [ 319.061039][T11087] block nbd0: reconnected socket [ 319.066006][T11087] nbd: socks must be embedded in a SOCK_ITEM attr [ 319.075869][ T5839] block nbd0: Receive control failed (result -32) [ 320.117099][T11108] tipc: Enabled bearer , priority 0 [ 320.124639][T11108] syzkaller0: entered promiscuous mode [ 320.134713][T11108] syzkaller0: entered allmulticast mode [ 320.144655][T11108] tipc: Resetting bearer [ 320.224955][T11106] tipc: Resetting bearer [ 320.246900][T11106] tipc: Disabling bearer [ 320.610351][T11115] syzkaller0: entered promiscuous mode [ 320.651342][T11115] syzkaller0: entered allmulticast mode [ 320.857748][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1674'. [ 320.867640][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1674'. [ 321.044628][T11130] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1675'. [ 321.196727][T11130] block nbd0: reconnected socket [ 321.330905][T11130] nbd: socks must be embedded in a SOCK_ITEM attr [ 321.363153][ T5839] block nbd0: Receive control failed (result -32) [ 321.509327][T11140] fuse: Bad value for 'user_id' [ 321.540929][T11140] fuse: Bad value for 'user_id' [ 322.856239][T11155] loop5: detected capacity change from 0 to 32768 [ 322.882285][T11155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1685 (11155) [ 322.907744][T11155] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 322.917950][T11155] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 322.978911][T11155] BTRFS info (device loop5): enabling ssd optimizations [ 322.986185][T11155] BTRFS info (device loop5): turning on async discard [ 322.992997][T11155] BTRFS info (device loop5): enabling free space tree [ 323.893590][T11156] BTRFS info (device loop5): balance: start -d -m [ 323.943367][T11156] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 324.762448][T11196] fuse: Bad value for 'fd' [ 324.959627][T11156] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 325.553775][T11208] loop2: detected capacity change from 0 to 2048 [ 325.569445][T11156] BTRFS info (device loop5): balance: canceled [ 325.733798][T11208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.901616][T11208] overlay: ./bus is not a directory [ 325.928538][ T30] audit: type=1400 audit(2000000017.870:9): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=11213 comm="syz.3.1702" [ 326.098097][T11224] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1699: bg 0: block 234: padding at end of block bitmap is not set [ 326.530803][T11224] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 326.556428][ T5833] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 326.630833][T11224] EXT4-fs (loop2): This should not happen!! Data will be lost [ 326.630833][T11224] [ 326.701037][T11224] EXT4-fs (loop2): Total free blocks count 0 [ 326.763482][T11224] EXT4-fs (loop2): Free/Dirty block details [ 326.811202][T11224] EXT4-fs (loop2): free_blocks=0 [ 326.816203][T11224] EXT4-fs (loop2): dirty_blocks=48 [ 326.873035][T11224] EXT4-fs (loop2): Block reservation details [ 326.890780][T11224] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 327.053635][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1708'. [ 327.071517][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1708'. [ 327.469872][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 329.873671][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 329.883920][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 330.043827][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 330.053427][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 332.803482][T11306] loop2: detected capacity change from 0 to 64 [ 333.583280][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1737'. [ 333.618021][T11324] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 333.770149][T11330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1740'. [ 336.396760][T11354] loop3: detected capacity change from 0 to 2048 [ 336.742018][T11354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.811312][T11353] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 337.295510][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 339.056944][T11404] netlink: 'syz.6.1764': attribute type 1 has an invalid length. [ 339.099660][T11404] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1764'. [ 339.419606][T11411] tipc: Enabled bearer , priority 0 [ 339.445013][T11411] syzkaller0: entered promiscuous mode [ 339.458638][T11411] syzkaller0: entered allmulticast mode [ 339.467286][T11413] syzkaller0: entered promiscuous mode [ 339.473656][T11413] syzkaller0: entered allmulticast mode [ 339.486980][T11411] tipc: Resetting bearer [ 339.506163][T11410] tipc: Resetting bearer [ 339.544223][T11410] tipc: Disabling bearer [ 339.557615][T11415] loop1: detected capacity change from 0 to 2048 [ 339.608912][T11415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.656184][T11420] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 339.678940][T11415] overlay: ./bus is not a directory [ 339.966437][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 339.976488][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 340.573133][T11434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'. [ 340.582277][T11434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'. [ 341.517206][T11442] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1768: bg 0: block 234: padding at end of block bitmap is not set [ 341.598520][T11442] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 341.637788][T11442] EXT4-fs (loop1): This should not happen!! Data will be lost [ 341.637788][T11442] [ 341.696956][T11442] EXT4-fs (loop1): Total free blocks count 0 [ 341.708386][T11442] EXT4-fs (loop1): Free/Dirty block details [ 341.715596][T11442] EXT4-fs (loop1): free_blocks=0 [ 341.721166][T11442] EXT4-fs (loop1): dirty_blocks=48 [ 341.734959][T11442] EXT4-fs (loop1): Block reservation details [ 341.765614][T11442] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 341.847897][T11450] netlink: 'syz.6.1778': attribute type 1 has an invalid length. [ 341.888814][T11450] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1778'. [ 342.293158][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 342.556802][T11463] loop0: detected capacity change from 0 to 2048 [ 343.049453][T11463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.666675][T11474] syzkaller0: entered promiscuous mode [ 343.676803][T11474] syzkaller0: entered allmulticast mode [ 343.728469][T11478] loop5: detected capacity change from 0 to 128 [ 343.785700][T11478] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.082621][T11478] ext4 filesystem being mounted at /325/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.613351][ T5833] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.906982][T11504] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 345.914993][T11504] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1797'. [ 347.390332][T11527] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1801'. [ 347.420850][T11527] block nbd0: reconnected socket [ 347.426022][T11527] nbd: socks must be embedded in a SOCK_ITEM attr [ 347.441218][ T5839] block nbd0: Receive control failed (result -32) [ 347.789445][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 348.635288][T11555] loop1: detected capacity change from 0 to 2048 [ 348.793151][T11555] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.071215][T11554] tipc: Enabling of bearer rejected, failed to enable media [ 349.288963][T11556] syzkaller0: entered promiscuous mode [ 349.372664][T11556] syzkaller0: entered allmulticast mode [ 350.755113][T11564] loop0: detected capacity change from 0 to 512 [ 350.839628][T11564] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 350.973103][T11564] EXT4-fs (loop0): 1 truncate cleaned up [ 351.045524][T11564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.466584][T11574] loop5: detected capacity change from 0 to 2048 [ 351.491071][T11574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.866003][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.653249][T11605] loop3: detected capacity change from 0 to 2048 [ 354.107272][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1828'. [ 354.121272][T11606] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1828'. [ 354.194058][T11605] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.902780][T11609] netlink: 'syz.3.1829': attribute type 7 has an invalid length. [ 354.910556][T11609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1829'. [ 355.358762][T11618] loop0: detected capacity change from 0 to 512 [ 355.704570][T11618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 355.820422][T11618] EXT4-fs (loop0): 1 truncate cleaned up [ 355.835276][T11618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.585050][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 356.637145][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.701839][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 357.099902][T11645] netlink: 'syz.1.1840': attribute type 1 has an invalid length. [ 357.705783][T11649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1840'. [ 357.883432][T11639] tipc: Enabling of bearer rejected, failed to enable media [ 357.901503][T11647] syzkaller0: entered promiscuous mode [ 357.910936][T11647] syzkaller0: entered allmulticast mode [ 358.132608][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1845'. [ 358.146800][T11666] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1845'. [ 358.831402][T11669] nbd10: detected capacity change from 0 to 127 [ 358.838493][T11670] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1846'. [ 358.864442][T11670] block nbd0: reconnected socket [ 358.871272][T11670] nbd: socks must be embedded in a SOCK_ITEM attr [ 358.923876][ T5839] block nbd10: Receive control failed (result -104) [ 358.943371][ T5828] block nbd0: Receive control failed (result -32) [ 359.915680][T11681] loop5: detected capacity change from 0 to 32768 [ 359.967517][T11681] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1850 (11681) [ 359.996672][T11681] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 360.007042][T11681] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 360.215432][T11681] BTRFS info (device loop5): enabling ssd optimizations [ 360.222497][T11681] BTRFS info (device loop5): turning on async discard [ 360.229269][T11681] BTRFS info (device loop5): enabling free space tree [ 360.494411][T11704] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 360.717096][T11710] loop6: detected capacity change from 0 to 64 [ 360.740897][T11704] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1851'. [ 360.750413][T11681] BTRFS info (device loop5): balance: start -d -m [ 360.758365][T11681] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 360.776937][T11710] minix: Unknown parameter '/sys/power/pm_print_times' [ 360.904648][T11681] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 360.965153][T11681] BTRFS info (device loop5): found 10 extents, stage: move data extents [ 361.012277][T11681] BTRFS info (device loop5): found 1 extents, stage: update data pointers [ 361.056704][T11681] BTRFS info (device loop5): balance: ended with status: 0 [ 361.078480][T11709] loop3: detected capacity change from 0 to 2048 [ 361.216020][T11709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.550236][T11721] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1853: bg 0: block 234: padding at end of block bitmap is not set [ 361.662245][T11721] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 361.675054][T11721] EXT4-fs (loop3): This should not happen!! Data will be lost [ 361.675054][T11721] [ 361.685002][T11721] EXT4-fs (loop3): Total free blocks count 0 [ 361.692738][T11721] EXT4-fs (loop3): Free/Dirty block details [ 361.699345][T11721] EXT4-fs (loop3): free_blocks=0 [ 361.704844][T11721] EXT4-fs (loop3): dirty_blocks=48 [ 361.711421][T11721] EXT4-fs (loop3): Block reservation details [ 361.718019][T11721] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 361.941641][ T6004] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 363.283202][T11731] IPv6: sit1: Disabled Multicast RS [ 363.289367][T11731] sit1: entered allmulticast mode [ 363.664725][ T5833] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.448665][T11743] tipc: Enabling of bearer rejected, failed to enable media [ 365.501507][T11745] syzkaller0: entered promiscuous mode [ 365.507016][T11745] syzkaller0: entered allmulticast mode [ 366.403793][T11791] loop2: detected capacity change from 0 to 32768 [ 366.439230][T11791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1873 (11791) [ 366.508899][T11791] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 366.519749][T11791] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 366.832111][T11791] BTRFS info (device loop2): enabling ssd optimizations [ 366.839094][T11791] BTRFS info (device loop2): turning on async discard [ 366.845950][T11791] BTRFS info (device loop2): enabling free space tree [ 367.163634][T11791] BTRFS info (device loop2): balance: start -d -m [ 367.171359][T11791] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 367.208478][T11791] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 367.305208][T11791] BTRFS info (device loop2): found 10 extents, stage: move data extents [ 367.365227][T11791] BTRFS info (device loop2): found 1 extents, stage: update data pointers [ 367.582834][T11791] BTRFS info (device loop2): balance: ended with status: 0 [ 367.675288][T11838] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 368.532462][T11847] tipc: Enabling of bearer rejected, failed to enable media [ 368.584126][T11850] syzkaller0: entered promiscuous mode [ 368.603070][T11850] syzkaller0: entered allmulticast mode [ 368.676995][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 368.748696][T11854] loop1: detected capacity change from 0 to 512 [ 368.779930][T11854] ext2: Unknown parameter 'uid<00000000000000000000' [ 369.762269][T11876] netlink: 'syz.3.1891': attribute type 6 has an invalid length. [ 370.362068][T11892] loop0: detected capacity change from 0 to 64 [ 370.368573][ T5821] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 371.412663][T11918] fuse: Unknown parameter 'user_i00000000000000000000' [ 371.434641][T11919] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1903'. [ 371.775925][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1905'. [ 371.830051][T11929] loop6: detected capacity change from 0 to 512 [ 371.893542][T11929] ext2: Unknown parameter 'uid<00000000000000000000' [ 372.104834][T11934] loop0: detected capacity change from 0 to 32768 [ 372.144699][T11934] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1909 (11934) [ 372.161539][T11934] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 372.171748][T11934] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 372.303051][T11935] netlink: 'syz.5.1906': attribute type 12 has an invalid length. [ 372.504093][T11934] BTRFS info (device loop0): enabling ssd optimizations [ 372.511184][T11934] BTRFS info (device loop0): turning on async discard [ 372.517972][T11934] BTRFS info (device loop0): enabling free space tree [ 372.951908][T11934] BTRFS info (device loop0): balance: start -d -m [ 372.960136][T11934] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 373.019411][T11934] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 373.117358][T11934] BTRFS info (device loop0): found 10 extents, stage: move data extents [ 373.156194][T11934] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 373.183399][T11934] BTRFS info (device loop0): balance: ended with status: 0 [ 373.702404][T11974] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1917'. [ 373.752180][T11978] fuse: Unknown parameter 'user_i00000000000000000000' [ 374.107022][T11987] netlink: 'syz.6.1920': attribute type 6 has an invalid length. [ 374.630294][T11994] netlink: 'syz.2.1923': attribute type 6 has an invalid length. [ 376.032328][T12016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1925'. [ 376.165407][T12016] loop2: detected capacity change from 0 to 512 [ 376.281377][ T5820] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 376.297535][T12016] ext2: Unknown parameter 'uid<00000000000000000000' [ 376.656321][T12026] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 378.071422][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.077772][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.291699][T12043] fuse: Unknown parameter 'user_id00000000000000000000' [ 378.765129][T12057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1940'. [ 378.785849][T12057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1940'. [ 379.134617][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1944'. [ 379.183125][T12071] loop1: detected capacity change from 0 to 512 [ 379.214180][T12071] ext2: Unknown parameter 'uid<00000000000000000000' [ 380.438308][T12085] netlink: 'syz.3.1947': attribute type 6 has an invalid length. [ 381.236007][T12102] fuse: Bad value for 'fd' [ 381.323481][T12101] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1953'. [ 381.741191][T12117] netlink: 'syz.2.1960': attribute type 6 has an invalid length. [ 382.111616][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1963'. [ 382.177800][T12129] loop2: detected capacity change from 0 to 512 [ 382.216487][T12129] ext2: Unknown parameter 'uid<00000000000000000000' [ 382.421686][T12134] loop5: detected capacity change from 0 to 1024 [ 383.164070][T12155] fuse: Unknown parameter 'user_id00000000000000000000' [ 384.626895][T12175] netlink: 'syz.0.1976': attribute type 6 has an invalid length. [ 385.622718][T12184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1978'. [ 385.672733][T12184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1978'. [ 386.055968][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1981'. [ 386.267422][T12190] loop6: detected capacity change from 0 to 512 [ 386.311746][T12190] ext2: Unknown parameter 'uid<00000000000000000000' [ 387.721275][T12209] fuse: Bad value for 'fd' [ 387.774105][T12210] tipc: Enabled bearer , priority 0 [ 387.804920][T12210] tipc: Resetting bearer [ 387.996579][T12208] tipc: Disabling bearer [ 388.918588][T12229] netlink: 'syz.3.1993': attribute type 6 has an invalid length. [ 389.101147][T12234] netlink: 'syz.2.1992': attribute type 12 has an invalid length. [ 389.359599][T12238] netlink: 'syz.6.1996': attribute type 1 has an invalid length. [ 389.403113][ T7132] block nbd10: Possible stuck request ffff888025640000: control (read@0,1024B). Runtime 30 seconds [ 389.415461][ T7132] block nbd10: Possible stuck request ffff8880256401c0: control (read@1024,1024B). Runtime 30 seconds [ 389.426852][ T7132] block nbd10: Possible stuck request ffff888025640380: control (read@2048,1024B). Runtime 30 seconds [ 389.438638][ T7132] block nbd10: Possible stuck request ffff888025640540: control (read@3072,1024B). Runtime 30 seconds [ 389.440928][T12238] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1996'. [ 389.571094][T12243] netlink: 'syz.0.1997': attribute type 6 has an invalid length. [ 391.090383][T12252] netlink: 'syz.2.2001': attribute type 6 has an invalid length. [ 392.755960][T12274] IPv6: sit1: Disabled Multicast RS [ 392.762629][T12274] sit1: entered allmulticast mode [ 393.775331][T12281] netlink: 'syz.0.2008': attribute type 6 has an invalid length. [ 396.700069][T12301] netlink: 'syz.3.2013': attribute type 12 has an invalid length. [ 396.786571][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.812125][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.875321][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.912920][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 397.165537][T12327] loop5: detected capacity change from 0 to 32768 [ 397.177243][T12327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2021 (12327) [ 397.192789][T12327] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 397.203040][T12327] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 397.268243][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 397.354347][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 397.423430][T12327] BTRFS info (device loop5): enabling ssd optimizations [ 397.430419][T12327] BTRFS info (device loop5): turning on async discard [ 397.437413][T12327] BTRFS info (device loop5): enabling free space tree [ 397.657060][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 397.666465][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 397.676623][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 397.710612][T12327] BTRFS info (device loop5): balance: start -d -m [ 397.720635][T12327] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 397.739688][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 397.785101][T12327] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 397.831836][T12327] BTRFS info (device loop5): found 10 extents, stage: move data extents [ 397.867228][T12327] BTRFS info (device loop5): found 1 extents, stage: update data pointers [ 397.898937][T12327] BTRFS info (device loop5): balance: ended with status: 0 [ 399.011258][T12364] block nbd0: reconnected socket [ 399.050106][T12364] nbd: socks must be embedded in a SOCK_ITEM attr [ 399.059726][ T5828] block nbd0: Receive control failed (result -32) [ 399.596865][T12381] netlink: 'syz.2.2032': attribute type 4 has an invalid length. [ 399.737825][ T5833] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 399.948787][T12388] netlink: 'syz.3.2035': attribute type 12 has an invalid length. [ 400.341014][ T48] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 400.522046][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 400.585863][ T48] usb 2-1: New USB device found, idVendor=8aef, idProduct=7248, bcdDevice=de.06 [ 400.629921][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.658736][ T48] usb 2-1: Product: syz [ 400.675981][ T48] usb 2-1: Manufacturer: syz [ 400.694124][ T48] usb 2-1: SerialNumber: syz [ 400.753757][ T48] usb 2-1: config 0 descriptor?? [ 401.105662][ T48] usb 2-1: bad CDC descriptors [ 401.995005][T12417] input: syz0 as /devices/virtual/input/input14 [ 402.068096][T12429] loop1: detected capacity change from 0 to 64 [ 402.084467][T12426] __nla_validate_parse: 26 callbacks suppressed [ 402.084488][T12426] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2046'. [ 402.170936][T12426] block nbd0: reconnected socket [ 402.176232][T12426] nbd: socks must be embedded in a SOCK_ITEM attr [ 402.262607][ T5828] block nbd0: Receive control failed (result -32) [ 402.521207][T12434] netlink: 'syz.2.2049': attribute type 4 has an invalid length. [ 402.975463][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2048'. [ 403.214972][T12440] loop3: detected capacity change from 0 to 512 [ 403.243444][T12440] ext2: Unknown parameter 'uid<00000000000000000000' [ 404.107466][ T9] usb 2-1: USB disconnect, device number 4 [ 406.105027][T12491] netlink: 'syz.1.2067': attribute type 6 has an invalid length. [ 406.958190][T12508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2070'. [ 406.981267][T12508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2070'. [ 407.157115][T12508] team0: entered promiscuous mode [ 407.171055][T12508] team_slave_0: entered promiscuous mode [ 407.180342][T12508] team_slave_1: entered promiscuous mode [ 407.214547][T12508] bond0: entered promiscuous mode [ 407.243845][T12508] bond_slave_0: entered promiscuous mode [ 407.257958][T12508] bond_slave_1: entered promiscuous mode [ 407.292660][T12508] debugfs: 'hsr1' already exists in 'hsr' [ 407.323386][T12508] Cannot create hsr debugfs directory [ 407.356961][T12508] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 407.372037][T12508] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 407.383820][T12508] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 408.734858][T12530] nbd11: detected capacity change from 0 to 127 [ 408.749966][T12535] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2076'. [ 408.777862][T12535] block nbd0: reconnected socket [ 408.802675][T12541] syzkaller0: entered promiscuous mode [ 408.813820][T12541] syzkaller0: entered allmulticast mode [ 408.820294][T12535] nbd: socks must be embedded in a SOCK_ITEM attr [ 408.889620][ T5828] block nbd11: Receive control failed (result -104) [ 408.900177][ T5839] block nbd0: Receive control failed (result -32) [ 410.896269][T12578] netlink: 'syz.6.2089': attribute type 6 has an invalid length. [ 411.720217][T12584] netlink: 'syz.6.2092': attribute type 4 has an invalid length. [ 412.111728][ T7132] block nbd11: Connection timed out, retrying (0/1 alive) [ 412.119051][ T7132] block nbd11: Connection timed out, retrying (0/1 alive) [ 412.126557][ T6028] block nbd11: Dead connection, failed to find a fallback [ 412.134004][ T6028] block nbd11: shutting down sockets [ 412.139367][ T6028] blk_print_req_error: 286 callbacks suppressed [ 412.139385][ T6028] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.155128][ T7132] block nbd11: Connection timed out, retrying (0/1 alive) [ 412.162461][ T7132] block nbd11: Connection timed out, retrying (0/1 alive) [ 412.169745][ T6028] buffer_io_error: 286 callbacks suppressed [ 412.169764][ T6028] Buffer I/O error on dev nbd11, logical block 0, async page read [ 412.183869][ T6028] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.195878][ T6028] Buffer I/O error on dev nbd11, logical block 3, async page read [ 412.204030][ T6028] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.213415][ T6028] Buffer I/O error on dev nbd11, logical block 2, async page read [ 412.222635][ T6028] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.231918][ T6028] Buffer I/O error on dev nbd11, logical block 1, async page read [ 412.239968][ T5834] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.256358][ T5834] Buffer I/O error on dev nbd11, logical block 0, async page read [ 412.264820][ T5834] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.274965][ T5834] Buffer I/O error on dev nbd11, logical block 1, async page read [ 412.283208][ T5834] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.293462][ T5834] Buffer I/O error on dev nbd11, logical block 2, async page read [ 412.301695][ T5834] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.311151][ T5834] Buffer I/O error on dev nbd11, logical block 3, async page read [ 412.319392][ T5834] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.328811][ T5834] Buffer I/O error on dev nbd11, logical block 0, async page read [ 412.337049][ T5834] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.346396][ T5834] Buffer I/O error on dev nbd11, logical block 1, async page read [ 412.358365][ T5834] ldm_validate_partition_table(): Disk read failed. [ 412.367453][ T5834] Dev nbd11: unable to read RDB block 0 [ 412.375745][ T5834] nbd11: unable to read partition table [ 412.395785][ T5834] ldm_validate_partition_table(): Disk read failed. [ 412.422941][ T5834] Dev nbd11: unable to read RDB block 0 [ 412.441948][ T5834] nbd11: unable to read partition table [ 413.401132][T12605] netlink: 'syz.0.2094': attribute type 6 has an invalid length. [ 414.065392][T12616] netlink: 'syz.3.2101': attribute type 6 has an invalid length. [ 414.566681][T12628] netlink: 'syz.3.2107': attribute type 4 has an invalid length. [ 415.742199][T12647] fuse: Unknown parameter '0x0000000000000003' [ 416.603536][ T48] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 416.880938][ T48] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.984425][ T48] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 417.132581][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.308444][ T48] usb 7-1: config 0 descriptor?? [ 417.354835][ T48] pwc: Askey VC010 type 2 USB webcam detected. [ 418.441733][ T48] pwc: recv_control_msg error -32 req 02 val 2b00 [ 418.461026][ T48] pwc: recv_control_msg error -32 req 02 val 2700 [ 418.469854][ T48] pwc: recv_control_msg error -32 req 02 val 2c00 [ 418.482654][ T48] pwc: recv_control_msg error -32 req 04 val 1000 [ 418.489893][ T48] pwc: recv_control_msg error -32 req 04 val 1300 [ 418.517174][ T48] pwc: recv_control_msg error -32 req 04 val 1400 [ 418.526223][ T48] pwc: recv_control_msg error -71 req 02 val 2000 [ 418.533570][ T48] pwc: recv_control_msg error -71 req 02 val 2100 [ 418.541213][ T48] pwc: recv_control_msg error -71 req 04 val 1500 [ 418.551147][ T48] pwc: recv_control_msg error -71 