last executing test programs: 10m35.519402783s ago: executing program 3 (id=366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xf, 0x10, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x100000001, 0x3aa, 0x8001, 0x1, 0x5, 0x40000000009, 0x40000000080a8c, 0x800000068], 0x6000, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m35.335191719s ago: executing program 3 (id=371): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 10m35.251731361s ago: executing program 3 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/4, 0x2}, 0x20) 10m35.095442136s ago: executing program 3 (id=374): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae55ddfbd1ce7d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc90500000000000039d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) getdents(r0, 0x0, 0x0) 10m34.447367156s ago: executing program 3 (id=377): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 10m33.813652066s ago: executing program 3 (id=383): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 10m33.508690715s ago: executing program 32 (id=383): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 10m23.04386638s ago: executing program 4 (id=450): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x117, &(0x7f0000000480)=ANY=[], 0x0) 10m22.744641329s ago: executing program 4 (id=451): ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x8, 0x80000) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) 10m22.520733496s ago: executing program 4 (id=454): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r0, 0x0, 0x0) 10m22.261732694s ago: executing program 4 (id=456): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae55ddfbd1ce7d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc90500000000000039d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) getdents(r0, 0x0, 0x0) 10m21.204125537s ago: executing program 4 (id=460): r0 = socket(0x21, 0x2, 0xa) r1 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) close_range(r0, r1, 0x0) 10m18.615427757s ago: executing program 4 (id=471): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000000ec0)={@local, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@x25={0x805, {0x0, 0x0, 0xf1, "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"}}}}, 0x0) 10m18.149761522s ago: executing program 33 (id=471): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000000ec0)={@local, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@x25={0x805, {0x0, 0x0, 0xf1, "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"}}}}, 0x0) 9m17.215197052s ago: executing program 0 (id=792): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x1, 0x559a, &(0x7f0000005600)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r1, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) read(r2, &(0x7f0000000000), 0x2000) creat(&(0x7f0000000040)='./file1\x00', 0x0) 9m15.614986002s ago: executing program 0 (id=803): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 9m15.198238825s ago: executing program 0 (id=806): unshare(0x400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/53, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a80)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 9m15.02660742s ago: executing program 0 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) unshare(0x22020400) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 9m14.908095584s ago: executing program 0 (id=808): r0 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket(0x200000000000011, 0x2, 0xd) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r1 = io_uring_setup(0x6005, &(0x7f0000000080)={0x0, 0xb720, 0x800, 0x0, 0x100135}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) 9m14.435412799s ago: executing program 0 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 9m14.142886477s ago: executing program 34 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 7m55.766684849s ago: executing program 5 (id=1491): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x18}) close_range(r0, 0xffffffffffffffff, 0x0) 7m55.547374476s ago: executing program 5 (id=1493): sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x80) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) mmap(&(0x7f0000b88000/0x2000)=nil, 0x2000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x0, 0x10, 0x3, "3dc0b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 7m53.130478931s ago: executing program 5 (id=1511): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x1) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 7m52.234683589s ago: executing program 5 (id=1523): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000300)={[{@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@auto_da_alloc}]}, 0x2, 0x467, &(0x7f0000000fc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x91145a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003ac0)={0x2020}, 0x2020) 7m52.015354576s ago: executing program 5 (id=1524): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001900150000000000030000000a000000000000000000000020000980080000", @ANYRES16], 0x3c}], 0x1, 0x0, 0x0, 0x40080}, 0x0) 7m51.621157538s ago: executing program 5 (id=1526): io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) open(&(0x7f0000000400)='./bus\x00', 0x4ab42, 0x1c0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0xffffffffffffffff, {0xf800000000000002, 0x2, 0xfffffffffffffffe, 0x3, 0x2000000, 0xfffffffc, {0x3d, 0x3, 0x7fffffff, 0x9, 0xfffffffffffffffc, 0xf8, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x400, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m51.392122404s ago: executing program 35 (id=1526): io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) open(&(0x7f0000000400)='./bus\x00', 0x4ab42, 0x1c0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0xffffffffffffffff, {0xf800000000000002, 0x2, 0xfffffffffffffffe, 0x3, 0x2000000, 0xfffffffc, {0x3d, 0x3, 0x7fffffff, 0x9, 0xfffffffffffffffc, 0xf8, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x400, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m26.319399943s ago: executing program 7 (id=1784): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000100)='./bus\x00', 0x4, 0x7) chdir(&(0x7f0000000080)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 7m26.060760941s ago: executing program 7 (id=1786): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000370429bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c020044800400440012800b0001006970366772650000340002800800", @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 7m25.504806398s ago: executing program 7 (id=1790): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r1, 0x402, 0x8000001c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000002) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7m25.197534327s ago: executing program 7 (id=1793): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0x0, "336e9f413bb93852f7d6a4ae6dddfbd1ce5d29d2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb5278c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 7m23.396621544s ago: executing program 7 (id=1805): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000085}, 0x4804) 7m22.22455212s ago: executing program 7 (id=1813): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000040)=""/6, 0xf0, 0x89110122, 0x0, 0x0) 7m21.921612829s ago: executing program 36 (id=1813): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000040)=""/6, 0xf0, 0x89110122, 0x0, 0x0) 4m12.860168815s ago: executing program 8 (id=3375): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc8040, 0x2c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) getdents(r2, &(0x7f00000002c0)=""/242, 0xf2) 4m12.721075829s ago: executing program 8 (id=3369): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000080), 0xfffffe13) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x800) splice(r1, 0x0, r5, 0x0, 0x8001, 0x2) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3.292340678s ago: executing program 2 (id=5164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x34}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.292231318s ago: executing program 9 (id=5165): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002fd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.291268398s ago: executing program 1 (id=5172): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000080)="d6ad", 0x2) write$binfmt_misc(r2, &(0x7f0000000080), 0xfffffe13) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) splice(r1, 0x0, r4, 0x0, 0x1e8640, 0x0) 3.22483042s ago: executing program 1 (id=5166): syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xf97f, 0x400, 0x1, 0x9}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$kcm(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.107431144s ago: executing program 9 (id=5167): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x4a, 0x20a, &(0x7f0000000580)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000580), 0x1001, r2}, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) 3.067484645s ago: executing program 1 (id=5168): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0x64}, 0x1f00) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.040074777s ago: executing program 1 (id=5169): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f000032d000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0xad) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000b, 0x31, 0xffffffffffffffff, 0xcd5e5000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.015455877s ago: executing program 2 (id=5170): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x0, 0x9, 0x6, "8a8bb1ff5d46"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x15, 0x2, "91f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.879440552s ago: executing program 9 (id=5171): timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$read(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x4) 1.798988434s ago: executing program 9 (id=5174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x5, 0x7ff, 0x1, 0x3, 0x8}, 0x5, 0xb3}, [{0x2, 0x2, 0x8a, 0x5, 0x1, 0xc}, {0x8, 0x2, 0xa6b, 0x3, 0x9, 0xd}, {0x8, 0x7, 0xee9, 0xfffffff8, 0x7, 0xffff7fff}, {0xf1, 0x3, 0x6, 0x4, 0x9, 0x1667e918}, {0x2, 0x1, 0x101, 0x6, 0xd3, 0x3ff}, {0x2, 0x401, 0x2, 0x8, 0x3, 0x5}, {0xff, 0x2, 0x3, 0x6, 0x5, 0x5}, {0x3511, 0x6, 0x8, 0x401, 0x400, 0xcb}, {0x9, 0x6, 0xe96, 0x3ff, 0x1a5e, 0x5f}, {0x7, 0x5, 0x2, 0x6, 0x3d, 0x1ff}, {0x6, 0x6e, 0x2, 0x6, 0x1ff, 0x101}, {0x101, 0x5, 0x0, 0x4, 0xfffffffa, 0x7f}, {0x5, 0x6, 0x0, 0x0, 0x3, 0x8}, {0xff, 0x100, 0x2, 0x7fffffff, 0x2, 0xc}, {0x96f, 0x3, 0x7ff, 0x9, 0xfff, 0x7}, {0x400, 0xff, 0x2, 0x5, 0x2, 0x3e97ca11}, {0x2, 0xfffffffd, 0xffff, 0x2d, 0x6, 0x7}, {0xd, 0x1, 0x6, 0xfffffffb, 0x1ac5, 0x3}, {0x6, 0xb6, 0x2, 0xfffffffb, 0x1, 0x7}, {0x0, 0x8, 0x1, 0x200, 0x8, 0x7fffffff}, {0x8, 0x1000, 0x13a00, 0x0, 0x5, 0x9}, {0x400, 0x2, 0x4, 0xffffff7f, 0x9, 0x1}, {0x5, 0x9, 0x2, 0xffff2552, 0xfffffff9, 0x7fff}, {0x6, 0x632, 0x10001, 0xfffff676, 0x5, 0x6}, {0x8, 0xffff8484, 0x3, 0x0, 0x6, 0x2}, {0x2, 0x2, 0x84, 0x1, 0x3, 0x2}, {0x80, 0x5f64, 0xc, 0xf, 0x0, 0x6}, {0x2, 0xfa6, 0x2, 0xb, 0x6, 0x8}, {0x60, 0x36eb959b, 0x8, 0x0, 0xe, 0x8}, {0xac, 0x2, 0x2, 0x2, 0xfffffff8, 0x101}, {0x9e, 0xd, 0x5, 0xe, 0xfffff3ce, 0x6}, {0x3404, 0x2, 0xead, 0x800, 0x8, 0x3}, {0x5, 0x800, 0x3, 0x8, 0x100, 0x49c836d6}, {0xd38, 0x6, 0x7ff, 0x3, 0x8, 0x5}, {0x10, 0x5, 0x4, 0x3, 0x9}, {0x6, 0x101, 0x7, 0x1, 0x4, 0x3}, {0x7, 0xe9ab, 0x0, 0x4, 0x1, 0x8}, {0xfffffffb, 0x80000001, 0x7, 0xfffffffb, 0x10, 0x3}, {0xffffffff, 0x4, 0xffff4e30, 0x0, 0x5}, {0x3, 0x4, 0xfffffffd, 0x797, 0xcf, 0xfff}, {0x3ff, 0x8, 0x1, 0x7, 0x0, 0x8}, {0x7ff, 0xa, 0x9, 0x6, 0x4, 0x5}, {0x44, 0x4, 0xba7d, 0x6, 0x9, 0x5}, {0x2, 0x9, 0x4, 0x80000001, 0x7, 0xb4d}, {0x2, 0x7, 0x3, 0x8, 0x3, 0xb7}, {0x6, 0x401, 0xf, 0x40, 0x546e, 0x11c}, {0xffff, 0xa215, 0x18, 0x4, 0x5, 0x3}, {0xfffffffe, 0x400, 0x5, 0x4, 0x8001, 0x6}, {0x8a, 0x4c2e, 0x795e, 0x8, 0x3, 0x3}, {0x5, 0x6, 0x94, 0xffff, 0x9, 0x1}, {0x2, 0x72f3, 0x7, 0x2, 0xb7b, 0xfffffc01}, {0x2, 0x7, 0x3, 0x6, 0x9, 0x3}, {0x4, 0x0, 0x7, 0x4, 0xffffff7f, 0x5ddc}, {0x5735, 0x9b93, 0x959, 0x10001, 0x100, 0x2}, {0x9c, 0x400, 0xb1ee, 0x5, 0x7, 0x8544}, {0x1ff, 0xffffffff, 0xffffffff, 0x363, 0x7ff, 0x1}, {0xa, 0x9, 0x4, 0xffffffff, 0x2, 0xf}, {0x7, 0x2, 0x80000000, 0x3ff, 0xfffffff4, 0xb}, {0xe, 0x5, 0x1, 0x2, 0xfff, 0x5}, {0x7, 0x5, 0x0, 0x3, 0x8001, 0x5f16}, {0x7, 0x6, 0x0, 0x8, 0x9, 0x3e}, {0x4, 0x7, 0x7fffffff, 0x6, 0xfffff287, 0x3}, {0x10001, 0x979, 0x40, 0x6, 0x2, 0xff}, {0x6, 0x40, 0xef, 0x0, 0xf9c0, 0x3}, {0x101, 0x5, 0xfe, 0xc7, 0x32, 0x1}, {0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff, 0xb0a}, {0x1fd6, 0x7, 0x6, 0x2, 0x7, 0x5}, {0xffff, 0x9, 0xc, 0xf06, 0x8, 0x2}, {0x9, 0x5, 0xbd, 0x275, 0x7, 0x3}, {0x4, 0x1ff, 0x5, 0x88, 0x2, 0x8}, {0xb, 0x8, 0x3, 0x3cc3, 0x80000001}, {0x1, 0x743, 0x2, 0x57, 0x6, 0x1}, {0x5, 0xc, 0x2, 0x6, 0x4b0, 0x3}, {0x0, 0x401, 0x8, 0x8, 0x6}, {0x3, 0x8, 0x3, 0xb3, 0x1a327d9d, 0x39e}, {0x4, 0x5, 0xce, 0x1, 0x3, 0x888f}, {0xfffffff7, 0x7, 0x8be7, 0x4, 0x81, 0x8}, {0xfc, 0x9, 0x200, 0x3, 0x6, 0x81}, {0x9, 0x6, 0x100, 0x6, 0x1, 0x7fff}, {0x5, 0x5, 0x40, 0x7a, 0x7, 0x1000}, {0x7, 0x5, 0x9, 0x400, 0x5, 0x4}, {0xd, 0x19, 0x773d, 0x2c1, 0x81, 0x1}, {0x3, 0x9, 0xfff, 0x7, 0x4}, {0x6, 0x9, 0x40, 0x2, 0x7, 0x6}, {0x7, 0x5d9, 0x3, 0x80000001, 0x6, 0x4}, {0x80000000, 0x101, 0x5, 0x0, 0x10001, 0x6}, {0xbb, 0x4, 0x8001, 0x4, 0x8001, 0x7}, {0x8, 0x2616, 0x3, 0x4, 0xffffffff, 0x2f4f}, {0x3, 0x7ff, 0x2, 0x6, 0x10, 0x8}, {0x951, 0xc, 0x7, 0x3, 0xfffffffb, 0x40}, {0x7, 0x40, 0xff, 0x193, 0x8, 0xc0000000}, {0x7, 0xe978, 0x8, 0x7, 0x7, 0x7}, {0x9, 0x81, 0x5, 0x6, 0x9, 0x400}, {0x0, 0x101, 0x0, 0x32d62169, 0x167ddc9, 0x9}, {0x4393a33, 0x0, 0xfff, 0x3, 0x7fff, 0x3}, {0xffffffff, 0x6, 0xfffffff7, 0x8, 0x30000000, 0x4}, {0x5, 0x6, 0x400, 0x6, 0xfffffff7, 0x7fff}, {0x200, 0x8, 0x53, 0x2dc, 0x3, 0xe}, {0x6, 0x9, 0x309085d1, 0x1ff, 0x3, 0x7}, {0x7, 0x7f, 0x101, 0x4d23, 0xb, 0xfff}, {0x7, 0x6, 0xcd, 0xcb93571e, 0xa, 0x5}, {0x800, 0x8, 0x2, 0x9, 0x7f, 0xfffffe00}, {0x0, 0x2, 0x7, 0x8, 0xffff}, {0xa, 0x7ffb, 0xfffffffe, 0x3d, 0x8, 0x7}, {0x5, 0x10001, 0x9130, 0x264, 0x4, 0x2}, {0x7ff, 0x1, 0x3, 0x400, 0x2, 0xdac00000}, {0x2, 0x51, 0x5, 0x0, 0x405, 0x7fff}, {0x1f, 0x3, 0x9, 0x6, 0x68d96f84, 0x10001}, {0xa, 0x9, 0x4, 0x567b, 0xff}, {0x29, 0x0, 0x0, 0x6, 0x75e, 0x9c}, {0x0, 0x401, 0x0, 0x7, 0xd1, 0x5}, {0x4, 0x1, 0x4f27, 0x101, 0x9, 0xfffffffd}, {0x1, 0x8, 0xf, 0x0, 0x6, 0x2}, {0x9, 0x4, 0x4, 0x7fffffff, 0x1, 0x5}, {0x80000001, 0x6, 0x5252, 0x5, 0x7, 0x100}, {0x0, 0x90, 0x7, 0x1, 0x4, 0x8}, {0x2, 0x67, 0xefa, 0x7, 0x2f87, 0xfffffffa}, {0x413c07b2, 0x7, 0x7, 0xcf33, 0x1, 0x9}, {0x5, 0x200009, 0xfffffffd, 0x7, 0x401, 0x6}, {0x3, 0x0, 0x6c4, 0x4, 0x6, 0x1ff}, {0x9, 0x80000001, 0x9, 0xd, 0x2, 0x3}, {0x447fb3a9, 0x8001, 0x200, 0x10, 0x2, 0x5}, {0x7, 0xfffffffd, 0x1, 0xe, 0x7}, {0x3, 0x7, 0x88e, 0x0, 0x6, 0x7}, {0xffffffff, 0xffffffde, 0x81, 0x0, 0x7fff, 0xffff}, {0xd43, 0x855, 0x4, 0x41aa, 0x2, 0xf09c}, {0xaf, 0x61f784e8, 0xed, 0xea, 0x400, 0x5}, {0x7, 0xa, 0x1, 0x6656, 0xfff, 0xb}], [{}, {0x3}, {0x4, 0x1}, {0x0, 0x3aa157f48d3b3bb3}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0xd26d20c064367a2c}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x1}, {}, {}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.717649476s ago: executing program 6 (id=5175): r0 = io_uring_setup(0x5be4, &(0x7f0000000180)={0x0, 0xa3a7, 0x0, 0x21, 0xac}) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@udp6=r1}, 0x20) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) getsockname$llc(r1, 0x0, &(0x7f0000000580)) close_range(r0, 0xffffffffffffffff, 0x0) 1.627250889s ago: executing program 9 (id=5176): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}, 0x10000) 1.458795275s ago: executing program 6 (id=5177): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendto$inet6(r1, &(0x7f0000000200)="020409dbec075d37ad77", 0xa, 0x24040001, 0x0, 0x0) 1.411261266s ago: executing program 6 (id=5178): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x106, 0x2, 0xff, 0x1}}) 1.251446511s ago: executing program 6 (id=5179): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 1.181017323s ago: executing program 6 (id=5180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x34}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 900.221322ms ago: executing program 1 (id=5181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)={0x0, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}]}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5e0}], 0x1}, 0x4) 267.417971ms ago: executing program 9 (id=5182): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937f5523", "4705a7b6113b967d73ffff201eb2babf", "18d25a06"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 189.627024ms ago: executing program 6 (id=5183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) 0s ago: executing program 1 (id=5184): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000180)='./bus\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x51500430, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x4, 0x8}}, 0x50) r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x40000000) getxattr(0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): link [ 473.680684][T16156] loop2: detected capacity change from 0 to 2048 [ 473.738581][ T1107] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 473.761011][ T5761] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 473.771090][ T1107] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 474.048465][T16167] loop8: detected capacity change from 0 to 512 [ 474.079140][T16167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 474.165897][T16167] EXT4-fs error (device loop8): ext4_orphan_get:1404: inode #15: comm syz.8.3190: iget: bad extended attribute block 262144 [ 474.279710][T16167] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.3190: couldn't read orphan inode 15 (err -117) [ 474.353088][T16167] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.553238][T13612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.728921][T16177] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3193'. [ 474.780481][T11516] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 474.815911][T16177] syzkaller1: entered promiscuous mode [ 474.821976][T16177] syzkaller1: entered allmulticast mode [ 475.762061][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3208'. [ 475.848058][T16212] loop8: detected capacity change from 0 to 16 [ 475.864759][T16212] erofs: (device loop8): mounted with root inode @ nid 36. [ 476.619818][T16216] loop8: detected capacity change from 0 to 32768 [ 477.185835][T16240] syz_tun: entered allmulticast mode [ 477.328358][T16244] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.457062][T16244] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.570239][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 477.580915][T16244] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.678450][T16244] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.853226][T16244] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.875195][T16244] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.917145][T16244] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.954896][T16244] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.141187][T16260] loop8: detected capacity change from 0 to 256 [ 478.179868][T16260] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 478.250550][T16260] loop8: detected capacity change from 256 to 0 [ 478.275334][T16260] syz.8.3231: attempt to access beyond end of device [ 478.275334][T16260] loop8: rw=524288, sector=184, nr_sectors = 32 limit=0 [ 478.292148][T16260] syz.8.3231: attempt to access beyond end of device [ 478.292148][T16260] loop8: rw=0, sector=184, nr_sectors = 8 limit=0 [ 478.309518][ T27] audit: type=1800 audit(1779108868.541:831): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3231" name="file1" dev="loop8" ino=1048647 res=0 errno=0 [ 478.312480][T16260] syz.8.3231: attempt to access beyond end of device [ 478.312480][T16260] loop8: rw=395265, sector=0, nr_sectors = 1 limit=0 [ 478.345459][T16260] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 478.354610][T16260] syz.8.3231: attempt to access beyond end of device [ 478.354610][T16260] loop8: rw=2049, sector=160, nr_sectors = 1 limit=0 [ 478.368694][T16260] Buffer I/O error on dev loop8, logical block 160, lost sync page write [ 478.389886][ T27] audit: type=1804 audit(1779108868.611:832): pid=16265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3231" name="/newroot/181/file2/file1" dev="loop8" ino=1048647 res=1 errno=0 [ 478.433435][T16260] syz.8.3231: attempt to access beyond end of device [ 478.433435][T16260] loop8: rw=2049, sector=136, nr_sectors = 1 limit=0 [ 478.459132][T16260] Buffer I/O error on dev loop8, logical block 136, lost sync page write [ 478.472749][T16260] syz.8.3231: attempt to access beyond end of device [ 478.472749][T16260] loop8: rw=2049, sector=136, nr_sectors = 1 limit=0 [ 478.486249][T16260] Buffer I/O error on dev loop8, logical block 136, lost sync page write [ 478.498352][T16260] syz.8.3231: attempt to access beyond end of device [ 478.498352][T16260] loop8: rw=2049, sector=136, nr_sectors = 1 limit=0 [ 478.512098][T16260] Buffer I/O error on dev loop8, logical block 136, lost sync page write [ 478.525250][T16260] syz.8.3231: attempt to access beyond end of device [ 478.525250][T16260] loop8: rw=2049, sector=136, nr_sectors = 1 limit=0 [ 478.541461][T16260] Buffer I/O error on dev loop8, logical block 136, lost sync page write [ 478.561060][T16260] syz.8.3231: attempt to access beyond end of device [ 478.561060][T16260] loop8: rw=2049, sector=128, nr_sectors = 1 limit=0 [ 478.575226][T16260] Buffer I/O error on dev loop8, logical block 128, lost sync page write [ 478.584415][T16260] syz.8.3231: attempt to access beyond end of device [ 478.584415][T16260] loop8: rw=0, sector=128, nr_sectors = 1 limit=0 [ 478.599312][T16260] exFAT-fs (loop8): error, failed to bmap (inode : ffff8880532407e0 iblock : 24, err : -5) [ 478.612113][T16260] exFAT-fs (loop8): Filesystem has been set read-only [ 478.620782][T16260] exFAT-fs (loop8): error, failed to access to FAT (entry 0x0000000b, err:-5) [ 478.629827][T16260] exFAT-fs (loop8): error, failed to access to FAT (entry 0x0000000b, err:-5) [ 478.831878][T16277] overlayfs: failed to clone upperpath [ 478.896734][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3237'. [ 478.928969][T16279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.937185][T16279] IPv6: NLM_F_CREATE should be set when creating new route [ 478.947405][T16279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.954685][T16279] IPv6: NLM_F_CREATE should be set when creating new route [ 479.160998][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3240'. [ 479.184566][T16286] veth1_macvtap: left promiscuous mode [ 479.259015][T16290] syz.6.3241(16290): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 480.179201][T16318] ceph: No mds server is up or the cluster is laggy [ 485.570227][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 486.113202][T16477] loop2: detected capacity change from 0 to 512 [ 486.220463][T16484] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3296'. [ 486.638054][T16492] overlayfs: failed to clone upperpath [ 489.120128][T16529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.791005][ T28] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 490.980997][ T28] usb 9-1: Using ep0 maxpacket: 8 [ 491.005539][ T28] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 491.030695][ T28] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.050694][ T28] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 491.070576][ T28] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 491.100667][ T28] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.130504][ T28] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 491.139581][ T28] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.402286][ T28] usb 9-1: usb_control_msg returned -32 [ 491.408013][ T28] usbtmc 9-1:16.0: can't read capabilities [ 491.548432][T16597] autofs4:pid:16597:autofs_fill_super: called with bogus options [ 491.691465][T16604] vxcan1: entered promiscuous mode [ 491.790727][T16605] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 491.799374][ T28] usb 9-1: USB disconnect, device number 11 [ 492.202397][T16610] netlink: 'syz.2.3342': attribute type 16 has an invalid length. [ 492.210899][T16610] netlink: 'syz.2.3342': attribute type 17 has an invalid length. [ 492.232624][T16610] gretap0: left promiscuous mode [ 492.277227][T16610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.288556][T16610] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.299530][T16610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.811482][T16633] bridge0: entered allmulticast mode [ 492.824472][T16633] bridge_slave_1: left allmulticast mode [ 492.833820][T16633] bridge_slave_1: left promiscuous mode [ 492.844277][T16633] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.860717][T16633] bridge_slave_0: left allmulticast mode [ 492.868066][T16633] bridge_slave_0: left promiscuous mode [ 492.878585][T16633] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.411490][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 493.975086][T16646] netlink: 'syz.6.3357': attribute type 16 has an invalid length. [ 494.000684][T16646] netlink: 'syz.6.3357': attribute type 17 has an invalid length. [ 494.084474][T16646] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.124853][T16646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.416738][T16661] loop8: detected capacity change from 0 to 256 [ 494.451055][T16661] FAT-fs (loop8): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value [ 495.311260][T16704] xt_hashlimit: size too large, truncated to 1048576 [ 495.342355][ T27] audit: type=1326 audit(1779108885.561:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.2.3374" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x0 [ 495.638258][T16716] netlink: 'syz.6.3380': attribute type 2 has an invalid length. [ 496.129530][T16721] loop8: detected capacity change from 0 to 32768 [ 496.199494][T16721] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 496.344275][T16721] XFS (loop8): Ending clean mount [ 496.358967][T16721] XFS (loop8): Quotacheck needed: Please wait. [ 496.439360][T16721] XFS (loop8): Quotacheck: Done. [ 496.837164][T16721] loop8: detected capacity change from 32768 to 64 [ 496.866942][T16741] bio_check_eod: 3 callbacks suppressed [ 496.866988][T16741] syz.8.3381: attempt to access beyond end of device [ 496.866988][T16741] loop8: rw=432129, sector=1280, nr_sectors = 128 limit=64 [ 496.911559][ T1082] XFS (loop8): log I/O error -5 [ 496.916938][ T1082] XFS (loop8): Filesystem has been shut down due to log error (0x2). [ 496.927372][ T1082] XFS (loop8): Please unmount the filesystem and rectify the problem(s). [ 496.980704][T12747] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 497.073187][T13612] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 497.185253][T12747] usb 3-1: Using ep0 maxpacket: 8 [ 497.202843][T12747] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.221130][T12747] usb 3-1: config 0 has no interfaces? [ 497.226660][T12747] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 497.271521][T12747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.302645][T12747] usb 3-1: config 0 descriptor?? [ 498.059693][T16756] netlink: 'syz.1.3392': attribute type 1 has an invalid length. [ 498.139625][T16756] bond6: entered promiscuous mode [ 