req 02 val 2500 [ 418.571296][ T48] pwc: recv_control_msg error -71 req 02 val 2400 [ 418.578206][ T48] pwc: recv_control_msg error -71 req 02 val 2600 [ 418.585540][ T48] pwc: recv_control_msg error -71 req 02 val 2900 [ 418.601426][ T48] pwc: recv_control_msg error -71 req 02 val 2800 [ 418.608511][ T48] pwc: recv_control_msg error -71 req 04 val 1100 [ 418.641479][ T48] pwc: recv_control_msg error -71 req 04 val 1200 [ 418.681289][ T48] pwc: Registered as video103. [ 418.688495][ T48] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input15 [ 418.777996][ T48] usb 7-1: USB disconnect, device number 3 [ 418.951098][T12670] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 419.122594][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2120'. [ 419.210401][T12676] netlink: 'syz.0.2121': attribute type 4 has an invalid length. [ 419.479518][ T6028] block nbd10: Possible stuck request ffff888025640000: control (read@0,1024B). Runtime 60 seconds [ 419.490392][ T6028] block nbd10: Possible stuck request ffff8880256401c0: control (read@1024,1024B). Runtime 60 seconds [ 419.511048][ T6028] block nbd10: Possible stuck request ffff888025640380: control (read@2048,1024B). Runtime 60 seconds [ 419.522503][ T6028] block nbd10: Possible stuck request ffff888025640540: control (read@3072,1024B). Runtime 60 seconds [ 419.739993][T12686] bond4 (unregistering): Released all slaves [ 420.036249][T12700] fuse: Unknown parameter 'fd0x0000000000000003' [ 420.298454][T12706] loop2: detected capacity change from 0 to 1024 [ 420.377684][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2131'. [ 420.408167][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2131'. [ 420.449005][T12708] team0: entered promiscuous mode [ 420.467142][T12708] team_slave_0: entered promiscuous mode [ 420.494133][T12708] team_slave_1: entered promiscuous mode [ 420.540108][T12708] bond0: entered promiscuous mode [ 420.559406][T12708] bond_slave_0: entered promiscuous mode [ 420.585557][T12708] bond_slave_1: entered promiscuous mode [ 420.611525][T12708] debugfs: 'hsr1' already exists in 'hsr' [ 420.627978][T12708] Cannot create hsr debugfs directory [ 420.666790][T12708] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 422.512288][T12739] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2139'. [ 422.640887][T12739] nbd: couldn't find a device at index 262144 [ 425.285236][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.309562][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.351278][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.359596][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.367832][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.475430][ T5828] Bluetooth: hci0: command tx timeout [ 428.331649][T12804] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2157'. [ 428.341080][T12804] nbd: couldn't find a device at index 262144 [ 428.667501][T12766] chnl_net:caif_netlink_parms(): no params data found [ 429.555256][ T5828] Bluetooth: hci0: command tx timeout [ 429.881311][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.908912][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.918248][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2164'. [ 429.932439][T12766] bridge_slave_0: entered allmulticast mode [ 429.938622][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2164'. [ 429.955823][T12766] bridge_slave_0: entered promiscuous mode [ 430.042552][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.050245][T12766] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.058516][T12766] bridge_slave_1: entered allmulticast mode [ 430.083491][T12766] bridge_slave_1: entered promiscuous mode [ 430.259267][T12829] tipc: Enabled bearer , priority 0 [ 430.294091][T12766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.322747][T12829] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 430.352126][T12829] tipc: Resetting bearer [ 430.407347][T12766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.467426][T12828] tipc: Disabling bearer [ 431.722273][T12766] team0: Port device team_slave_0 added [ 431.793639][T12766] team0: Port device team_slave_1 added [ 431.916344][T12766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.950525][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.030946][T12766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.109002][T12766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.140875][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.217034][T12856] loop3: detected capacity change from 0 to 64 [ 432.352265][T12766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.459115][T12859] bridge2: entered allmulticast mode [ 432.868336][T12868] netlink: 'syz.6.2176': attribute type 6 has an invalid length. [ 432.875362][T12850] syzkaller0: entered promiscuous mode [ 432.882942][T12850] syzkaller0: entered allmulticast mode [ 433.142716][T12766] hsr_slave_0: entered promiscuous mode [ 433.259962][T12766] hsr_slave_1: entered promiscuous mode [ 433.283842][T12766] debugfs: 'hsr0' already exists in 'hsr' [ 433.594801][T12766] Cannot create hsr debugfs directory [ 434.995169][T12882] loop5: detected capacity change from 0 to 2048 [ 435.008153][T12882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.023729][T12882] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 435.744354][T12887] loop5: detected capacity change from 0 to 2048 [ 435.757844][T12887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.282005][T12766] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 436.358710][T12766] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 436.474417][T12766] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 436.483024][T12893] loop0: detected capacity change from 0 to 2048 [ 436.487143][T12766] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 436.611740][T12893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.878172][T12893] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2185: bg 0: block 234: padding at end of block bitmap is not set [ 436.899645][T12893] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 436.912476][T12893] EXT4-fs (loop0): This should not happen!! Data will be lost [ 436.912476][T12893] [ 436.922281][T12893] EXT4-fs (loop0): Total free blocks count 0 [ 436.928253][T12893] EXT4-fs (loop0): Free/Dirty block details [ 436.934211][T12893] EXT4-fs (loop0): free_blocks=0 [ 436.939134][T12893] EXT4-fs (loop0): dirty_blocks=48 [ 436.944265][T12893] EXT4-fs (loop0): Block reservation details [ 436.950244][T12893] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 437.014787][T12766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.074124][T12766] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.088050][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 437.141999][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.149225][ T6622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.243895][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.251103][ T6622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.446079][T12916] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2188'. [ 439.267786][T12913] team0 (unregistering): left promiscuous mode [ 439.277354][T12913] team_slave_0: left promiscuous mode [ 439.291529][T12913] team_slave_1: left promiscuous mode [ 439.316240][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.342064][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.425914][T12913] team0 (unregistering): Port device team_slave_0 removed [ 439.482975][T12913] team0 (unregistering): Port device team_slave_1 removed [ 439.483898][ T5839] Bluetooth: hci6: command 0x0405 tx timeout [ 440.255111][T12766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.512576][T12960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2200'. [ 441.121492][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2200'. [ 441.550924][ T5839] Bluetooth: hci6: command 0x0405 tx timeout [ 441.810525][T12985] netlink: 'syz.5.2207': attribute type 6 has an invalid length. [ 443.113474][T13001] loop5: detected capacity change from 0 to 2048 [ 443.181599][T13001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.319758][T13003] nbd12: detected capacity change from 0 to 127 [ 443.330937][T13014] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2211: bg 0: block 234: padding at end of block bitmap is not set [ 443.387252][T13011] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2213'. [ 443.435733][T13014] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 443.460934][T13011] block nbd0: reconnected socket [ 443.465961][T13011] nbd: socks must be embedded in a SOCK_ITEM attr [ 443.485672][T13014] EXT4-fs (loop5): This should not happen!! Data will be lost [ 443.485672][T13014] [ 443.500289][T13014] EXT4-fs (loop5): Total free blocks count 0 [ 443.506934][T13014] EXT4-fs (loop5): Free/Dirty block details [ 443.518089][T13014] EXT4-fs (loop5): free_blocks=0 [ 443.523548][T13014] EXT4-fs (loop5): dirty_blocks=48 [ 443.536739][T13014] EXT4-fs (loop5): Block reservation details [ 443.544544][T13014] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 443.562423][ T5839] block nbd12: Receive control failed (result -104) [ 443.572614][ T5828] block nbd0: Receive control failed (result -32) [ 443.707803][T12766] veth0_vlan: entered promiscuous mode [ 443.764943][ T6622] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 443.778369][T12766] veth1_vlan: entered promiscuous mode [ 443.920414][T12766] veth0_macvtap: entered promiscuous mode [ 444.126062][T12766] veth1_macvtap: entered promiscuous mode [ 444.513748][T13024] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2220'. [ 444.574099][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2220'. [ 444.585495][T12766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.653786][T12766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.690401][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.755588][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.780113][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.846144][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.009908][T13052] netlink: 'syz.6.2226': attribute type 6 has an invalid length. [ 445.101829][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2225'. [ 445.143381][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2225'. [ 445.609863][T13057] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2229'. [ 445.807903][ T6622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.839939][ T6622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.071635][T13076] netlink: 'syz.2.2236': attribute type 6 has an invalid length. [ 446.133100][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.175858][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.674671][T13086] fuse: Bad value for 'fd' [ 446.751111][ T6136] block nbd12: Connection timed out, retrying (0/1 alive) [ 446.758461][ T6136] block nbd12: Connection timed out, retrying (0/1 alive) [ 446.765735][ T7777] block nbd12: Dead connection, failed to find a fallback [ 446.773113][ T7777] block nbd12: shutting down sockets [ 446.778474][ T7777] blk_print_req_error: 138 callbacks suppressed [ 446.778493][ T7777] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.798063][ T6136] block nbd12: Connection timed out, retrying (0/1 alive) [ 446.805791][ T6136] block nbd12: Connection timed out, retrying (0/1 alive) [ 446.813157][ T7777] buffer_io_error: 138 callbacks suppressed [ 446.813176][ T7777] Buffer I/O error on dev nbd12, logical block 0, async page read [ 446.827319][ T7777] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.843267][ T7777] Buffer I/O error on dev nbd12, logical block 3, async page read [ 446.851578][ T7777] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.860850][ T7777] Buffer I/O error on dev nbd12, logical block 2, async page read [ 446.869870][ T7777] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.880071][ T7777] Buffer I/O error on dev nbd12, logical block 1, async page read [ 446.888112][ T5834] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.906939][ T5834] Buffer I/O error on dev nbd12, logical block 0, async page read [ 446.926182][ T5834] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.943827][ T5834] Buffer I/O error on dev nbd12, logical block 1, async page read [ 446.960901][ T5834] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.975760][ T5834] Buffer I/O error on dev nbd12, logical block 2, async page read [ 446.984257][ T5834] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.993931][ T5834] Buffer I/O error on dev nbd12, logical block 3, async page read [ 447.002345][ T5834] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.011763][ T5834] Buffer I/O error on dev nbd12, logical block 0, async page read [ 447.026468][ T5834] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.084563][ T5834] Buffer I/O error on dev nbd12, logical block 1, async page read [ 447.114353][ T5834] ldm_validate_partition_table(): Disk read failed. [ 447.145275][ T5834] Dev nbd12: unable to read RDB block 0 [ 447.194717][ T5834] nbd12: unable to read partition table [ 447.356529][T13104] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2246'. [ 447.435945][ T5834] ldm_validate_partition_table(): Disk read failed. [ 447.712375][ T5834] Dev nbd12: unable to read RDB block 0 [ 447.776794][ T5834] nbd12: unable to read partition table [ 449.554980][ T56] block nbd10: Possible stuck request ffff888025640000: control (read@0,1024B). Runtime 90 seconds [ 449.565951][ T56] block nbd10: Possible stuck request ffff8880256401c0: control (read@1024,1024B). Runtime 90 seconds [ 449.592102][ T56] block nbd10: Possible stuck request ffff888025640380: control (read@2048,1024B). Runtime 90 seconds [ 449.638818][ T56] block nbd10: Possible stuck request ffff888025640540: control (read@3072,1024B). Runtime 90 seconds [ 452.503133][T13148] loop5: detected capacity change from 0 to 64 [ 452.510371][T13148] minix: Unknown parameter '/sys/power/pm_print_times' [ 453.918413][T13159] syzkaller1: entered promiscuous mode [ 454.217137][T13159] syzkaller1: entered allmulticast mode [ 454.761718][T13179] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2262'. [ 454.863261][T13183] bond0: entered promiscuous mode [ 454.981809][T13183] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 455.031170][T13183] bond0: left promiscuous mode [ 457.679994][T13201] tipc: Enabling of bearer rejected, failed to enable media [ 458.935666][T13229] netlink: 'syz.7.2274': attribute type 1 has an invalid length. [ 458.969222][T13229] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2274'. [ 459.001092][T13230] Bluetooth: MGMT ver 1.23 [ 459.005767][T13230] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 459.943881][T13235] nbd13: detected capacity change from 0 to 127 [ 460.316654][T13240] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2278'. [ 460.331264][ T5828] block nbd13: Receive control failed (result -32) [ 460.358699][ T5834] block nbd13: Dead connection, failed to find a fallback [ 460.400990][ T5834] block nbd13: shutting down sockets [ 460.436783][ T5834] blk_print_req_error: 138 callbacks suppressed [ 460.436803][ T5834] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.464309][ T5834] buffer_io_error: 138 callbacks suppressed [ 460.464328][ T5834] Buffer I/O error on dev nbd13, logical block 0, async page read [ 460.498502][T13251] loop7: detected capacity change from 0 to 64 [ 460.513841][ T5834] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.552960][T13251] minix: Unknown parameter '/sys/power/pm_print_times' [ 460.571141][ T5834] Buffer I/O error on dev nbd13, logical block 1, async page read [ 460.591721][T13257] syzkaller1: entered promiscuous mode [ 460.599234][ T5834] I/O error, dev nbd13, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.617649][T13257] syzkaller1: entered allmulticast mode [ 460.623381][ T5834] Buffer I/O error on dev nbd13, logical block 2, async page read [ 460.651631][ T5834] I/O error, dev nbd13, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.683711][ T5834] Buffer I/O error on dev nbd13, logical block 3, async page read [ 460.871015][ T5834] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.906145][ T5834] Buffer I/O error on dev nbd13, logical block 0, async page read [ 460.928193][ T5834] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.968520][ T5834] Buffer I/O error on dev nbd13, logical block 1, async page read [ 460.978142][T13268] netlink: 'syz.0.2286': attribute type 13 has an invalid length. [ 460.985514][ T5834] I/O error, dev nbd13, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.997858][ T5834] Buffer I/O error on dev nbd13, logical block 2, async page read [ 461.037976][ T5834] I/O error, dev nbd13, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.074717][ T5834] Buffer I/O error on dev nbd13, logical block 3, async page read [ 461.128989][ T5834] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.161627][ T5834] Buffer I/O error on dev nbd13, logical block 0, async page read [ 461.213225][ T5834] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.229580][ T5834] Buffer I/O error on dev nbd13, logical block 1, async page read [ 461.288418][ T5834] ldm_validate_partition_table(): Disk read failed. [ 461.342470][ T5834] Dev nbd13: unable to read RDB block 0 [ 461.349711][T13275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2290'. [ 461.368478][ T5834] nbd13: unable to read partition table [ 461.455349][ T5834] ldm_validate_partition_table(): Disk read failed. [ 461.737005][ T5834] Dev nbd13: unable to read RDB block 0 [ 461.812965][ T5834] nbd13: unable to read partition table [ 462.545691][T13266] Set syz1 is full, maxelem 6117 reached [ 462.836358][ T6622] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.901313][ T6622] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.910247][ T6622] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 463.087495][T13315] team0: entered promiscuous mode [ 463.120924][T13315] team_slave_0: entered promiscuous mode [ 463.137240][T13315] team_slave_1: entered promiscuous mode [ 463.183522][T13315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 463.396467][T13315] team0: left promiscuous mode [ 463.430802][T13315] team_slave_0: left promiscuous mode [ 463.445365][T13315] team_slave_1: left promiscuous mode [ 464.069457][ T6622] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.105245][ T6622] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.138215][ T6622] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 464.183304][ T6622] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.204036][ T6622] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.222967][ T6622] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 465.098601][T13347] loop0: detected capacity change from 0 to 64 [ 465.261151][ T6622] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.320430][ T6622] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.352278][ T6622] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 465.504120][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2305'. [ 465.616888][T13357] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 465.890224][T13362] loop2: detected capacity change from 0 to 2048 [ 466.043734][T13362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.253650][T13376] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2307: bg 0: block 234: padding at end of block bitmap is not set [ 466.322189][T13376] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 466.470990][T13376] EXT4-fs (loop2): This should not happen!! Data will be lost [ 466.470990][T13376] [ 466.481066][T13385] netlink: 'syz.0.2311': attribute type 6 has an invalid length. [ 466.583328][T13387] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 466.594483][T13376] EXT4-fs (loop2): Total free blocks count 0 [ 466.648675][T13376] EXT4-fs (loop2): Free/Dirty block details [ 466.662987][T13376] EXT4-fs (loop2): free_blocks=0 [ 466.678593][T13376] EXT4-fs (loop2): dirty_blocks=48 [ 466.701405][T13376] EXT4-fs (loop2): Block reservation details [ 466.708392][T13376] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 467.034940][ T1101] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 468.486264][T13416] loop6: detected capacity change from 0 to 64 [ 469.604159][T13439] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 469.961716][T13454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2334'. [ 469.971321][T13454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2334'. [ 470.016598][T13454] dummy0: entered promiscuous mode [ 470.043476][T13454] dummy0: left promiscuous mode [ 470.161429][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2336'. [ 470.430075][T13469] netlink: 'syz.0.2338': attribute type 6 has an invalid length. [ 470.883134][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2342'. [ 470.902511][T13484] netlink: 'syz.5.2341': attribute type 13 has an invalid length. [ 471.351850][T13492] netlink: 'syz.3.2346': attribute type 6 has an invalid length. [ 472.124693][T13499] netlink: 'syz.2.2347': attribute type 6 has an invalid length. [ 472.634454][T13482] Set syz1 is full, maxelem 6117 reached [ 472.989552][T13512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2352'. [ 473.022187][T13512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2352'. [ 473.054188][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2353'. [ 473.064854][T13511] loop5: detected capacity change from 0 to 2048 [ 473.085013][T13517] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2354'. [ 473.184563][T13522] IPv6: sit1: Disabled Multicast RS [ 473.242888][T13511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.259026][T13522] sit1: entered allmulticast mode [ 473.342473][T13528] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2351: bg 0: block 234: padding at end of block bitmap is not set [ 473.408530][T13528] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 473.421105][T13528] EXT4-fs (loop5): This should not happen!! Data will be lost [ 473.421105][T13528] [ 473.430902][T13528] EXT4-fs (loop5): Total free blocks count 0 [ 473.436904][T13528] EXT4-fs (loop5): Free/Dirty block details [ 473.442965][T13528] EXT4-fs (loop5): free_blocks=0 [ 473.447907][T13528] EXT4-fs (loop5): dirty_blocks=48 [ 473.453426][T13528] EXT4-fs (loop5): Block reservation details [ 473.459411][T13528] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 473.587174][T13532] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2355'. [ 473.828875][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2353'. [ 473.837801][T13532] block nbd0: reconnected socket [ 473.844169][T13532] nbd: socks must be embedded in a SOCK_ITEM attr [ 473.897084][ T5828] block nbd0: Receive control failed (result -32) [ 473.919977][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 474.327287][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2360'. [ 474.471631][T13548] nbd14: detected capacity change from 0 to 127 [ 474.490046][ T5828] block nbd14: Receive control failed (result -32) [ 474.498121][ T5834] block nbd14: Send control failed (result -32) [ 474.532413][ T5834] block nbd14: Request send failed, requeueing [ 474.568384][ T7777] block nbd14: Dead connection, failed to find a fallback [ 474.576431][ T7777] block nbd14: shutting down sockets [ 474.581844][ T7777] blk_print_req_error: 138 callbacks suppressed [ 474.581863][ T7777] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.597639][ T7777] buffer_io_error: 138 callbacks suppressed [ 474.597660][ T7777] Buffer I/O error on dev nbd14, logical block 0, async page read [ 474.612596][ T5834] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.622648][ T5834] Buffer I/O error on dev nbd14, logical block 1, async page read [ 474.630920][ T5834] I/O error, dev nbd14, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.640188][ T5834] Buffer I/O error on dev nbd14, logical block 2, async page read [ 474.648328][ T5834] I/O error, dev nbd14, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.660082][ T5834] Buffer I/O error on dev nbd14, logical block 3, async page read [ 474.668369][ T5834] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.691024][ T5834] Buffer I/O error on dev nbd14, logical block 0, async page read [ 474.699054][ T5834] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.708451][ T5834] Buffer I/O error on dev nbd14, logical block 1, async page read [ 474.717063][ T5834] I/O error, dev nbd14, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.727126][ T5834] Buffer I/O error on dev nbd14, logical block 2, async page read [ 474.735624][ T5834] I/O error, dev nbd14, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.744866][ T5834] Buffer I/O error on dev nbd14, logical block 3, async page read [ 474.753046][ T5834] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.763205][T13558] netlink: 'syz.2.2364': attribute type 13 has an invalid length. [ 474.790428][ T5834] Buffer I/O error on dev nbd14, logical block 0, async page read [ 474.841061][ T5834] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.850244][ T5834] Buffer I/O error on dev nbd14, logical block 1, async page read [ 475.120376][ T5834] ldm_validate_partition_table(): Disk read failed. [ 475.129741][T13569] netlink: 'syz.0.2367': attribute type 6 has an invalid length. [ 475.137823][ T5834] Dev nbd14: unable to read RDB block 0 [ 475.145904][ T5834] nbd14: unable to read partition table [ 475.195738][ T5834] ldm_validate_partition_table(): Disk read failed. [ 475.336978][ T5834] Dev nbd14: unable to read RDB block 0 [ 475.351256][ T5834] nbd14: unable to read partition table [ 475.996061][T13558] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.003646][T13558] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.408560][T13557] Set syz1 is full, maxelem 6117 reached [ 476.456397][T13583] loop6: detected capacity change from 0 to 2048 [ 476.569142][T13583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.620469][T13558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.637941][T13558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.866360][T13588] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2370: bg 0: block 234: padding at end of block bitmap is not set [ 476.951193][T13588] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 476.966528][T13588] EXT4-fs (loop6): This should not happen!! Data will be lost [ 476.966528][T13588] [ 476.976793][T13588] EXT4-fs (loop6): Total free blocks count 0 [ 476.991343][T13588] EXT4-fs (loop6): Free/Dirty block details [ 476.997474][T13588] EXT4-fs (loop6): free_blocks=0 [ 477.002694][T13588] EXT4-fs (loop6): dirty_blocks=48 [ 477.007877][T13588] EXT4-fs (loop6): Block reservation details [ 477.014083][T13588] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 477.466300][ T6065] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 477.792731][T13572] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.2369'. [ 477.812574][T13591] netlink: 'syz.0.2371': attribute type 12 has an invalid length. [ 477.836613][ T6004] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.868461][ T6004] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.908574][ T6004] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.936647][ T6004] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.981158][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2372'. [ 478.051674][ T6004] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.089625][ T6004] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.129441][ T6004] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.175391][ T6004] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.192770][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2372'. [ 478.421062][T13616] nbd15: detected capacity change from 0 to 127 [ 478.454788][ T5828] block nbd15: Receive control failed (result -32) [ 478.492579][ T5834] block nbd15: Dead connection, failed to find a fallback [ 478.501863][ T5834] block nbd15: shutting down sockets [ 478.556258][ T5834] ldm_validate_partition_table(): Disk read failed. [ 478.630291][ T5834] Dev nbd15: unable to read RDB block 0 [ 478.664097][ T5834] nbd15: unable to read partition table [ 478.715655][ T5834] ldm_validate_partition_table(): Disk read failed. [ 478.743580][ T5834] Dev nbd15: unable to read RDB block 0 [ 478.776096][ T5834] nbd15: unable to read partition table [ 