498.157542][T16756] 8021q: adding VLAN 0 to HW filter on device bond6 [ 498.227519][T16756] 8021q: adding VLAN 0 to HW filter on device bond6 [ 498.242195][T16756] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 498.259049][T16756] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 498.277400][T16756] bond6: (slave ip6gre1): making interface the new active one [ 498.288965][T16756] ip6gre1: entered promiscuous mode [ 498.305252][T16756] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 498.352398][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 498.367203][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 498.379534][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 498.389778][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 498.402806][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 498.422129][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 498.445550][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3401'. [ 498.456813][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3401'. [ 498.718697][T16762] chnl_net:caif_netlink_parms(): no params data found [ 498.765256][T16777] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3395'. [ 498.842117][T16762] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.849327][T16762] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.857990][T16762] bridge_slave_0: entered allmulticast mode [ 498.868154][T16762] bridge_slave_0: entered promiscuous mode [ 498.915712][T16762] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.931340][T16762] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.938605][T16762] bridge_slave_1: entered allmulticast mode [ 498.946609][T16762] bridge_slave_1: entered promiscuous mode [ 498.993408][T16762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.005802][T16762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.065353][T16762] team0: Port device team_slave_0 added [ 499.092409][T16762] team0: Port device team_slave_1 added [ 499.153082][T16762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.172820][T16762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.224875][T16762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.258932][T16762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.267180][T16762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.317861][T16762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.442935][T16762] hsr_slave_0: entered promiscuous mode [ 499.458814][T16762] hsr_slave_1: entered promiscuous mode [ 499.474731][T16762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.494791][T16762] Cannot create hsr debugfs directory [ 499.783637][ T5833] usb 3-1: USB disconnect, device number 25 [ 500.103089][T16762] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 500.123722][T16762] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 500.140379][T16762] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 500.164117][T16762] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 500.340842][T16762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.397461][T16762] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.438240][T16406] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.445479][T16406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.474015][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.481231][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.530573][ T5084] Bluetooth: hci0: command tx timeout [ 500.679771][T16762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.869167][T16809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3408'. [ 500.882339][T16810] overlayfs: failed to clone upperpath [ 500.909434][T16809] 8021q: adding VLAN 0 to HW filter on device bond7 [ 500.933294][T16812] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3406'. [ 500.943132][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 500.977105][T16809] bond0: entered promiscuous mode [ 501.003553][T16809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.024358][T16809] bond7: (slave bond0): Enslaving as an active interface with an up link [ 501.101367][T16762] veth0_vlan: entered promiscuous mode [ 501.116699][T16762] veth1_vlan: entered promiscuous mode [ 501.195184][T16762] veth0_macvtap: entered promiscuous mode [ 501.239142][T16762] veth1_macvtap: entered promiscuous mode [ 501.286275][T16762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.305003][T16762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.329571][T16762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.366458][T16762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.377607][T16823] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3411'. [ 501.394045][T16762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.429697][T16762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.493973][T16762] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.504491][T16762] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.530053][T16762] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.559608][T16762] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.578503][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.585321][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.787514][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.815744][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.866952][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.884198][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.149063][T16831] loop9: detected capacity change from 0 to 1764 [ 502.189367][T16831] ISOFS: Unable to identify CD-ROM format. [ 502.551041][T16838] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.579265][T16838] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.620619][ T5084] Bluetooth: hci0: command tx timeout [ 502.640716][T16842] netlink: 'syz.9.3413': attribute type 16 has an invalid length. [ 502.680908][T16842] netlink: 'syz.9.3413': attribute type 17 has an invalid length. [ 502.748444][T16842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 503.542592][T16404] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.663470][T16404] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.776113][T16404] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.883070][T16404] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.347214][T16404] tipc: Left network mode [ 504.700305][ T5084] Bluetooth: hci0: command tx timeout [ 504.952836][T16917] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.3441'. [ 505.337585][T16927] netlink: 'syz.6.3447': attribute type 16 has an invalid length. [ 505.380375][T16927] netlink: 'syz.6.3447': attribute type 17 has an invalid length. [ 505.457633][T16927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.765875][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3454'. [ 505.854855][T16944] nbd: socks must be embedded in a SOCK_ITEM attr [ 505.963324][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3454'. [ 505.978165][T16951] loop2: detected capacity change from 0 to 512 [ 505.995231][ T5761] block nbd64: NBD_DISCONNECT [ 506.020577][T16949] nbd: device at index 64 is going down [ 506.093008][T16951] EXT4-fs (loop2): #blocks per group too big: 466944 [ 506.473917][ T5761] udevd[5761]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 506.506298][T16961] loop2: detected capacity change from 0 to 256 [ 506.782519][ T5084] Bluetooth: hci0: command tx timeout [ 506.876743][T16404] hsr_slave_0: left promiscuous mode [ 506.930997][T16404] hsr_slave_1: left promiscuous mode [ 507.002057][T16404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.032860][T16404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.126404][T16404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.158236][T16404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.283512][T16983] loop2: detected capacity change from 0 to 64 [ 507.447792][T16404] veth0_macvtap: left promiscuous mode [ 507.471423][T16404] veth1_vlan: left promiscuous mode [ 507.516815][T16404] veth0_vlan: left promiscuous mode [ 508.657062][T17017] befs: (nullb0): invalid magic header [ 509.017759][T16404] team0 (unregistering): Port device team_slave_1 removed [ 509.105970][T16404] team0 (unregistering): Port device team_slave_0 removed [ 509.202091][T16404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.297527][T16404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.135928][T16404] bond0 (unregistering): Released all slaves [ 510.195926][T16987] netlink: 'syz.1.3464': attribute type 10 has an invalid length. [ 510.206435][T16987] team0: Port device netdevsim0 added [ 510.234292][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3467'. [ 510.261440][T17000] bond0: entered promiscuous mode [ 510.266512][T17000] bond_slave_0: entered promiscuous mode [ 510.278865][T17000] bond_slave_1: entered promiscuous mode [ 510.298224][T17011] netlink: 'syz.6.3472': attribute type 1 has an invalid length. [ 510.346279][T17011] bond6: entered promiscuous mode [ 510.352191][T17011] 8021q: adding VLAN 0 to HW filter on device bond6 [ 510.401973][T17013] 8021q: adding VLAN 0 to HW filter on device bond6 [ 510.415874][T17013] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 510.426876][T17013] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 510.439631][T17013] bond6: (slave ip6gre1): making interface the new active one [ 510.447660][T17013] ip6gre1: entered promiscuous mode [ 510.454763][T17013] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 510.486410][T17024] netlink: 'syz.2.3475': attribute type 16 has an invalid length. [ 510.496206][T17024] netlink: 'syz.2.3475': attribute type 17 has an invalid length. [ 510.572706][T17024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.226411][T17074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3487'. [ 512.443597][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3489'. [ 513.576308][T17093] loop9: detected capacity change from 0 to 32768 [ 513.696117][ T27] audit: type=1800 audit(1779108903.921:834): pid=17093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3492" name="bus" dev="loop9" ino=10 res=0 errno=0 [ 513.979038][T11516] IPVS: starting estimator thread 0... [ 514.120759][T17118] IPVS: using max 18 ests per chain, 43200 per kthread [ 514.372768][T17133] ref_ctr_offset mismatch. inode: 0xc5 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 515.142086][T17161] bond3: (slave dummy0): Releasing active interface [ 515.352636][T17161] team0: Port device team_slave_1 removed [ 515.379642][T17161] team0: Port device bridge1 removed [ 515.401476][T17161] bond0: (slave veth5): Releasing active interface [ 515.408239][T17161] bond0: (slave veth5): the permanent HWaddr of slave - 7e:df:f0:d0:2f:8a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 515.451012][T17161] batadv0: entered promiscuous mode [ 515.498655][T17161] bond0: (slave batadv0): Releasing active interface [ 515.519019][T17161] batadv0: left promiscuous mode [ 515.557313][T17161] bond2: (slave veth11): Releasing backup interface [ 515.570609][T17161] veth11: left promiscuous mode [ 515.617726][T17161] team0: Port device batadv1 removed [ 515.626904][T17161] bond4: (slave geneve2): Releasing active interface [ 515.643701][T17161] geneve2: left allmulticast mode [ 515.668750][T17161] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.678515][T17161] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.690411][T17161] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.703800][T17161] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.734295][T17161] bond6: (slave ip6gre1): Releasing backup interface [ 515.754131][T17161] ip6gre1: left promiscuous mode [ 515.792541][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3513'. [ 516.583259][T17206] overlayfs: failed to clone upperpath [ 517.787753][T17262] netlink: 'syz.9.3533': attribute type 13 has an invalid length. [ 518.368246][T17280] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3538'. [ 518.476594][T17282] overlayfs: failed to clone upperpath [ 521.434161][T17349] bond8: entered promiscuous mode [ 521.513180][T17349] vcan0: entered promiscuous mode [ 521.518263][T17349] vcan0: entered allmulticast mode [ 521.576631][T17349] bond8: (slave vcan0): The slave device specified does not support setting the MAC address [ 521.605546][T17349] bond8: (slave vcan0): Error -95 calling set_mac_address [ 522.050225][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 522.311957][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3571'. [ 523.074066][T17386] bridge_slave_0: left allmulticast mode [ 523.088847][T17386] bridge_slave_0: left promiscuous mode [ 523.107111][T17386] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.138904][T17386] bridge_slave_1: left allmulticast mode [ 523.150788][T17386] bridge_slave_1: left promiscuous mode [ 523.180798][T17386] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.235657][T17386] bond0: (slave bond_slave_0): Releasing backup interface [ 523.273614][T17386] bond_slave_0: left promiscuous mode [ 523.318482][T17386] bond0: (slave bond_slave_1): Releasing backup interface [ 523.345783][T17386] bond_slave_1: left promiscuous mode [ 523.489708][T17386] team0: Port device team_slave_0 removed [ 523.509674][T17386] team0: Port device team_slave_1 removed [ 523.549601][T17386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.570933][T17386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.594440][T17386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.615115][T17386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.688725][T17388] ip6gre1: entered allmulticast mode [ 523.721159][T17388] team0: Port device ip6gre1 added [ 524.088769][T17405] input: syz0 as /devices/virtual/input/input17 [ 524.491250][T17416] xt_hashlimit: size too large, truncated to 1048576 [ 525.281301][T17429] loop2: detected capacity change from 0 to 8192 [ 525.850181][ T28] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 526.043856][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 526.065036][ T28] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.087298][ T28] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.105411][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 526.119846][ T28] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 526.147362][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.168478][ T28] usb 3-1: config 0 descriptor?? [ 526.604749][ T28] hid (null): nested delimiters [ 526.618745][ T28] hid (null): report_id 26077 is invalid [ 526.844224][T17455] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 526.857952][ T28] usb 3-1: USB disconnect, device number 26 [ 528.781761][T17516] sctp: [Deprecated]: syz.1.3616 (pid 17516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.781761][T17516] Use struct sctp_sack_info instead [ 528.925656][T17524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3618'. [ 529.069529][T17524] macvlan2: entered promiscuous mode [ 529.089355][T17524] macvlan2: entered allmulticast mode [ 529.115210][T17524] bond9: entered promiscuous mode [ 529.128140][T17524] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 529.164574][T17524] bond9: left promiscuous mode [ 529.690630][T12743] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 529.874423][T12743] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 529.900577][T12743] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.924379][T12743] usb 10-1: config 0 interface 0 has no altsetting 0 [ 529.940656][T12743] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 529.962028][T12743] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.987951][T12743] usb 10-1: config 0 descriptor?? [ 530.620936][T12743] usbhid 10-1:0.0: can't add hid device: -71 [ 530.627495][T12743] usbhid: probe of 10-1:0.0 failed with error -71 [ 530.663090][T12743] usb 10-1: USB disconnect, device number 2 [ 530.732997][T17582] xt_socket: unknown flags 0x4c [ 531.650910][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 534.425680][ T27] audit: type=1326 audit(1779108924.651:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17649 comm="syz.1.3652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feccbd9ce59 code=0x0 [ 534.951666][T17660] overlayfs: failed to clone upperpath [ 535.974077][T17633] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3645'. [ 536.001206][T17636] macvlan2: entered promiscuous mode [ 536.006518][T17636] macvlan2: entered allmulticast mode [ 536.013359][T17636] bond1: entered promiscuous mode [ 536.018699][T17636] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 536.029546][T17636] bond1: left promiscuous mode [ 536.320609][T17667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.438047][T17676] erspan0: entered promiscuous mode [ 536.456970][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3657'. [ 536.657861][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3664'. [ 536.678910][T17691] bond0: option arp_validate: invalid value (188) [ 536.780523][T11516] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 536.990646][T11516] usb 10-1: Using ep0 maxpacket: 8 [ 537.006413][T11516] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 537.022357][T11516] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.043417][T11516] usb 10-1: Product: syz [ 537.057523][T11516] usb 10-1: Manufacturer: syz [ 537.066925][T11516] usb 10-1: SerialNumber: syz [ 537.089612][T11516] usb 10-1: config 0 descriptor?? [ 537.339263][T11516] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 537.810449][T17731] overlayfs: failed to clone upperpath [ 537.841777][T17736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3674'. [ 537.914988][T17736] bond7: entered promiscuous mode [ 537.950688][T17736] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.053468][T17743] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.092286][T17743] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 538.141646][T17743] bond7: (slave sit1): Error -95 calling set_mac_address [ 538.390993][T11516] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 538.442178][T11516] usb 10-1: USB disconnect, device number 3 [ 541.444946][T17842] tipc: Enabled bearer , priority 10 [ 541.458108][T17842] tipc: Enabled bearer , priority 0 [ 542.150088][T11516] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 542.204745][T17857] input: syz0 as /devices/virtual/input/input18 [ 542.377095][T11516] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 542.402895][T11516] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 542.437241][T11516] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 542.476467][T11516] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 542.505765][T11516] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 542.536643][T11516] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 542.560403][T11516] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 542.568541][T11516] usb 10-1: Product: syz [ 542.602175][T11516] usb 10-1: Manufacturer: syz [ 542.619870][T11516] cdc_wdm 10-1:1.0: skipping garbage [ 542.630447][T11516] cdc_wdm 10-1:1.0: skipping garbage [ 542.683297][T11516] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 542.689398][T11516] cdc_wdm 10-1:1.0: Unknown control protocol [ 542.697046][T17866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.734528][T17866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.770635][T17866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.802929][T17866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.816368][T17866] geneve3: entered promiscuous mode [ 542.867107][ T5084] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 542.879322][ T5084] CPU: 0 PID: 5084 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 542.886907][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 542.896992][ T5084] Workqueue: hci1 hci_rx_work [ 542.901898][ T5084] Call Trace: [ 542.905250][ T5084] [ 542.908267][ T5084] dump_stack_lvl+0x18c/0x250 [ 542.913099][ T5084] ? show_regs_print_info+0x20/0x20 [ 542.918373][ T5084] ? load_image+0x420/0x420 [ 542.922940][ T5084] sysfs_create_dir_ns+0x26e/0x2a0 [ 542.928123][ T5084] ? sysfs_warn_dup+0xa0/0xa0 [ 542.932828][ T5084] ? do_raw_spin_unlock+0x121/0x230 [ 542.938090][ T5084] kobject_add_internal+0x61c/0xcc0 [ 542.943390][ T5084] kobject_add+0x164/0x240 [ 542.947829][ T5084] ? __rwlock_init+0x150/0x150 [ 542.952629][ T5084] ? kobject_init+0x1e0/0x1e0 [ 542.957337][ T5084] ? _raw_spin_unlock+0x28/0x40 [ 542.962312][ T5084] ? get_device_parent+0x366/0x390 [ 542.967495][ T5084] device_add+0x408/0xc50 [ 542.971852][ T5084] hci_conn_add_sysfs+0xd5/0x1e0 [ 542.976864][ T5084] le_conn_complete_evt+0xf5d/0x1540 [ 542.982195][ T5084] ? hci_event_packet+0x4cb/0x1270 [ 542.987316][ T5084] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 542.993557][ T5084] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 542.999190][ T5084] ? skb_pull_data+0xfb/0x200 [ 543.003909][ T5084] hci_le_conn_complete_evt+0x187/0x440 [ 543.009453][ T5084] ? hci_remote_host_features_evt+0x150/0x150 [ 543.015522][ T5084] hci_event_packet+0x7ba/0x1270 [ 543.020472][ T5084] ? bis_list+0x290/0x290 [ 543.024809][ T5084] ? lockdep_hardirqs_on+0x98/0x150 [ 543.030010][ T5084] ? hci_send_to_monitor+0xd7/0x4f0 [ 543.035215][ T5084] hci_rx_work+0x43a/0xd60 [ 543.039642][ T5084] ? process_scheduled_works+0x96f/0x15d0 [ 543.045397][ T5084] process_scheduled_works+0xa5d/0x15d0 [ 543.050964][ T5084] ? worker_attach_to_pool+0x380/0x380 [ 543.056423][ T5084] ? assign_work+0x3d2/0x5d0 [ 543.061009][ T5084] worker_thread+0xa55/0xfc0 [ 543.065601][ T5084] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 543.071488][ T5084] ? _raw_spin_unlock+0x40/0x40 [ 543.076332][ T5084] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 543.082244][ T5084] kthread+0x2fa/0x390 [ 543.086302][ T5084] ? pr_cont_work+0x560/0x560 [ 543.090975][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 543.095553][ T5084] ret_from_fork+0x48/0x80 [ 543.099995][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 543.104587][ T5084] ret_from_fork_asm+0x11/0x20 [ 543.109380][ T5084] [ 543.118943][ T5084] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 543.133270][ T5084] Bluetooth: hci1: failed to register connection device [ 543.394779][T11516] usb 10-1: USB disconnect, device number 4 [ 545.048960][T17924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3734'. [ 545.232036][T17931] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3728'. [ 545.381689][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3728'. [ 545.499426][ T27] audit: type=1326 audit(1779108935.721:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.3731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 545.560961][ T27] audit: type=1326 audit(1779108935.721:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.3731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 545.624500][ T27] audit: type=1326 audit(1779108935.721:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.3731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 545.649557][ T27] audit: type=1326 audit(1779108935.721:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.3731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 545.688747][ T27] audit: type=1326 audit(1779108935.721:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.3731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 545.725934][ T27] audit: type=1326 audit(1779108935.771:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.3731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 545.753932][ T27] audit: type=1326 audit(1779108935.771:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.3731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 545.809246][ T27] audit: type=1326 audit(1779108935.771:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.3731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 545.857706][T11516] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 545.888186][ T27] audit: type=1326 audit(1779108935.771:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.3731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 545.938136][ T27] audit: type=1326 audit(1779108935.781:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.1.3731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feccbd5d68e code=0x7ffc0000 [ 546.070685][T11516] usb 3-1: Using ep0 maxpacket: 8 [ 546.081812][T11516] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 546.100233][T11516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.118598][T11516] usb 3-1: Product: syz [ 546.128500][T11516] usb 3-1: Manufacturer: syz [ 546.140124][T11516] usb 3-1: SerialNumber: syz [ 546.159591][T11516] usb 3-1: config 0 descriptor?? [ 546.402183][T11516] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 546.442558][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3736'. [ 546.606653][T17959] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 546.628502][T17959] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 546.692287][T17953] macvlan2: entered promiscuous mode [ 546.708087][T17953] macvlan2: entered allmulticast mode [ 546.715891][T17953] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 546.895891][T17971] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3740'. [ 547.228480][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3743'. [ 547.440986][T11516] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 547.467008][T11516] usb 3-1: USB disconnect, device number 27 [ 549.284085][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3753'. [ 549.467124][T18013] tipc: Failed to remove unknown binding: 66,0,0/0:1587782821/1587782822 [ 549.494668][T18013] tipc: Failed to remove unknown binding: 66,0,0/0:1587782821/1587782822 [ 549.634136][T18020] netlink: 'syz.9.3758': attribute type 4 has an invalid length. [ 549.681635][T18020] netlink: 'syz.9.3758': attribute type 4 has an invalid length. [ 550.431674][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3765'. [ 551.708405][T18069] loop2: detected capacity change from 0 to 128 [ 553.258288][T18095] overlayfs: failed to clone upperpath [ 553.672123][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 553.680740][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 553.815005][T18103] ceph: No mds server is up or the cluster is laggy [ 554.096656][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3797'. [ 554.417689][T18136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3803'. [ 554.528952][T18141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3803'. [ 555.060880][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3809'. [ 555.461251][T18164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.205208][ T27] kauditd_printk_skb: 276 callbacks suppressed [ 556.205223][ T27] audit: type=1804 audit(1779108946.431:1122): pid=18177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3816" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=56680 res=1 errno=0 [ 556.292724][ T27] audit: type=1804 audit(1779108946.431:1123): pid=18177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3816" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=56680 res=1 errno=0 [ 556.590694][ T27] audit: type=1326 audit(1779108946.811:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18186 comm="syz.2.3818" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 556.624357][ T27] audit: type=1326 audit(1779108946.811:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18186 comm="syz.2.3818" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 556.681854][ T27] audit: type=1326 audit(1779108946.811:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18186 