479.235223][T13643] loop7: detected capacity change from 0 to 2048 [ 479.252032][T13640] IPv6: sit1: Disabled Multicast RS [ 479.292352][T13640] sit1: entered allmulticast mode [ 479.355439][T13643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.426580][T13646] nbd16: detected capacity change from 0 to 127 [ 479.481420][T13648] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2386'. [ 479.514737][T13648] block nbd0: reconnected socket [ 479.535890][T13643] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2385: bg 0: block 234: padding at end of block bitmap is not set [ 479.553235][T13643] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 479.565821][T13643] EXT4-fs (loop7): This should not happen!! Data will be lost [ 479.565821][T13643] [ 479.575698][T13643] EXT4-fs (loop7): Total free blocks count 0 [ 479.581735][T13643] EXT4-fs (loop7): Free/Dirty block details [ 479.587630][T13643] EXT4-fs (loop7): free_blocks=0 [ 479.592703][T13643] EXT4-fs (loop7): dirty_blocks=48 [ 479.597801][T13643] EXT4-fs (loop7): Block reservation details [ 479.603802][T13643] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 479.615943][ T5828] block nbd16: Receive control failed (result -104) [ 479.630239][ T5839] block nbd0: Receive control failed (result -32) [ 479.638866][ T6028] block nbd10: Possible stuck request ffff888025640000: control (read@0,1024B). Runtime 120 seconds [ 479.651212][ T6028] block nbd10: Possible stuck request ffff8880256401c0: control (read@1024,1024B). Runtime 120 seconds [ 479.662431][ T6028] block nbd10: Possible stuck request ffff888025640380: control (read@2048,1024B). Runtime 120 seconds [ 479.701477][ T6028] block nbd10: Possible stuck request ffff888025640540: control (read@3072,1024B). Runtime 120 seconds [ 479.763238][T13657] netlink: 'syz.0.2388': attribute type 12 has an invalid length. [ 479.840300][ T1101] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 480.255143][T13670] syzkaller1: entered promiscuous mode [ 480.280893][T13670] syzkaller1: entered allmulticast mode [ 481.247741][T13703] loop2: detected capacity change from 0 to 2048 [ 481.387007][T13703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.735957][T13716] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2403: bg 0: block 234: padding at end of block bitmap is not set [ 481.836752][T13716] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 481.850229][T13716] EXT4-fs (loop2): This should not happen!! Data will be lost [ 481.850229][T13716] [ 481.861822][T13716] EXT4-fs (loop2): Total free blocks count 0 [ 481.867901][T13716] EXT4-fs (loop2): Free/Dirty block details [ 481.874190][T13716] EXT4-fs (loop2): free_blocks=0 [ 481.879307][T13716] EXT4-fs (loop2): dirty_blocks=48 [ 481.884622][T13716] EXT4-fs (loop2): Block reservation details [ 481.890724][T13716] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 482.477557][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 482.611609][T13729] netlink: 'syz.5.2408': attribute type 12 has an invalid length. [ 483.440858][T13732] IPv6: sit1: Disabled Multicast RS [ 483.474036][T13732] sit1: entered allmulticast mode [ 483.606006][ T7777] block nbd16: Connection timed out, retrying (0/1 alive) [ 483.613299][ T7777] block nbd16: Connection timed out, retrying (0/1 alive) [ 483.621263][ T6136] block nbd16: Dead connection, failed to find a fallback [ 483.628755][ T6136] block nbd16: shutting down sockets [ 483.634690][ T7777] block nbd16: Connection timed out, retrying (0/1 alive) [ 483.641903][ T7777] block nbd16: Connection timed out, retrying (0/1 alive) [ 483.649120][ T6136] blk_print_req_error: 286 callbacks suppressed [ 483.649137][ T6136] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.664602][ T6136] buffer_io_error: 286 callbacks suppressed [ 483.664619][ T6136] Buffer I/O error on dev nbd16, logical block 0, async page read [ 483.679178][ T6136] I/O error, dev nbd16, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.688373][ T6136] Buffer I/O error on dev nbd16, logical block 3, async page read [ 483.696285][ T6136] I/O error, dev nbd16, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.705588][ T6136] Buffer I/O error on dev nbd16, logical block 2, async page read [ 483.713979][ T6136] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.723216][ T6136] Buffer I/O error on dev nbd16, logical block 1, async page read [ 483.737895][ T7633] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.787485][ T7633] Buffer I/O error on dev nbd16, logical block 0, async page read [ 483.800938][ T7633] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.831183][ T7633] Buffer I/O error on dev nbd16, logical block 1, async page read [ 483.880652][ T7633] I/O error, dev nbd16, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.916488][ T7633] Buffer I/O error on dev nbd16, logical block 2, async page read [ 483.926544][ T7633] I/O error, dev nbd16, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.937050][ T7633] Buffer I/O error on dev nbd16, logical block 3, async page read [ 483.958461][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'. [ 483.967625][ T7633] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.967666][ T7633] Buffer I/O error on dev nbd16, logical block 0, async page read [ 483.967811][ T7633] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.967842][ T7633] Buffer I/O error on dev nbd16, logical block 1, async page read [ 483.980193][ T7633] ldm_validate_partition_table(): Disk read failed. [ 484.058455][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'. [ 484.096179][ T7633] Dev nbd16: unable to read RDB block 0 [ 484.139297][ T7633] nbd16: unable to read partition table [ 484.164642][T13757] Bluetooth: hci0: unsupported parameter 65535 [ 484.171150][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'. [ 484.215467][ T7633] ldm_validate_partition_table(): Disk read failed. [ 484.230511][T13757] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 484.243550][ T7633] Dev nbd16: unable to read RDB block 0 [ 484.250430][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'. [ 484.262526][ T7633] nbd16: unable to read partition table [ 484.604482][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2422'. [ 484.747990][T13770] loop5: detected capacity change from 0 to 2048 [ 484.791953][T13770] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 484.805527][T13770] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 485.103217][T13779] loop7: detected capacity change from 0 to 1024 [ 485.272972][T13782] netlink: 'syz.6.2430': attribute type 12 has an invalid length. [ 485.524815][T13791] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2434'. [ 485.593532][T13796] gretap1: entered promiscuous mode [ 485.600801][ T5929] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 485.617996][T13795] Bluetooth: hci0: unsupported parameter 65535 [ 485.627271][T13795] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 485.781467][T13800] netlink: 'syz.0.2436': attribute type 6 has an invalid length. [ 485.813358][ T5929] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.832426][ T5929] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 485.852442][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.868102][ T5929] usb 6-1: config 0 descriptor?? [ 485.956515][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 486.437701][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 486.455083][ T5929] pwc: recv_control_msg error -32 req 02 val 2700 [ 486.467249][ T5929] pwc: recv_control_msg error -32 req 02 val 2c00 [ 486.481545][ T5929] pwc: recv_control_msg error -32 req 04 val 1000 [ 486.673785][T13816] IPv6: sit1: Disabled Multicast RS [ 486.706908][ T5929] pwc: recv_control_msg error -71 req 04 val 1400 [ 486.728792][T13816] sit1: entered allmulticast mode [ 486.753016][ T5929] pwc: recv_control_msg error -71 req 02 val 2000 [ 486.771766][ T5929] pwc: recv_control_msg error -71 req 02 val 2100 [ 486.779311][ T5929] pwc: recv_control_msg error -71 req 04 val 1500 [ 486.787308][ T5929] pwc: recv_control_msg error -71 req 02 val 2500 [ 486.807736][ T5929] pwc: recv_control_msg error -71 req 02 val 2400 [ 486.821110][ T5929] pwc: recv_control_msg error -71 req 02 val 2600 [ 486.850155][ T5929] pwc: recv_control_msg error -71 req 02 val 2900 [ 486.873113][ T5929] pwc: recv_control_msg error -71 req 02 val 2800 [ 486.890791][ T5929] pwc: recv_control_msg error -71 req 04 val 1100 [ 486.897780][ T5929] pwc: recv_control_msg error -71 req 04 val 1200 [ 486.975432][ T5929] pwc: Registered as video103. [ 486.993472][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 487.019289][ T5929] usb 6-1: USB disconnect, device number 8 [ 488.173949][T13844] Bluetooth: hci0: unsupported parameter 65535 [ 488.202002][T13844] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 488.264329][T13842] nbd17: detected capacity change from 0 to 127 [ 488.303271][T13850] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2450'. [ 488.323653][T13849] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2448'. [ 488.372456][T13849] block nbd0: reconnected socket [ 488.378025][T13849] nbd: socks must be embedded in a SOCK_ITEM attr [ 488.399972][ T5839] block nbd17: Receive control failed (result -104) [ 488.404847][ T5828] block nbd0: Receive control failed (result -32) [ 488.470623][T13853] gretap1: entered promiscuous mode [ 488.533668][T13854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2452'. [ 488.548918][T13854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2452'. [ 488.734112][T13859] nbd18: detected capacity change from 0 to 127 [ 488.819517][T13863] block nbd0: reconnected socket [ 488.917837][T13863] nbd: socks must be embedded in a SOCK_ITEM attr [ 489.307831][ T5828] block nbd18: Receive control failed (result -32) [ 489.324693][ T5839] block nbd0: Receive control failed (result -32) [ 489.606864][ T5825] block nbd18: Dead connection, failed to find a fallback [ 489.660859][ T5825] block nbd18: shutting down sockets [ 489.682788][ T5825] blk_print_req_error: 138 callbacks suppressed [ 489.682808][ T5825] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.749382][ T5825] buffer_io_error: 138 callbacks suppressed [ 489.749404][ T5825] Buffer I/O error on dev nbd18, logical block 0, async page read [ 489.763631][ T5825] I/O error, dev nbd18, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.773276][ T5825] Buffer I/O error on dev nbd18, logical block 1, async page read [ 489.792842][ T5825] I/O error, dev nbd18, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.838825][ T5825] Buffer I/O error on dev nbd18, logical block 2, async page read [ 490.071285][ T5825] I/O error, dev nbd18, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.628458][ T5825] Buffer I/O error on dev nbd18, logical block 3, async page read [ 490.662738][ T5825] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.714175][ T5825] Buffer I/O error on dev nbd18, logical block 0, async page read [ 490.739777][ T5825] I/O error, dev nbd18, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.802950][ T5825] Buffer I/O error on dev nbd18, logical block 1, async page read [ 490.831579][ T5825] I/O error, dev nbd18, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.841080][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 490.865096][ T5825] Buffer I/O error on dev nbd18, logical block 2, async page read [ 490.959003][ T5825] I/O error, dev nbd18, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.009988][ T5825] Buffer I/O error on dev nbd18, logical block 3, async page read [ 491.020177][ T5825] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.031842][ T5825] Buffer I/O error on dev nbd18, logical block 0, async page read [ 491.033351][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.040115][ T5825] I/O error, dev nbd18, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.063035][T13887] netlink: 'syz.7.2464': attribute type 6 has an invalid length. [ 491.130770][ T5838] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 491.158182][ T5825] Buffer I/O error on dev nbd18, logical block 1, async page read [ 491.166179][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.195865][ T5838] usb 3-1: config 0 descriptor?? [ 491.228628][ T5838] pwc: Askey VC010 type 2 USB webcam detected. [ 491.261136][ T5825] ldm_validate_partition_table(): Disk read failed. [ 491.521575][ T5825] Dev nbd18: unable to read RDB block 0 [ 491.533156][ T5825] nbd18: unable to read partition table [ 491.556678][ T5825] ldm_validate_partition_table(): Disk read failed. [ 491.567702][ T5825] Dev nbd18: unable to read RDB block 0 [ 491.579252][ T5825] nbd18: unable to read partition table [ 491.608287][ T5825] ldm_validate_partition_table(): Disk read failed. [ 491.633443][ T5838] pwc: recv_control_msg error -32 req 02 val 2b00 [ 491.648396][ T5825] Dev nbd18: unable to read RDB block 0 [ 491.653364][ T5838] pwc: recv_control_msg error -32 req 02 val 2700 [ 491.688607][ T5838] pwc: recv_control_msg error -32 req 02 val 2c00 [ 491.691942][ T5825] nbd18: unable to read partition table [ 491.705117][ T5838] pwc: recv_control_msg error -32 req 04 val 1000 [ 491.710985][ T6136] block nbd17: Connection timed out, retrying (0/1 alive) [ 491.718861][ T6136] block nbd17: Connection timed out, retrying (0/1 alive) [ 491.727555][ T93] block nbd17: Dead connection, failed to find a fallback [ 491.734845][ T93] block nbd17: shutting down sockets [ 491.740530][ T6136] block nbd17: Connection timed out, retrying (0/1 alive) [ 491.748228][ T6136] block nbd17: Connection timed out, retrying (0/1 alive) [ 491.759746][ T5834] ldm_validate_partition_table(): Disk read failed. [ 491.774797][ T5825] ldm_validate_partition_table(): Disk read failed. [ 491.785283][ T5834] Dev nbd17: unable to read RDB block 0 [ 491.793330][ T5834] nbd17: unable to read partition table [ 491.795986][T13900] IPv6: sit1: Disabled Multicast RS [ 491.813227][ T5834] ldm_validate_partition_table(): Disk read failed. [ 491.823474][ T5834] Dev nbd17: unable to read RDB block 0 [ 491.829948][ T5825] Dev nbd18: unable to read RDB block 0 [ 491.831397][ T5834] nbd17: unable to read partition table [ 491.863856][T13900] sit1: entered allmulticast mode [ 492.014071][ T5838] pwc: recv_control_msg error -71 req 04 val 1400 [ 492.029959][ T5825] nbd18: unable to read partition table [ 492.041520][ T5838] pwc: recv_control_msg error -71 req 02 val 2000 [ 492.065083][ T5838] pwc: recv_control_msg error -71 req 02 val 2100 [ 492.091484][ T5838] pwc: recv_control_msg error -71 req 04 val 1500 [ 492.132005][ T5838] pwc: recv_control_msg error -71 req 02 val 2500 [ 492.140097][ T5838] pwc: recv_control_msg error -71 req 02 val 2400 [ 492.149963][ T5838] pwc: recv_control_msg error -71 req 02 val 2600 [ 492.167444][ T5838] pwc: recv_control_msg error -71 req 02 val 2900 [ 492.179538][ T5838] pwc: recv_control_msg error -71 req 02 val 2800 [ 492.196870][T13907] __nla_validate_parse: 1 callbacks suppressed [ 492.196907][T13907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2470'. [ 492.203586][ T5838] pwc: recv_control_msg error -71 req 04 val 1100 [ 492.229482][T13907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2470'. [ 492.231194][ T5838] pwc: recv_control_msg error -71 req 04 val 1200 [ 492.275885][ T5838] pwc: Registered as video103. [ 492.320489][ T5838] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 492.401266][ T5838] usb 3-1: USB disconnect, device number 2 [ 492.607081][T13911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2471'. [ 492.898353][T13917] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2473'. [ 493.031985][T13922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2475'. [ 493.034248][T13921] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2474'. [ 493.062896][T13921] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2474'. [ 493.070741][T13922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2475'. [ 494.386514][T13946] netlink: 'syz.7.2483': attribute type 1 has an invalid length. [ 494.621116][T13957] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2483'. [ 494.837463][T13953] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 494.926685][T13953] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 495.114036][T13957] bond1: entered promiscuous mode [ 495.131774][T13957] bond1: entered allmulticast mode [ 495.139190][T13957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.206669][T13946] macvlan2: entered promiscuous mode [ 495.251552][T13946] macvlan2: entered allmulticast mode [ 495.287413][T13946] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 495.504297][T13967] loop0: detected capacity change from 0 to 32768 [ 495.519530][T13967] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2489 (13967) [ 495.547314][T13967] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 495.558407][T13967] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 495.649918][T13967] BTRFS info (device loop0): enabling ssd optimizations [ 495.656973][T13967] BTRFS info (device loop0): turning on async discard [ 495.663797][T13967] BTRFS info (device loop0): enabling free space tree [ 495.879175][T13967] BTRFS info (device loop0): balance: start -d -m [ 495.906592][T13967] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 495.969261][T13967] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 496.014006][T13967] BTRFS info (device loop0): found 11 extents, stage: move data extents [ 496.046885][T13967] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 496.082250][T13967] BTRFS info (device loop0): balance: ended with status: 0 [ 496.667859][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2494'. [ 496.871131][T14007] IPv6: sit1: Disabled Multicast RS [ 496.982028][T14007] sit1: entered allmulticast mode [ 497.303677][ T5820] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 497.891712][T14022] syzkaller0: entered promiscuous mode [ 497.897240][T14022] syzkaller0: entered allmulticast mode [ 498.077453][T14034] netlink: 'syz.2.2500': attribute type 12 has an invalid length. [ 498.100374][T14034] netlink: 'syz.2.2500': attribute type 4 has an invalid length. [ 498.922019][T14042] tipc: Started in network mode [ 498.972500][T14042] tipc: Node identity 823c469512d2, cluster identity 4711 [ 499.145541][T14042] tipc: Enabled bearer , priority 0 [ 499.339564][T14039] tipc: Resetting bearer [ 499.516310][T14037] tipc: Disabling bearer [ 499.650473][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2507'. [ 500.683196][T14076] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 500.755395][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.761888][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.811892][T14085] syzkaller0: entered promiscuous mode [ 500.817623][T14085] syzkaller0: entered allmulticast mode [ 501.724225][T14102] loop3: detected capacity change from 0 to 2048 [ 502.006130][T14102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.577706][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.730440][T14122] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 503.105613][T14138] netlink: 'syz.2.2533': attribute type 6 has an invalid length. [ 503.288396][T14153] loop5: detected capacity change from 0 to 2048 [ 503.378246][T14153] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.458416][T14153] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 504.163589][T14167] loop2: detected capacity change from 0 to 2048 [ 504.331735][T14167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.482739][T14167] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2540: bg 0: block 234: padding at end of block bitmap is not set [ 504.500211][T14167] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 504.513026][T14167] EXT4-fs (loop2): This should not happen!! Data will be lost [ 504.513026][T14167] [ 504.522804][T14167] EXT4-fs (loop2): Total free blocks count 0 [ 504.529635][T14167] EXT4-fs (loop2): Free/Dirty block details [ 504.535558][T14167] EXT4-fs (loop2): free_blocks=0 [ 504.540477][T14167] EXT4-fs (loop2): dirty_blocks=48 [ 504.545715][T14167] EXT4-fs (loop2): Block reservation details [ 504.551739][T14167] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 504.776939][ T61] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 505.013295][T14188] tipc: Enabled bearer , priority 0 [ 505.053381][T14191] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 505.074369][T14188] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 505.086975][T14192] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 505.105217][T14195] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 505.126931][T14188] tipc: Resetting bearer [ 505.209855][T14198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2550'. [ 506.190227][ T5929] tipc: Node number set to 2431534741 [ 506.409203][T14196] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 506.453704][T14196] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 507.122255][T14198] bond4: entered promiscuous mode [ 507.140800][T14198] bond4: entered allmulticast mode [ 507.148778][T14198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.461622][T14187] tipc: Disabling bearer [ 507.763009][T14195] macvlan2: entered promiscuous mode [ 507.768364][T14195] macvlan2: entered allmulticast mode [ 507.833043][T14195] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 508.069336][T14233] loop6: detected capacity change from 0 to 64 [ 508.106441][T14233] bridge0: entered allmulticast mode [ 508.117726][T14233] bridge0: entered promiscuous mode [ 508.125071][T14233] team0: Port device bridge0 added [ 508.673332][T14230] loop0: detected capacity change from 0 to 2048 [ 508.804394][T14230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.494358][T14230] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2560: bg 0: block 234: padding at end of block bitmap is not set [ 509.520168][T14230] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 509.532837][T14230] EXT4-fs (loop0): This should not happen!! Data will be lost [ 509.532837][T14230] [ 509.542519][T14230] EXT4-fs (loop0): Total free blocks count 0 [ 509.548499][T14230] EXT4-fs (loop0): Free/Dirty block details [ 509.554556][T14230] EXT4-fs (loop0): free_blocks=0 [ 509.559484][T14230] EXT4-fs (loop0): dirty_blocks=48 [ 509.564642][T14230] EXT4-fs (loop0): Block reservation details [ 509.571003][T14230] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 509.715675][ T6028] block nbd10: Possible stuck request ffff888025640000: control (read@0,1024B). Runtime 150 seconds [ 509.726760][ T6028] block nbd10: Possible stuck request ffff8880256401c0: control (read@1024,1024B). Runtime 150 seconds [ 509.740783][ T6028] block nbd10: Possible stuck request ffff888025640380: control (read@2048,1024B). Runtime 150 seconds [ 509.752024][ T6028] block nbd10: Possible stuck request ffff888025640540: control (read@3072,1024B). Runtime 150 seconds [ 509.784225][T14250] netlink: 'syz.5.2565': attribute type 1 has an invalid length. [ 509.845561][ T1101] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 510.086017][T14254] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 510.112825][T14255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2565'. [ 510.732102][T14253] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 510.824811][T14253] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 511.076104][T14266] loop7: detected capacity change from 0 to 2048 [ 511.126574][T14258] macvlan2: entered promiscuous mode [ 511.134629][T14248] Set syz1 is full, maxelem 6117 reached [ 511.211832][T14258] macvlan2: entered allmulticast mode [ 511.344128][T14258] bond2: entered promiscuous mode [ 511.722859][T14258] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 512.293349][T14266] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 512.310833][T14258] bond2: left promiscuous mode [ 512.409020][T14266] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 512.551781][T14280] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2572'. [ 512.610322][T14280] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2572'. [ 512.672085][T14285] netlink: 'syz.0.2574': attribute type 12 has an invalid length. [ 512.715760][T14284] tipc: Enabled bearer , priority 0 [ 512.772407][T14280] dummy0: entered promiscuous mode [ 512.807594][T14280] dummy0: left promiscuous mode [ 512.931313][T14290] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 512.947859][T14292] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 512.960201][T14284] tipc: Resetting bearer [ 513.059782][T14281] tipc: Disabling bearer [ 513.890401][T14303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2579'. [ 513.926306][T14303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2579'. [ 513.955902][T14303] gretap0: entered promiscuous mode [ 513.992626][T14303] gretap0: left promiscuous mode [ 514.051066][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 514.232748][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 514.248134][ T24] usb 7-1: config 0 has no interface number 0 [ 514.273042][ T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.351674][T14311] IPv6: sit1: Disabled Multicast RS [ 514.358174][T14311] sit1: entered allmulticast mode [ 514.383829][ T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.437832][ T24] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.811160][ T24] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 514.820912][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.833880][ T24] usb 7-1: config 0 descriptor?? [ 515.813733][ T24] input: HID 28bd:0042 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0042.0002/input/input18 [ 516.015288][ T24] uclogic 0003:28BD:0042.0002: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.6-1/input1 [ 516.074784][ T24] usb 7-1: USB disconnect, device number 4 [ 516.303610][T14334] syzkaller0: entered promiscuous mode [ 516.320338][T14334] syzkaller0: entered allmulticast mode [ 516.447024][T14329] fido_id[14329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 516.817646][T14344] tipc: Enabled bearer , priority 0 [ 516.861786][T14348] netlink: 'syz.6.2590': attribute type 12 has an invalid length. [ 516.900507][T14342] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 517.033766][ T30] audit: type=1400 audit(2000000158.760:10): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=14343 comm="syz.7.2593" [ 517.488065][T14344] tipc: Resetting bearer [ 517.633372][T14341] tipc: Disabling bearer [ 517.752287][T14352] loop2: detected capacity change from 0 to 1024 [ 517.977693][T14361] netlink: 'syz.5.2597': attribute type 6 has an invalid length. [ 519.306059][T14375] netlink: 'syz.6.2600': attribute type 13 has an invalid length. [ 519.780892][ T5929] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 519.933159][ T5929] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.948183][ T5929] usb 8-1: config 0 has no interface number 0 [ 519.982456][ T5929] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.017396][T14375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.020738][ T5929] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.050780][ T5929] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.081033][ T5929] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 520.100859][T14375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.112108][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.154737][ T5929] usb 8-1: config 0 descriptor?? [ 520.850250][ T5929] input: HID 28bd:0042 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0042.0003/input/input19 [ 520.994561][ T5929] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.7-1/input1 [ 521.108110][ T5929] usb 8-1: USB disconnect, device number 2 [ 521.263639][ T1090] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.291854][ T1090] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.344831][ T1090] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.346602][T14412] fido_id[14412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 521.369680][T14374] Set syz1 is full, maxelem 6117 reached [ 521.390868][ T1090] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.496248][ T1090] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.533811][ T1090] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.579878][T14413] syzkaller0: entered promiscuous mode [ 521.609969][T14413] syzkaller0: entered allmulticast mode [ 521.706846][ T30] audit: type=1400 audit(2000000163.430:11): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=14425 comm="syz.3.2608" [ 522.026662][ T1090] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.060242][ T1090] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.166576][T14431] loop6: detected capacity change from 0 to 1024 [ 522.386891][T14435] tipc: Enabled bearer , priority 0 [ 522.420874][T14435] syzkaller0: entered promiscuous mode [ 522.431187][T14435] syzkaller0: entered allmulticast mode [ 522.489183][T14435] tipc: Resetting bearer [ 522.526895][T14434] tipc: Resetting bearer [ 522.600016][T14434] tipc: Disabling bearer [ 522.809593][T14451] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2616'. [ 523.194494][T14463] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 523.225105][T14461] netlink: 'syz.3.2620': attribute type 13 has an invalid length. [ 523.426090][ T30] audit: type=1400 audit(2000000165.140:12): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=14466 comm="syz.2.2623" [ 523.561377][ T5933] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 523.932663][ T5933] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 523.964293][ T5933] usb 8-1: config 0 has no interface number 0 [ 524.141745][ T5933] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.154068][ T5933] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.200809][ T5933] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 524.350626][ T5933] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 524.615601][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.997589][ T5933] usb 8-1: config 0 descriptor?? [ 525.144878][T14461] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.152447][T14461] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.332024][T14494] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2630'. [ 525.341088][T14494] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2630'. [ 525.602399][T14461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.636144][T14461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.773996][ T5933] input: HID 28bd:0042 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0042.0004/input/input20 [ 525.874629][T14506] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2631'. [ 525.891222][ T5933] uclogic 0003:28BD:0042.0004: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.7-1/input1 [ 525.985669][ T5933] usb 8-1: USB disconnect, device number 3 [ 526.067415][T14507] fido_id[14507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 526.301633][ T6004] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.324271][ T6004] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.345607][ T6004] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.366157][ T6004] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.392203][T14509] netlink: 396 bytes leftover after parsing attributes in process `syz.6.2632'. [ 526.446163][ T6004] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.481119][ T6004] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.508387][ T6004] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.544069][ T6004] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.815664][ T30] audit: type=1400 audit(2000000168.540:13): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=14525 comm="syz.5.2639" [ 529.341424][T14538] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 529.402778][T14548] netlink: 'syz.3.2646': attribute type 13 has an invalid length. [ 529.944972][T14551] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2644'. [ 529.954329][T14551] block nbd0: reconnected socket [ 529.959287][T14551] nbd: socks must be embedded in a SOCK_ITEM attr [ 529.976295][ T5839] block nbd0: Receive control failed (result -32) [ 530.221291][T14559] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 530.380799][T14565] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2651'. [ 530.406849][T14565] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2651'. [ 532.829419][T14580] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 533.212695][ T30] audit: type=1400 audit(2000000174.670:14): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=14587 comm="syz.5.2660" [ 533.528193][T14599] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 534.569359][T14609] syzkaller0: entered promiscuous mode [ 534.574987][T14609] syzkaller0: entered allmulticast mode [ 534.619576][T14615] netlink: 'syz.5.2666': attribute type 6 has an invalid length. [ 535.732050][T14622] netlink: 'syz.2.2669': attribute type 1 has an invalid length. [ 535.739840][T14622] netlink: 'syz.2.2669': attribute type 1 has an invalid length. [ 535.821592][T14622] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2669'. [ 536.072245][T14634] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2675'. [ 536.205833][T14634] block nbd0: reconnected socket [ 536.601360][T14648] loop3: detected capacity change from 0 to 2048 [ 537.197967][T14634] nbd: socks must be embedded in a SOCK_ITEM attr [ 537.482462][T14648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.537906][T14648] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 537.651120][ T5839] block nbd0: Receive control failed (result -32) [ 538.125546][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2683'. [ 538.156603][T14664] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 538.163551][T14387] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 538.181876][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2683'. [ 538.289270][T14670] netlink: 'syz.5.2687': attribute type 13 has an invalid length. [ 538.381508][T14387] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 538.409980][T14387] usb 8-1: config 0 has no interface number 0 [ 538.420146][T14387] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.455272][T14676] netlink: 'syz.0.2689': attribute type 6 has an invalid length. [ 538.470923][T14387] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.519571][T14387] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.569759][T14387] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 538.591662][T14387] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.627209][T14387] usb 8-1: config 0 descriptor?? [ 538.888561][T14689] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2695'. [ 538.944980][T14689] block nbd0: reconnected socket [ 538.982971][T14689] nbd: socks must be embedded in a SOCK_ITEM attr [ 539.014721][ T5839] block nbd0: Receive control failed (result -32) [ 539.038689][T14691] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 539.413884][T14697] loop5: detected capacity change from 0 to 2048 [ 539.502087][T14697] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 539.549628][T14697] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 539.718751][T14387] input: HID 28bd:0042 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0042.0005/input/input21 [ 539.823788][ T6028] block nbd10: Possible stuck request ffff888025640000: control (read@0,1024B). Runtime 180 seconds [ 539.834667][ T6028] block nbd10: Possible stuck request ffff8880256401c0: control (read@1024,1024B). Runtime 180 seconds [ 539.846158][ T6028] block nbd10: Possible stuck request ffff888025640380: control (read@2048,1024B). Runtime 180 seconds [ 539.857274][ T6028] block nbd10: Possible stuck request ffff888025640540: control (read@3072,1024B). Runtime 180 seconds [ 539.915750][T14387] uclogic 0003:28BD:0042.0005: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.7-1/input1 [ 539.959465][T14704] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 540.001129][T14387] usb 8-1: USB disconnect, device number 4 [ 540.212913][T14711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2705'. [ 540.222077][T14711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2705'. [ 540.514525][T14714] fido_id[14714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 540.673691][T14719] loop7: detected capacity change from 0 to 2048 [ 540.674284][T14723] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2710'. [ 540.699588][T14724] netlink: 'syz.5.2711': attribute type 1 has an invalid length. [ 540.746711][T14719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.848225][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2711'. [ 540.893197][T14719] overlay: ./bus is not a directory [ 540.996239][T14731] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 541.102613][T14731] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 541.370636][T14733] bond3: entered promiscuous mode [ 541.379384][T14733] bond3: entered allmulticast mode [ 542.265491][T14733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 542.282515][T14745] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2709: bg 0: block 234: padding at end of block bitmap is not set [ 542.321808][T14745] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 542.370901][T14737] macvlan2: entered promiscuous mode [ 542.385348][T14737] macvlan2: entered allmulticast mode [ 542.404746][T14737] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 542.450797][T14745] EXT4-fs (loop7): This should not happen!! Data will be lost [ 542.450797][T14745] [ 542.543693][T14745] EXT4-fs (loop7): Total free blocks count 0 [ 542.550542][T14745] EXT4-fs (loop7): Free/Dirty block details [ 542.557015][T14745] EXT4-fs (loop7): free_blocks=0 [ 542.563932][T14745] EXT4-fs (loop7): dirty_blocks=48 [ 542.569429][T14745] EXT4-fs (loop7): Block reservation details [ 542.575679][T14745] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 542.742499][ T3499] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 542.829072][T14741] tipc: Enabled bearer , priority 0 [ 542.951620][T14746] syzkaller0: entered promiscuous mode [ 542.964570][T14746] syzkaller0: entered allmulticast mode [ 543.021042][T14735] tipc: Resetting bearer [ 543.243003][T14735] tipc: Disabling bearer [ 543.433897][T14766] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 544.321257][T14781] netlink: 'syz.7.2721': attribute type 13 has an invalid length. [ 544.427218][T14786] tmpfs: Bad value for 'mpol' [ 544.638420][T14781] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.646244][T14781] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.203971][T14781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.222855][T14781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.092636][ T1090] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.158026][ T1090] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.202231][ T1090] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.263743][ T1090] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.292550][T14810] netlink: 'syz.2.2729': attribute type 1 has an invalid length. [ 546.415852][T14818] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 546.424925][T14819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2729'. [ 546.761060][T14817] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 547.005601][T14817] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 547.416248][T14838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2735'. [ 547.421490][T14819] bond5: entered promiscuous mode [ 547.465070][T14819] bond5: entered allmulticast mode [ 547.470888][T14838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2735'. [ 547.485853][T14819] 8021q: adding VLAN 0 to HW filter on device bond5 [ 547.526919][T14833] macvlan0: entered promiscuous mode [ 547.541263][T14833] macvlan0: entered allmulticast mode [ 547.756903][T14848] loop0: detected capacity change from 0 to 32768 [ 547.767421][T14848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2737 (14848) [ 547.796176][T14833] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 547.811927][T14848] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 547.822280][T14848] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 547.951217][T14848] BTRFS info (device loop0): enabling ssd optimizations [ 547.958248][T14848] BTRFS info (device loop0): turning on async discard [ 547.967052][T14848] BTRFS info (device loop0): enabling free space tree [ 547.975462][T14832] tipc: Started in network mode [ 547.980346][T14832] tipc: Node identity 86478e553c6d, cluster identity 4711 [ 547.992370][T14832] tipc: Enabled bearer , priority 0 [ 548.227787][T14838] bond0: entered promiscuous mode [ 548.270560][T14838] bond_slave_0: entered promiscuous mode [ 548.294643][T14838] bond_slave_1: entered promiscuous mode [ 548.347206][T14848] BTRFS info (device loop0): balance: start -d -m [ 548.355212][T14848] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 548.384893][T14848] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 548.459579][T14838] bond0: left promiscuous mode [ 548.471822][T14838] bond_slave_0: left promiscuous mode [ 548.544332][T14848] BTRFS info (device loop0): found 10 extents, stage: move data extents [ 548.572935][T14838] bond_slave_1: left promiscuous mode [ 548.591873][T14848] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 548.624989][T14848] BTRFS info (device loop0): balance: ended with status: 0 [ 548.753773][T14830] tipc: Resetting bearer [ 548.771135][T14836] syzkaller0: entered promiscuous mode [ 548.776638][T14836] syzkaller0: entered allmulticast mode [ 548.835019][T14827] tipc: Resetting bearer [ 548.960418][T14827] tipc: Disabling bearer [ 549.010922][ T977] tipc: Node number set to 3123351125 [ 552.929819][ T5820] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 553.355845][T14911] Bluetooth: hci0: invalid length 1, exp 2 for type 4 [ 553.735023][ T30] audit: type=1400 audit(2000000195.450:15): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=14915 comm="syz.6.2755" [ 554.346311][T14929] tipc: Enabled bearer , priority 0 [ 554.521160][ T31] INFO: task syz.1.2072:12512 blocked for more than 143 seconds. [ 554.529024][ T31] Not tainted syzkaller #0 [ 554.534829][T14925] syzkaller0: entered promiscuous mode [ 554.609810][T14925] syzkaller0: entered allmulticast mode [ 554.675133][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.684439][ T31] task:syz.1.2072 state:D stack:26088 pid:12512 tgid:12511 ppid:5831 task_flags:0x400140 flags:0x00080002 [ 554.696456][ T31] Call Trace: [ 554.699750][ T31] [ 554.702962][ T31] __schedule+0x1798/0x4cc0 [ 