comm="syz.2.3818" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 556.707616][ T27] audit: type=1326 audit(1779108946.811:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18186 comm="syz.2.3818" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 556.770925][ T27] audit: type=1326 audit(1779108946.811:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18186 comm="syz.2.3818" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 556.795585][ T27] audit: type=1326 audit(1779108946.851:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18186 comm="syz.2.3818" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 556.822720][ T27] audit: type=1326 audit(1779108946.851:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18186 comm="syz.2.3818" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 556.854090][ T27] audit: type=1326 audit(1779108946.911:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18186 comm="syz.2.3818" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ac275d68e code=0x7ffc0000 [ 557.085920][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3819'. [ 558.508741][T18229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3830'. [ 560.400234][T18287] netlink: 'syz.1.3851': attribute type 4 has an invalid length. [ 560.420373][T18287] netlink: 'syz.1.3851': attribute type 4 has an invalid length. [ 560.560364][T12929] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 560.770083][T12929] usb 3-1: Using ep0 maxpacket: 16 [ 560.782684][T12929] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 560.796237][T12929] usb 3-1: config 1 has no interface number 1 [ 560.809375][T12929] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 560.820561][T12929] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 560.837456][T12929] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 560.860515][T12929] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.882529][T12929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.891173][T12929] usb 3-1: Product: syz [ 560.895445][T12929] usb 3-1: Manufacturer: syz [ 560.900534][T12929] usb 3-1: SerialNumber: syz [ 561.321017][T12929] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 561.564840][T18309] netlink: 'syz.6.3861': attribute type 4 has an invalid length. [ 561.631872][T18316] netlink: 'syz.6.3861': attribute type 4 has an invalid length. [ 561.731866][T18282] netlink: 340 bytes leftover after parsing attributes in process `syz.2.3848'. [ 561.950419][T12929] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 562.024391][T12929] usb 3-1: USB disconnect, device number 28 [ 562.127663][T17686] udevd[17686]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 562.521794][T18340] netlink: 'syz.6.3874': attribute type 1 has an invalid length. [ 562.677900][T18346] bond8: (slave veth15): Enslaving as an active interface with a down link [ 562.696046][T18348] netlink: 'syz.2.3875': attribute type 4 has an invalid length. [ 562.758086][T18340] bond8: entered promiscuous mode [ 562.765125][T18340] bond8: entered allmulticast mode [ 562.771496][T18340] 8021q: adding VLAN 0 to HW filter on device bond8 [ 562.780788][T18349] netlink: 'syz.2.3875': attribute type 4 has an invalid length. [ 563.019181][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.026292][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.494859][T18375] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 563.507795][T18375] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 563.606307][T18381] netlink: 'syz.6.3889': attribute type 4 has an invalid length. [ 563.742561][T18383] netlink: 'syz.6.3889': attribute type 4 has an invalid length. [ 565.236534][T18412] binder: 18411:18412 ioctl c0306201 200000000080 returned -14 [ 565.248846][T18412] binder: 18411:18412 ioctl c0306201 2000000003c0 returned -14 [ 565.288406][T18415] sctp: [Deprecated]: syz.6.3903 (pid 18415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.288406][T18415] Use struct sctp_sack_info instead [ 565.415067][ T27] kauditd_printk_skb: 379 callbacks suppressed [ 565.415080][ T27] audit: type=1326 audit(1779108955.641:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18418 comm="syz.1.3905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x0 [ 565.860571][T12929] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 566.119071][T12929] usb 10-1: unable to get BOS descriptor or descriptor too short [ 566.142539][T12929] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 566.157368][T12929] usb 10-1: can't read configurations, error -71 [ 566.253318][T18455] batman_adv: batadv0: Adding interface: dummy0 [ 566.261205][T18455] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.293372][T18455] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 566.747143][T18481] loop9: detected capacity change from 0 to 128 [ 566.838764][T18481] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 566.886356][T18481] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 566.968332][T18481] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 567.111391][T18481] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 567.251798][T18481] fscrypt: loop9: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 567.352770][T16762] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 568.595733][T18555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3953'. [ 568.651985][T18552] batman_adv: batadv0: Adding interface: dummy0 [ 568.672074][T18552] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.708310][T18552] batman_adv: batadv0: Interface activated: dummy0 [ 568.795701][T18556] batadv0: mtu less than device minimum [ 568.813593][T18556] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 568.826962][T18556] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 568.839417][T18556] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 568.851822][T18556] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 568.864217][T18556] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 568.876810][T18556] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 568.889198][T18556] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 568.901449][T18556] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 568.913857][T18556] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 569.084731][T18563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3949'. [ 571.613533][T18626] netlink: 140 bytes leftover after parsing attributes in process `syz.9.3972'. [ 571.636510][T18626] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3972'. [ 571.925083][T18620] loop2: detected capacity change from 0 to 32768 [ 572.342380][T18639] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3975'. [ 572.644742][T18648] batman_adv: batadv0: Adding interface: dummy0 [ 572.674332][T18648] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.794874][T18648] batman_adv: batadv0: Interface activated: dummy0 [ 575.281144][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4002'. [ 575.864510][T18730] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4012'. [ 576.851462][T18741] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4016'. [ 576.870734][T18741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4016'. [ 576.879125][T18745] overlayfs: failed to clone upperpath [ 577.308631][T18761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4024'. [ 577.394996][ T28] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 577.593772][ T28] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 577.605891][ T28] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 577.629074][ T28] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 577.639441][ T28] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.666533][T18753] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 577.701436][ T28] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 578.063496][ T28] usb 10-1: USB disconnect, device number 7 [ 579.285623][T18780] loop2: detected capacity change from 0 to 40427 [ 579.450168][ T5829] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 579.653657][ T5829] usb 10-1: Using ep0 maxpacket: 32 [ 579.677310][ T5829] usb 10-1: config 0 has no interfaces? [ 579.695563][ T5829] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 579.739866][ T5829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.762297][ T5829] usb 10-1: config 0 descriptor?? [ 580.018072][ T28] usb 10-1: USB disconnect, device number 8 [ 580.124077][T18804] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 580.485398][T18813] netlink: 'syz.2.4047': attribute type 1 has an invalid length. [ 580.560577][T18813] bond7: (slave gretap1): making interface the new active one [ 580.568791][T18813] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 580.602233][T18813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4047'. [ 580.656934][T18813] 8021q: adding VLAN 0 to HW filter on device bond7 [ 580.955378][T18823] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 581.786909][T18842] bond7: entered allmulticast mode [ 581.825053][T18844] binder: 18843:18844 unknown command 0 [ 581.835921][T18844] binder: 18843:18844 ioctl c0306201 200000000080 returned -22 [ 582.086534][T18848] loop2: detected capacity change from 0 to 2048 [ 582.119417][T18851] ref_ctr increment failed for inode: 0x1c10 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888031bdc280 [ 586.108675][T18935] binder: 18934:18935 ioctl c0306201 200000000080 returned -14 [ 586.167940][T18935] binder: 18934:18935 ioctl c0306201 2000000003c0 returned -14 [ 586.648112][T18954] loop2: detected capacity change from 0 to 2048 [ 586.712111][T17757] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 586.790517][ T27] audit: type=1326 audit(1779108977.021:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18953 comm="syz.2.4097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ac279ce59 code=0x0 [ 587.117647][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4101'. [ 587.968345][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4111'. [ 588.182977][T19000] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 588.412683][T19004] loop9: detected capacity change from 0 to 512 [ 588.445336][T19004] EXT4-fs: Ignoring removed mblk_io_submit option [ 588.530454][T19004] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 588.565581][T19004] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 588.598177][T19004] EXT4-fs (loop9): orphan cleanup on readonly fs [ 588.669701][T19004] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:478: comm syz.9.4114: Invalid block bitmap block 0 in block_group 0 [ 588.768359][T19004] EXT4-fs (loop9): Remounting filesystem read-only [ 588.788994][T19004] Quota error (device loop9): write_blk: dquota write failed [ 588.829877][T19004] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 588.844813][T19009] bond11: entered allmulticast mode [ 588.860204][T19004] EXT4-fs (loop9): 1 orphan inode deleted [ 588.902682][T19004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 589.119737][T19011] 8021q: adding VLAN 0 to HW filter on device bond12 [ 589.139318][T19011] bond12: entered allmulticast mode [ 589.157280][T19011] bond11: (slave bond12): Enslaving as an active interface with an up link [ 589.552144][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4120'. [ 589.654720][T16762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.831038][T19075] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4140'. [ 592.025643][T19079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4142'. [ 592.157820][T19085] bridge0: port 1(wlan1) entered blocking state [ 592.165292][T19085] bridge0: port 1(wlan1) entered disabled state [ 592.172296][T19085] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 592.181815][T19085] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 592.923400][T19104] syzkaller0: entered promiscuous mode [ 592.955765][T19104] syzkaller0: entered allmulticast mode [ 593.572307][T19134] tmpfs: Bad value for 'mpol' [ 593.573079][T19134] mmap: syz.6.4164 (19134): VmData 175874048 exceed data ulimit 1129. Update limits or use boot option ignore_rlimit_data. [ 593.730256][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 594.203923][T19162] overlayfs: failed to clone upperpath [ 596.003480][T19202] loop2: detected capacity change from 0 to 1024 [ 596.196334][T19204] sctp: [Deprecated]: syz.6.4189 (pid 19204) Use of int in max_burst socket option. [ 596.196334][T19204] Use struct sctp_assoc_value instead [ 597.165559][T19224] loop2: detected capacity change from 0 to 4096 [ 598.998932][T19224] ntfs3: loop2: Failed to initialize $Secure::$SDH (-22). [ 599.036096][T19224] ntfs3: loop2: Failed to initialize $Secure (-22). [ 599.380794][T19237] loop2: detected capacity change from 0 to 512 [ 599.611218][T19246] loop9: detected capacity change from 0 to 512 [ 599.675171][T19249] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4208'. [ 599.963431][T19252] lo: Caught tx_queue_len zero misconfig [ 599.969788][T19252] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 600.172246][T19261] bond9: entered allmulticast mode [ 600.216601][T19261] bridge5: entered promiscuous mode [ 600.226957][T19261] bridge5: entered allmulticast mode [ 600.238874][T19261] bond9: (slave bridge5): making interface the new active one [ 600.247654][T19261] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 600.442964][T19269] syzkaller0: entered allmulticast mode [ 600.464890][T19269] syzkaller0 (unregistering): left allmulticast mode [ 600.737065][T19284] bridge0: port 1(wlan1) entered blocking state [ 600.743854][T19284] bridge0: port 1(wlan1) entered disabled state [ 600.751325][T19284] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 600.759329][T19284] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 600.912354][T19289] net_ratelimit: 30 callbacks suppressed [ 