554.707516][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.713347][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.718245][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.723200][ T31] ? __pfx___schedule+0x10/0x10 [ 554.728104][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.733819][ T31] ? schedule+0x91/0x360 [ 554.738115][ T31] schedule+0x165/0x360 [ 554.742420][ T31] schedule_preempt_disabled+0x13/0x30 [ 554.747912][ T31] __mutex_lock+0x7e6/0x1350 [ 554.752810][ T31] ? __mutex_lock+0x5bb/0x1350 [ 554.757602][ T31] ? sync_bdevs+0x1ac/0x340 [ 554.762177][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 554.767348][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.773033][ T31] ? iput+0x5eb/0xc50 [ 554.777049][ T31] sync_bdevs+0x1ac/0x340 [ 554.781536][ T31] ksys_sync+0xb9/0x150 [ 554.785717][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 554.790506][ T31] ? do_syscall_64+0xbe/0xfa0 [ 554.896591][ T31] __ia32_sys_sync+0xe/0x20 [ 554.901491][ T31] do_syscall_64+0xfa/0xfa0 [ 554.918048][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.923339][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.929464][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 554.935218][ T31] ? exc_page_fault+0xab/0x100 [ 554.940032][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.946685][ T31] RIP: 0033:0x7feba958efc9 [ 554.951188][ T31] RSP: 002b:00007febaa4f2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 554.959840][ T31] RAX: ffffffffffffffda RBX: 00007feba97e5fa0 RCX: 00007feba958efc9 [ 555.628632][T14383] tipc: Node number set to 227901133 [ 555.640932][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.648955][ T31] RBP: 00007feba97e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 555.772088][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.780457][ T31] R13: 00007feba97e6038 R14: 00007feba97e5fa0 R15: 00007fff14241008 [ 555.789009][ T31] [ 555.804738][ T31] INFO: task syz.1.2072:12513 blocked for more than 144 seconds. [ 555.813834][T14941] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 555.842817][ T31] Not tainted syzkaller #0 [ 555.857322][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.880884][ T31] task:syz.1.2072 state:D stack:27624 pid:12513 tgid:12511 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 555.919256][ T31] Call Trace: [ 555.923726][ T31] [ 555.926718][ T31] __schedule+0x1798/0x4cc0 [ 555.931832][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.937528][ T31] ? __lock_acquire+0xab9/0xd20 [ 555.942987][ T31] ? __lock_acquire+0xab9/0xd20 [ 555.948301][ T31] ? __pfx___schedule+0x10/0x10 [ 555.955537][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 555.964173][T14943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2751'. [ 555.965386][ T31] ? schedule+0x91/0x360 [ 555.980977][ T31] schedule+0x165/0x360 [ 555.985268][ T31] schedule_preempt_disabled+0x13/0x30 [ 555.992118][ T31] __mutex_lock+0x7e6/0x1350 [ 555.997070][ T31] ? __mutex_lock+0x5bb/0x1350 [ 556.002067][ T31] ? sync_bdevs+0x1ac/0x340 [ 556.006794][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 556.012517][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.018275][ T31] ? iput+0x5eb/0xc50 [ 556.022882][ T31] sync_bdevs+0x1ac/0x340 [ 556.030852][ T31] ksys_sync+0xb9/0x150 [ 556.035664][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 556.040570][ T31] ? do_syscall_64+0xbe/0xfa0 [ 556.045576][ T31] __ia32_sys_sync+0xe/0x20 [ 556.050131][ T31] do_syscall_64+0xfa/0xfa0 [ 556.054796][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.060918][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.067006][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.073409][ T31] ? exc_page_fault+0xab/0x100 [ 556.078239][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.084633][ T31] RIP: 0033:0x7feba958efc9 [ 556.089131][ T31] RSP: 002b:00007febaa4d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 556.098823][ T31] RAX: ffffffffffffffda RBX: 00007feba97e6090 RCX: 00007feba958efc9 [ 556.107221][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.115727][ T31] RBP: 00007feba97e6090 R08: 0000000000000000 R09: 0000000000000000 [ 556.124259][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.132620][ T31] R13: 00007feba97e6128 R14: 00007feba97e6090 R15: 00007fff14241008 [ 556.140832][ T31] [ 556.155515][ T31] [ 556.155515][ T31] Showing all locks held in the system: [ 556.164927][T14925] tipc: Resetting bearer [ 556.181615][ T31] 1 lock held by pool_workqueue_/3: [ 556.187428][ T31] 3 locks held by kworker/u8:1/13: [ 556.197787][ T31] 1 lock held by khungtaskd/31: [ 556.206814][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 556.218704][ T31] 3 locks held by kworker/u8:6/1101: [ 556.224161][ T31] #0: ffff88814ce8a148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 556.236106][ T31] #1: ffffc90003cffba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 556.249479][ T31] #2: ffffffff8f4e07c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 556.259424][ T31] 2 locks held by getty/5579: [ 556.264541][ T31] #0: ffff888033b630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 556.274636][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 556.285373][ T31] 1 lock held by udevd/5832: [ 556.290006][ T31] #0: ffff888024faf358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 556.299933][ T31] 5 locks held by kworker/u8:9/6004: [ 556.305379][ T31] 1 lock held by syz.1.2072/12512: [ 556.310860][ T31] #0: ffff888024faf358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 556.320391][ T31] 1 lock held by syz.1.2072/12513: [ 556.326362][ T31] #0: ffff888024faf358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 556.335975][ T31] 1 lock held by syz.3.2758/14924: [ 556.341432][ T31] #0: ffffffff8f4e07c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 556.350504][ T31] 2 locks held by syz.0.2751/14941: [ 556.356150][ T31] #0: ffffffff8f9e5430 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 556.365862][ T31] #1: ffffffff8f4e07c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 556.375636][ T31] 2 locks held by syz.0.2751/14942: [ 556.381136][ T31] #0: ffffffff8ec801a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 556.391259][ T31] #1: ffffffff8f4e07c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 556.400745][ T31] 1 lock held by syz.0.2751/14943: [ 556.406067][ T31] #0: ffffffff8f4e07c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 556.415528][ T31] 2 locks held by syz.0.2751/14944: [ 556.420987][ T31] #0: ffffffff8f9fbe30 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 556.430607][ T31] #1: ffffffff8f4e07c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 556.440187][ T31] 2 locks held by syz.0.2751/14945: [ 556.445663][ T31] #0: ffffffff8ec4cee0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 556.455506][ T31] #1: ffffffff8f4e07c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 556.465643][T14924] tipc: Resetting bearer [ 556.474411][ T31] [ 556.495318][ T31] ============================================= [ 556.495318][ T31] [ 556.512005][T14924] tipc: Disabling bearer [ 556.515958][ T31] NMI backtrace for cpu 0 [ 556.515977][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 556.516004][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.516019][ T31] Call Trace: [ 556.516029][ T31] [ 556.516039][ T31] dump_stack_lvl+0x189/0x250 [ 556.516075][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.516109][ T31] ? __pfx__printk+0x10/0x10 [ 556.516149][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 556.516187][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 556.516224][ T31] ? __pfx__printk+0x10/0x10 [ 556.516249][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.516282][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 556.516316][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 556.516354][ T31] watchdog+0xf60/0xfa0 [ 556.516393][ T31] ? watchdog+0x1e2/0xfa0 [ 556.516432][ T31] kthread+0x711/0x8a0 [ 556.516462][ T31] ? __pfx_watchdog+0x10/0x10 [ 556.516493][ T31] ? __pfx_kthread+0x10/0x10 [ 556.516515][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.516547][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.516584][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.516611][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.516633][ T31] ? __pfx_kthread+0x10/0x10 [ 556.516659][ T31] ret_from_fork+0x4bc/0x870 [ 556.516696][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 556.516738][ T31] ? __switch_to_asm+0x39/0x70 [ 556.516766][ T31] ? __switch_to_asm+0x33/0x70 [ 556.516793][ T31] ? __pfx_kthread+0x10/0x10 [ 556.516819][ T31] ret_from_fork_asm+0x1a/0x30 [ 556.516869][ T31] [ 556.516878][ T31] Sending NMI from CPU 0 to CPUs 1: [ 556.681630][ C1] NMI backtrace for cpu 1 [ 556.681649][ C1] CPU: 1 UID: 0 PID: 14934 Comm: syz.6.2761 Not tainted syzkaller #0 PREEMPT(full) [ 556.681674][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.681688][ C1] RIP: 0010:check_preemption_disabled+0x5c/0x120 [ 556.681721][ C1] Code: b4 44 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 8c a5 c3 f5 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 50 91 92 41 f6 47 2f [ 556.681739][ C1] RSP: 0018:ffffc90016e4f9c0 EFLAGS: 00000046 [ 556.681758][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000000 [ 556.681772][ C1] RDX: 0000000000000000 RSI: ffffffff8d9d1f00 RDI: ffffffff8bc07de0 [ 556.681788][ C1] RBP: 00000000ffffffff R08: ffffffff8f9e1e77 R09: 1ffffffff1f3c3ce [ 556.681805][ C1] R10: dffffc0000000000 R11: fffffbfff1f3c3cf R12: 0000000000000246 [ 556.681820][ C1] R13: ffff888052fe5ac0 R14: ffffffff8e13d340 R15: 0000000000000000 [ 556.681839][ C1] FS: 00007f510abf66c0(0000) GS:ffff888125e0b000(0000) knlGS:0000000000000000 [ 556.681858][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.681873][ C1] CR2: 000020000001c000 CR3: 000000007ca25000 CR4: 0000000000350ef0 [ 556.681890][ C1] Call Trace: [ 556.681899][ C1] [ 556.681910][ C1] lock_is_held_type+0xfe/0x190 [ 556.681936][ C1] __might_resched+0xa6/0x610 [ 556.681971][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 556.682003][ C1] ? __pfx___might_resched+0x10/0x10 [ 556.682034][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.682070][ C1] __might_fault+0x77/0x130 [ 556.682096][ C1] _copy_to_user+0x2c/0xb0 [ 556.682129][ C1] msr_read+0x177/0x250 [ 556.682149][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.682178][ C1] ? __pfx_msr_read+0x10/0x10 [ 556.682196][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.682222][ C1] ? security_file_permission+0x75/0x290 [ 556.682255][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.682281][ C1] ? rw_verify_area+0x2a6/0x4d0 [ 556.682302][ C1] ? __lock_acquire+0xab9/0xd20 [ 556.682329][ C1] ? __pfx_msr_read+0x10/0x10 [ 556.682356][ C1] vfs_read+0x200/0xa30 [ 556.682383][ C1] ? __pfx_vfs_read+0x10/0x10 [ 556.682404][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.682432][ C1] ? __fget_files+0x2a/0x420 [ 556.682460][ C1] ? __fget_files+0x2a/0x420 [ 556.682486][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.682511][ C1] ? __fget_files+0x3a0/0x420 [ 556.682537][ C1] ? __fget_files+0x2a/0x420 [ 556.682566][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.682594][ C1] ksys_read+0x145/0x250 [ 556.682618][ C1] ? __pfx_ksys_read+0x10/0x10 [ 556.682643][ C1] ? do_syscall_64+0xbe/0xfa0 [ 556.682667][ C1] do_syscall_64+0xfa/0xfa0 [ 556.682688][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.682708][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.682729][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.682755][ C1] ? exc_page_fault+0xab/0x100 [ 556.682776][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.682797][ C1] RIP: 0033:0x7f510c98efc9 [ 556.682815][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.682833][ C1] RSP: 002b:00007f510abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 556.682854][ C1] RAX: ffffffffffffffda RBX: 00007f510cbe5fa0 RCX: 00007f510c98efc9 [ 556.682870][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000005 [ 556.682885][ C1] RBP: 00007f510ca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 556.682899][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.682912][ C1] R13: 00007f510cbe6038 R14: 00007f510cbe5fa0 R15: 00007fffece98098 [ 556.682940][ C1] [ 556.720933][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 556.720958][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 556.720988][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.721004][ T31] Call Trace: [ 556.721016][ T31] [ 556.721029][ T31] dump_stack_lvl+0x99/0x250 [ 556.721063][ T31] ? __asan_memcpy+0x40/0x70 [ 556.721091][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.721119][ T31] ? __pfx__printk+0x10/0x10 [ 556.721156][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.721192][ T31] vpanic+0x237/0x6d0 [ 556.721229][ T31] ? __pfx_vpanic+0x10/0x10 [ 556.721265][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.721294][ T31] ? preempt_schedule_common+0x83/0xd0 [ 556.721329][ T31] panic+0xb9/0xc0 [ 556.721372][ T31] ? __pfx_panic+0x10/0x10 [ 556.721409][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.721438][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 556.721481][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.721510][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 556.721548][ T31] watchdog+0xf9f/0xfa0 [ 556.721590][ T31] ? watchdog+0x1e2/0xfa0 [ 556.721630][ T31] kthread+0x711/0x8a0 [ 556.721662][ T31] ? __pfx_watchdog+0x10/0x10 [ 556.721694][ T31] ? __pfx_kthread+0x10/0x10 [ 556.721718][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.721751][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.721789][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.721819][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.721842][ T31] ? __pfx_kthread+0x10/0x10 [ 556.721870][ T31] ret_from_fork+0x4bc/0x870 [ 556.721909][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 556.721952][ T31] ? __switch_to_asm+0x39/0x70 [ 556.721982][ T31] ? __switch_to_asm+0x33/0x70 [ 556.722011][ T31] ? __pfx_kthread+0x10/0x10 [ 556.722039][ T31] ret_from_fork_asm+0x1a/0x30 [ 556.722090][ T31] [ 557.249345][ T31] Kernel Offset: disabled [ 557.253655][ T31] Rebooting in 86400 seconds..