600.912440][T19289] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 600.948127][T19291] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4225'. [ 601.207606][ T27] audit: type=1326 audit(1779108991.431:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.9.4228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 601.252464][ T27] audit: type=1326 audit(1779108991.431:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.9.4228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 601.289562][ T27] audit: type=1326 audit(1779108991.431:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.9.4228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 601.316120][ T27] audit: type=1326 audit(1779108991.431:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.9.4228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 601.349209][ T27] audit: type=1326 audit(1779108991.431:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.9.4228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 601.385118][T19301] netlink: 'syz.9.4230': attribute type 1 has an invalid length. [ 601.420053][ T27] audit: type=1326 audit(1779108991.431:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.9.4228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 601.460575][T19303] bond3: entered promiscuous mode [ 601.490882][T19303] bond3: entered allmulticast mode [ 601.496350][T19303] 8021q: adding VLAN 0 to HW filter on device bond3 [ 601.502845][ T27] audit: type=1326 audit(1779108991.431:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.9.4228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 601.564214][ T27] audit: type=1326 audit(1779108991.431:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.9.4228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 601.650605][ T27] audit: type=1326 audit(1779108991.431:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.9.4228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 601.708502][ T27] audit: type=1326 audit(1779108991.431:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.9.4228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 601.765422][T19301] veth3: entered promiscuous mode [ 601.776012][T19301] veth3: entered allmulticast mode [ 601.798750][T19301] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 601.932915][T19320] loop2: detected capacity change from 0 to 256 [ 602.037238][T19325] binder: 19324:19325 ioctl c0306201 200000000080 returned -14 [ 602.057518][T17757] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 602.062719][T19325] binder: BINDER_SET_CONTEXT_MGR already set [ 602.127900][T19325] binder: 19324:19325 ioctl 4018620d 200000000040 returned -16 [ 602.146194][T19330] binder: 19324:19330 ioctl c0306201 2000000003c0 returned -14 [ 604.242173][T19387] loop2: detected capacity change from 0 to 8 [ 607.591018][T19465] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4280'. [ 607.736568][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4280'. [ 608.856261][T19491] bridge0: entered promiscuous mode [ 608.899683][T19491] macvlan2: entered promiscuous mode [ 609.099506][T19495] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 609.553959][T19511] bond6: entered allmulticast mode [ 609.560586][T19511] ip6gre1: entered allmulticast mode [ 609.726265][T19516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4299'. [ 610.906846][T19581] loop9: detected capacity change from 0 to 128 [ 610.996654][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 610.996669][ T27] audit: type=1804 audit(1779109257.226:1533): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4323" name="/newroot/195/file0/bus" dev="loop9" ino=1048664 res=1 errno=0 [ 611.045391][ T27] audit: type=1804 audit(1779109257.276:1534): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4323" name="/newroot/195/file0/bus" dev="loop9" ino=1048664 res=1 errno=0 [ 611.073104][ T27] audit: type=1804 audit(1779109257.286:1535): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4323" name="/newroot/195/file0/bus" dev="loop9" ino=1048664 res=1 errno=0 [ 611.227168][T19589] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4325'. [ 611.232934][T19591] loop2: detected capacity change from 0 to 512 [ 611.259794][T19591] EXT4-fs: Ignoring removed bh option [ 611.861522][T19604] binder: 19603:19604 ioctl c0306201 200000000680 returned -14 [ 613.123753][T19622] bond10: entered allmulticast mode [ 613.164052][T19624] ip6gretap0: entered promiscuous mode [ 613.186255][T19624] bond10: (slave ip6gretap0): no link monitoring support [ 613.249914][T19626] loop2: detected capacity change from 0 to 2048 [ 613.262651][T19624] bond10: (slave ip6gretap0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 613.313234][T19624] ip6gretap0: entered allmulticast mode [ 613.319335][T19624] bond10: (slave ip6gretap0): Enslaving as an active interface with an up link [ 613.462141][T19628] binder: 19627:19628 ioctl c0306201 200000000680 returned -14 [ 614.557771][T19638] ref_ctr increment failed for inode: 0x1599 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888030515580 [ 614.690513][T12929] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 614.890197][T12929] usb 10-1: Using ep0 maxpacket: 16 [ 614.900881][T12929] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.917774][T12929] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.928099][T12929] usb 10-1: config 0 interface 0 has no altsetting 0 [ 614.938477][T19648] loop2: detected capacity change from 0 to 512 [ 614.940449][T12929] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 614.967631][T12929] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.979637][T12929] usb 10-1: config 0 descriptor?? [ 615.026787][T17757] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 615.251427][T19650] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 615.324218][T19650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 615.409558][T12929] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 615.424015][T12929] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 615.432019][T12929] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 615.439897][T12929] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 615.453410][T12929] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 615.475088][T12929] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 616.068761][T12929] usb 10-1: USB disconnect, device number 9 [ 616.291320][T19674] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 616.462300][T19676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4359'. [ 617.044521][ T27] audit: type=1326 audit(1779109263.276:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.9.4364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 617.129125][ T27] audit: type=1326 audit(1779109263.276:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.9.4364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 617.229088][ T27] audit: type=1326 audit(1779109263.276:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.9.4364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 617.290293][ T27] audit: type=1326 audit(1779109263.276:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.9.4364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 617.380074][ T27] audit: type=1326 audit(1779109263.276:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.9.4364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 617.426725][ T27] audit: type=1326 audit(1779109263.276:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.9.4364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 617.457376][ T27] audit: type=1326 audit(1779109263.276:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.9.4364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 617.482386][ T27] audit: type=1326 audit(1779109263.276:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.9.4364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 617.507526][ T27] audit: type=1326 audit(1779109263.276:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.9.4364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 617.532242][ T27] audit: type=1326 audit(1779109263.276:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.9.4364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 618.300693][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4379'. [ 618.739544][T19728] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 619.522251][T19751] overlayfs: failed to clone upperpath [ 619.980493][T11516] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 620.190461][T11516] usb 3-1: Using ep0 maxpacket: 16 [ 620.205358][T11516] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 620.219531][T11516] usb 3-1: config 0 has no interface number 0 [ 620.226548][T11516] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 620.238097][T11516] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 620.263431][T11516] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 620.278533][T11516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.287129][T11516] usb 3-1: Product: syz [ 620.291869][T11516] usb 3-1: Manufacturer: syz [ 620.296491][T11516] usb 3-1: SerialNumber: syz [ 620.311381][T11516] usb 3-1: config 0 descriptor?? [ 620.317025][T19758] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 620.330609][T19758] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 620.549328][T19758] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 620.557576][T19758] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 620.767354][T11516] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 621.096739][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4401'. [ 621.433356][T19744] Bluetooth: hci0: command 0x0406 tx timeout [ 622.295668][ T28] libceph: connect (1)[c::]:6789 error -97 [ 622.320969][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 622.386919][T11516] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 622.404070][T19808] ceph: No mds server is up or the cluster is laggy [ 622.404430][T11516] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 622.422880][T11516] asix: probe of 3-1:0.34 failed with error -71 [ 622.477247][T11516] usb 3-1: USB disconnect, device number 29 [ 622.810715][T12929] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 623.045616][T12929] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 623.066789][T12929] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.078139][T12929] usb 10-1: config 0 descriptor?? [ 623.090881][T12929] cp210x 10-1:0.0: cp210x converter detected [ 623.123680][T19829] loop2: detected capacity change from 0 to 128 [ 623.244884][T19831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4419'. [ 623.417279][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4422'. [ 623.511216][T12929] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 623.556430][T12929] usb 10-1: cp210x converter now attached to ttyUSB0 [ 623.822651][T12929] usb 10-1: USB disconnect, device number 10 [ 623.847875][T12929] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 623.931253][T12929] cp210x 10-1:0.0: device disconnected [ 624.540525][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.547606][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.495679][T19896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4441'. [ 626.833844][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 626.833856][ T27] audit: type=1326 audit(1779109273.066:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.9.4445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 626.866420][ T27] audit: type=1326 audit(1779109273.096:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.9.4445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 626.890962][ T27] audit: type=1326 audit(1779109273.096:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.9.4445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 626.915535][ T27] audit: type=1326 audit(1779109273.096:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.9.4445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 626.945921][ T27] audit: type=1326 audit(1779109273.096:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.9.4445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 626.970562][ T27] audit: type=1326 audit(1779109273.096:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.9.4445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 626.995255][ T27] audit: type=1326 audit(1779109273.096:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.9.4445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 627.027558][ T27] audit: type=1326 audit(1779109273.106:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.9.4445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 627.052500][ T27] audit: type=1326 audit(1779109273.106:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.9.4445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 627.076901][ T27] audit: type=1326 audit(1779109273.106:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.9.4445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3a79ce59 code=0x7ffc0000 [ 628.105037][T19924] loop2: detected capacity change from 0 to 512 [ 629.532088][T19955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4461'. [ 629.547430][T19955] ip6gre3: entered promiscuous mode [ 629.553399][T19955] ip6gre3: entered allmulticast mode [ 629.597475][T19955] netlink: 'syz.2.4461': attribute type 6 has an invalid length. [ 629.605747][T19955] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4461'. [ 630.216218][T19972] loop2: detected capacity change from 0 to 256 [ 630.293367][T17757] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 631.189773][T19991] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 632.254314][T20006] Set syz0 is full, maxelem 0 reached [ 632.559649][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 632.559663][ T27] audit: type=1326 audit(1779109278.786:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.6.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be9b9ce59 code=0x7fc00000 [ 632.613087][T20010] loop2: detected capacity change from 0 to 7 [ 632.623406][ T27] audit: type=1326 audit(1779109278.806:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.6.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2be9b9ce59 code=0x7fc00000 [ 632.636813][T20010] loop2: p1 [ 632.671419][T20010] loop2: partition table partially beyond EOD, truncated [ 632.679147][ T27] audit: type=1326 audit(1779109278.806:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.6.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be9b9ce59 code=0x7fc00000 [ 632.685380][T20010] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 632.753237][ T27] audit: type=1326 audit(1779109278.806:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.6.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be9b9ce59 code=0x7fc00000 [ 632.765173][T17757] udevd[17757]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 632.819760][ T27] audit: type=1326 audit(1779109278.806:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.6.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be9b9ce59 code=0x7fc00000 [ 632.884713][ T27] audit: type=1326 audit(1779109278.806:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.6.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be9b9ce59 code=0x7fc00000 [ 632.911964][ T27] audit: type=1326 audit(1779109278.806:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.6.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be9b9ce59 code=0x7fc00000 [ 632.937062][ T27] audit: type=1326 audit(1779109278.806:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.6.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be9b9ce59 code=0x7fc00000 [ 632.962297][ T27] audit: type=1326 audit(1779109278.806:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.6.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be9b9ce59 code=0x7fc00000 [ 632.987137][ T27] audit: type=1326 audit(1779109278.806:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20001 comm="syz.6.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be9b9ce59 code=0x7fc00000 [ 633.015425][T20008] loop9: detected capacity change from 0 to 32768 [ 633.026390][T20008] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.4483 (20008) [ 633.078716][T20008] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 633.099301][T20008] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 633.116903][T20008] BTRFS info (device loop9): using free space tree [ 633.161576][T20008] BTRFS info (device loop9): enabling ssd optimizations [ 633.168556][T20008] BTRFS info (device loop9): auto enabling async discard [ 633.433387][T16762] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 633.628931][T17757] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop9 scanned by udevd (17757) [ 633.716780][T20043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 633.802437][T20043] syz_tun (unregistering): left allmulticast mode [ 635.857523][T20087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4508'. [ 636.083692][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4513'. [ 636.899273][T12929] libceph: connect (1)[c::]:6789 error -97 [ 636.919102][T12929] libceph: mon0 (1)[c::]:6789 connect error [ 637.016050][T20129] ceph: No mds server is up or the cluster is laggy [ 641.065289][T20153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4528'. [ 641.079911][T20154] ip6gre2: entered promiscuous mode [ 641.085732][T20154] ip6gre2: entered allmulticast mode [ 641.098692][T20161] netlink: 'syz.6.4531': attribute type 4 has an invalid length. [ 641.169644][T20162] netlink: 'syz.6.4531': attribute type 4 has an invalid length. [ 641.810812][T20183] netlink: 'syz.6.4538': attribute type 1 has an invalid length. [ 641.818686][T20183] netlink: 'syz.6.4538': attribute type 4 has an invalid length. [ 641.826939][T20183] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.4538'. [ 641.840367][T20183] netlink: 'syz.6.4538': attribute type 1 has an invalid length. [ 641.848204][T20183] netlink: 'syz.6.4538': attribute type 4 has an invalid length. [ 641.860575][T20183] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.4538'. [ 642.139423][T20190] loop9: detected capacity change from 0 to 32768 [ 642.262227][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 642.262240][ T27] audit: type=1800 audit(1779109288.486:1597): pid=20190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4541" name="bus" dev="loop9" ino=11 res=0 errno=0 [ 642.749145][T20201] loop2: detected capacity change from 0 to 32768 [ 647.233423][T20334] xt_TCPMSS: Only works on TCP SYN packets [ 647.407424][T20340] loop2: detected capacity change from 0 to 256 [ 647.441005][T20166] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 647.456516][T20340] loop2: detected capacity change from 0 to 512 [ 647.456723][T20166] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 647.475262][T20166] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 647.485389][T20166] Buffer I/O error on dev loop2, logical block 0, async page read [ 649.610197][T11516] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 649.880375][T11516] usb 10-1: Using ep0 maxpacket: 8 [ 649.892767][T11516] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 649.920300][T11516] usb 10-1: config 0 has no interface number 0 [ 649.949727][T11516] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 649.978747][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4625'. [ 650.009430][T11516] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.050557][T11516] usb 10-1: Product: syz [ 650.059394][T11516] usb 10-1: Manufacturer: syz [ 650.085665][T11516] usb 10-1: SerialNumber: syz [ 650.115268][T11516] usb 10-1: config 0 descriptor?? [ 650.352753][T11516] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 650.387124][T11516] uvcvideo 10-1:0.31: Entity type for entity Output 6 was not initialized! [ 650.426371][T11516] usb 10-1: USB disconnect, device number 11 [ 652.985729][T20462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4642'. [ 653.396825][T20472] loop2: detected capacity change from 0 to 64 [ 653.459282][T20474] loop9: detected capacity change from 0 to 512 [ 653.478980][T20474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 653.488564][T20418] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 653.531465][T20474] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.600439][T20474] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 653.787011][T20474] EXT4-fs error (device loop9): ext4_lookup:1858: inode #12: comm syz.9.4647: iget: bad i_size value: 2533274857506816 [ 654.846408][T16762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.170212][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 655.523306][T20513] loop2: detected capacity change from 0 to 256 [ 656.250188][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4664'. [ 656.340283][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4664'. [ 656.380302][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4664'. [ 656.418908][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4664'. [ 656.450299][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4664'. [ 656.904748][T20537] netlink: 'syz.1.4667': attribute type 10 has an invalid length. [ 657.369094][T20551] loop9: detected capacity change from 0 to 512 [ 658.092174][T20551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.147624][T20551] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.363910][ T27] audit: type=1800 audit(1779109560.586:1598): pid=20551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4673" name="file0" dev="loop9" ino=19 res=0 errno=0 [ 658.473069][T16762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.446849][T20570] binder: 20569:20570 ioctl c0306201 2000000016c0 returned -14 [ 659.798130][T20586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4685'. [ 659.948136][T20591] netlink: 'syz.9.4682': attribute type 9 has an invalid length. [ 659.956038][T20591] netlink: 399 bytes leftover after parsing attributes in process `syz.9.4682'. [ 660.680085][ T27] audit: type=1326 audit(1779109562.876:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20582 comm="syz.1.4684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7fc00000 [ 660.759253][ T27] audit: type=1326 audit(1779109562.976:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20582 comm="syz.1.4684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7fc00000 [ 660.842026][T20599] netlink: 1319 bytes leftover after parsing attributes in process `syz.9.4688'. [ 660.898162][T20605] overlayfs: failed to clone upperpath [ 661.034302][T20613] netlink: 'syz.6.4694': attribute type 3 has an invalid length. [ 663.525404][T20670] 9pnet_fd: Insufficient options for proto=fd [ 665.637638][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4723'. [ 665.831768][T20699] overlayfs: failed to clone upperpath [ 665.857377][T20697] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 665.889842][T20697] ftl_cs: FTL header not found. [ 666.290219][T12929] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 666.511356][T12929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.523247][T12929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.544952][T12929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 666.559202][T12929] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 666.579170][T12929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.602003][T12929] usb 3-1: config 0 descriptor?? [ 667.043011][T12929] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 667.078373][T12929] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 669.364339][ T5808] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 669.560126][ T5808] usb 3-1: device descriptor read/64, error -32 [ 669.560146][T20779] bond0: (slave rose0): refused to change device type [ 670.513922][T12747] usb 3-1: USB disconnect, device number 30 [ 673.069371][ T27] audit: type=1326 audit(1779109575.296:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20841 comm="syz.2.4770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x0 [ 673.345419][T20850] loop9: detected capacity change from 0 to 1024 [ 674.608400][ T2962] hfsplus: bad catalog file entry [ 674.621188][ T27] audit: type=1326 audit(1779109576.836:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.2.4777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 674.630475][ T2962] hfsplus: b-tree write err: -5, ino 3 [ 674.649710][ T27] audit: type=1326 audit(1779109576.836:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.2.4777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 674.706387][ T27] audit: type=1326 audit(1779109576.836:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.2.4777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 674.742393][ T27] audit: type=1326 audit(1779109576.836:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.2.4777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 674.767473][ T27] audit: type=1326 audit(1779109576.836:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.2.4777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 674.793227][ T27] audit: type=1326 audit(1779109576.836:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.2.4777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 674.818792][ T27] audit: type=1326 audit(1779109576.836:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.2.4777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 674.855592][ T27] audit: type=1326 audit(1779109576.846:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.2.4777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 674.885235][ T27] audit: type=1326 audit(1779109576.846:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.2.4777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac279ce59 code=0x7ffc0000 [ 674.906659][T20867] binder: 20866:20867 ioctl c0306201 200000000380 returned -14 [ 674.974083][T20869] netlink: 'syz.9.4780': attribute type 1 has an invalid length. [ 674.997331][T20869] bond4: entered promiscuous mode [ 675.002991][T20869] bond4: entered allmulticast mode [ 675.013455][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4780'. [ 675.027917][T20869] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 675.041110][T20869] bond4: (slave bridge4): making interface the new active one [ 675.049028][T20869] bridge4: entered promiscuous mode [ 675.054704][T20869] bridge4: entered allmulticast mode [ 675.063647][T20869] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 675.085165][T20869] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4780'. [ 675.096200][T20869] bond4: left promiscuous mode [ 675.102162][T20869] bridge4: left promiscuous mode [ 675.107486][T20869] bond4: left allmulticast mode [ 675.113105][T20869] bridge4: left allmulticast mode [ 675.118637][T20869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 675.407851][T20885] loop2: detected capacity change from 0 to 64 [ 675.451534][T20166] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 677.719045][T20907] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 678.490621][T12747] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 678.499890][T20911] tipc: Enabling of bearer rejected, failed to enable media [ 678.700625][T12747] usb 3-1: Using ep0 maxpacket: 8 [ 678.774382][T12747] usb 3-1: unable to get BOS descriptor or descriptor too short [ 678.790677][T12747] usb 3-1: too many configurations: 141, using maximum allowed: 8 [ 678.800830][T12747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.812262][T12747] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 678.827281][T12747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.838779][T12747] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 678.862514][T12747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.873363][T12747] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.477486][T12747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.500703][T12747] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.535929][T12747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.547643][T12747] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.570718][T12747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.588797][T12747] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.605529][T12747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.662055][T12747] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.676832][T12747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.688090][T12747] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.704405][T12747] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 679.714727][T12747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.733572][T12747] usb 3-1: Product: syz [ 679.737767][T12747] usb 3-1: Manufacturer: syz [ 679.768341][T12747] usb 3-1: SerialNumber: syz [ 680.462590][T20944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 680.469854][T20944] IPv6: NLM_F_CREATE should be set when creating new route [ 680.497231][T12747] usb 3-1: can't set config #1, error -71 [ 680.565404][T12747] usb 3-1: USB disconnect, device number 31 [ 682.463421][T20983] loop9: detected capacity change from 0 to 736 [ 682.896633][T20991] netlink: 'syz.9.4824': attribute type 39 has an invalid length. [ 684.011461][T21011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4831'. [ 684.400440][T21026] autofs4:pid:21026:autofs_fill_super: called with bogus options [ 685.996952][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.004065][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.286183][T21099] kvm: pic: non byte read [ 690.307522][T21099] kvm: pic: non byte read [ 690.325645][T21099] kvm: pic: non byte read [ 690.347724][T21102] dvmrp1: entered allmulticast mode [ 690.435782][T21099] kvm: pic: level sensitive irq not supported [ 690.435856][T21099] kvm: pic: non byte read [ 690.476893][T21099] kvm: pic: non byte read [ 690.527761][T21099] kvm: pic: non byte read [ 690.533958][T21099] kvm: pic: single mode not supported [ 690.534020][T21099] kvm: pic: non byte read [ 690.562872][T21099] kvm: pic: single mode not supported [ 690.562938][T21099] kvm: pic: non byte read [ 690.896022][T21099] kvm: pic: non byte read [ 692.360399][T21153] syz.6.4872 (21153): attempted to duplicate a private mapping with mremap. This is not supported. [ 693.611797][T21177] netlink: 'syz.6.4878': attribute type 4 has an invalid length. [ 693.647277][T21177] netlink: 'syz.6.4878': attribute type 4 has an invalid length. [ 693.690504][T11516] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 693.727177][T21182] loop9: detected capacity change from 0 to 2048 [ 693.799153][T21182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.817812][T21182] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.935054][T21190] netlink: 'syz.1.4881': attribute type 1 has an invalid length. [ 693.963297][T21190] bond13: entered promiscuous mode [ 693.968904][T21190] 8021q: adding VLAN 0 to HW filter on device bond13 [ 694.020110][T11516] usb 3-1: Using ep0 maxpacket: 16 [ 694.027986][T11516] usb 3-1: unable to get BOS descriptor or descriptor too short [ 694.037419][T11516] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 694.048002][T11516] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 694.060021][T11516] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 694.069525][T11516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.078265][T11516] usb 3-1: Product: syz [ 694.083023][T11516] usb 3-1: Manufacturer: syz [ 694.087710][T11516] usb 3-1: SerialNumber: syz [ 694.304904][T11516] usb 3-1: USB disconnect, device number 32 [ 694.325728][T16762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.407629][T21190] 8021q: adding VLAN 0 to HW filter on device bond13 [ 694.451079][T21190] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 694.487817][T21190] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 694.528354][T21190] bond13: (slave wireguard0): making interface the new active one [ 694.546403][T21190] wireguard0: entered promiscuous mode [ 694.556885][T21190] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 694.633592][T21192] bond13: (slave wireguard1): The slave device specified does not support setting the MAC address [ 694.684744][T21192] bond13: (slave wireguard1): Enslaving as a backup interface with an up link [ 694.964468][T21217] loop9: detected capacity change from 0 to 512 [ 694.992498][T21217] EXT4-fs (loop9): 1 truncate cleaned up [ 695.000461][T21217] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.409444][T21229] vlan3: entered promiscuous mode [ 695.414742][T21229] bridge0: entered promiscuous mode [ 695.426164][T21229] vlan3: entered allmulticast mode [ 695.431636][T21229] bridge0: entered allmulticast mode [ 695.451236][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4895'. [ 695.471798][T21229] bridge_slave_0: left allmulticast mode [ 695.477621][T21229] bridge_slave_0: left promiscuous mode [ 695.497339][T21229] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.516103][T21229] bridge_slave_1: left allmulticast mode [ 695.527854][T21229] bridge_slave_1: left promiscuous mode [ 695.534795][T21229] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.560365][T21229] bond0: (slave bond_slave_0): Releasing backup interface [ 695.579279][T21229] bond0: (slave bond_slave_1): Releasing backup interface [ 695.624610][T21229] team0: Port device team_slave_0 removed [ 695.638098][T21229] team0: Port device team_slave_1 removed [ 695.841193][T21229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.863006][T16762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.893888][T21229] bond2: (slave ip6gre1): Releasing backup interface [ 695.905006][T21229] bond4: (slave geneve2): Releasing active interface [ 695.913227][T21229] geneve2: left allmulticast mode [ 695.924586][T21229] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.934515][T21229] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.945204][T21229] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.967896][T21229] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.040633][T21229] bond6: (slave xfrm1): Releasing backup interface [ 696.868658][T21229] bond7: (slave gretap1): Releasing backup interface [ 697.016259][T21249] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 697.058618][T21252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4903'. [ 697.195029][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 697.195039][ T27] audit: type=1804 audit(1779109599.426:1652): pid=21258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4905" name="bus" dev="ramfs" ino=66458 res=1 errno=0 [ 697.280611][ T27] audit: type=1804 audit(1779109599.456:1653): pid=21258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4905" name="bus" dev="ramfs" ino=66458 res=1 errno=0 [ 698.211346][T21271] 8021q: adding VLAN 0 to HW filter on device bond5 [ 698.298684][T21271] bond5: (slave ip6gretap1): making interface the new active one [ 698.351596][T21271] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 699.750772][T21293] loop2: detected capacity change from 0 to 2048 [ 699.911451][T21293] loop2: p1 < > p3 p4 [ 699.911451][T21293] p4: [ 699.959235][T21293] loop2: p3 start 458752 is beyond EOD, truncated [ 699.966028][T21293] loop2: p4 size 722688 extends beyond EOD, truncated [ 700.503488][T21293] loop2: p5 start 262464109 is beyond EOD, truncated [ 700.510285][T21293] loop2: p6 size 2304 extends beyond EOD, truncated [ 700.818292][T21297] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4918'. [ 700.903119][T21297] loop9: detected capacity change from 0 to 512 [ 700.921011][T21297] EXT4-fs: Ignoring removed oldalloc option [ 701.037308][T21297] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.053513][T21297] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 701.832848][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4918'. [ 701.938745][T16762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.084887][T21311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4922'. [ 702.931850][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4933'. [ 703.192559][T21354] loop9: detected capacity change from 0 to 128 [ 704.018771][T21354] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 50) [ 704.120169][T21354] FAT-fs (loop9): Filesystem has been set read-only [ 704.137151][T21354] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 50) [ 704.224137][T21354] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 50) [ 704.257458][T21354] FAT-fs (loop9): error, clusters badly computed (1 != 2) [ 704.278186][T21360] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 50) [ 704.919083][T21376] tipc: Failed to remove unknown binding: 66,1,1/0:3228405590/3228405592 [ 704.960822][T21376] tipc: Failed to remove unknown binding: 66,1,1/0:3228405590/3228405592 [ 704.991029][T21376] tipc: Failed to remove unknown binding: 66,1,1/0:3228405590/3228405592 [ 705.247359][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4946'. [ 705.615293][T21385] netlink: 'syz.9.4947': attribute type 11 has an invalid length. [ 705.652569][T21387] batman_adv: batadv0: Interface deactivated: dummy0 [ 705.659304][T21387] batman_adv: batadv0: Removing interface: dummy0 [ 705.680564][T11516] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 705.700831][T21387] team0: Port device netdevsim0 removed [ 705.708278][T21387] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 705.716681][T21387] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 705.724313][T21387] bridge0: port 1(wlan1) entered disabled state [ 705.736682][T21387] bond7: (slave bond0): Releasing backup interface [ 705.776425][T21387] bond6: (slave ip6gre1): Releasing backup interface [ 705.784203][T21387] ip6gre1: left promiscuous mode [ 705.789435][T21387] ip6gre1: left allmulticast mode [ 705.811212][T21387] bond11: (slave bond12): Releasing backup interface [ 705.818754][T21387] bond12: left allmulticast mode [ 705.836460][T21387] bond13: (slave wireguard0): Releasing backup interface [ 705.850623][T21387] wireguard0: left promiscuous mode [ 705.874773][T21387] bond13: (slave wireguard1): making interface the new active one [ 705.884418][T21387] wireguard1: entered promiscuous mode [ 705.918687][T21387] bond13: (slave wireguard1): Releasing backup interface [ 705.927679][T21387] wireguard1: left promiscuous mode [ 705.967584][T21390] team0: Mode changed to "activebackup" [ 706.033979][T21391] vlan0: entered promiscuous mode [ 706.076081][T21387] syz.1.4948 (21387) used greatest stack depth: 19248 bytes left [ 706.644070][T11516] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 708.844190][T21419] bridge0: port 1(vlan3) entered blocking state [ 708.861904][T21419] bridge0: port 1(vlan3) entered disabled state [ 708.880828][T21419] vlan3: entered allmulticast mode [ 708.885991][T21419] bond0: entered allmulticast mode [ 708.906489][T21419] vlan3: entered promiscuous mode [ 709.031569][T21430] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 709.031569][T21430] The task syz.6.4958 (21430) triggered the difference, watch for misbehavior. [ 709.315938][T21436] team0: Mode changed to "activebackup" [ 709.466916][T21436] vlan0: entered promiscuous mode [ 710.473641][T21447] loop9: detected capacity change from 0 to 512 [ 710.532279][T21447] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 710.545161][T21447] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.659554][T21459] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4972'. [ 710.687410][T21459] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 710.757074][T21460] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4972'. [ 710.778272][T21460] bond11: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 710.876775][T16762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 711.119174][T21474] loop9: detected capacity change from 0 to 1764 [ 711.314887][T21479] binder: 21478:21479 ioctl c0306201 2000000001c0 returned -14 [ 711.323740][T21479] binder: 21478:21479 unknown command 0 [ 711.329319][T21479] binder: 21478:21479 ioctl c0306201 2000000002c0 returned -22 [ 711.602330][T21488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4984'. [ 712.820494][T12747] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 713.033804][T12747] usb 10-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 713.145425][T12747] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.264920][T12747] usb 10-1: config 0 descriptor?? [ 713.286099][T12747] pwc: Samsung MPC-C10 USB webcam detected. [ 713.506403][T12747] pwc: send_video_command error -71 [ 713.520494][T12747] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 713.529875][T12747] Philips webcam: probe of 10-1:0.0 failed with error -71 [ 713.556863][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4994'. [ 713.564200][T12747] usb 10-1: USB disconnect, device number 12 [ 713.918773][T21524] syz_tun: entered promiscuous mode [ 713.925628][T21524] macvtap2: entered promiscuous mode [ 713.936129][T21524] macvtap2: entered allmulticast mode [ 713.996635][T21526] syz_tun: left promiscuous mode [ 714.030403][T21526] macvtap2: left promiscuous mode [ 714.038765][T21526] macvtap2: left allmulticast mode [ 714.090820][T12747] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 714.466353][T12747] usb 10-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 716.200757][T12747] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.211953][T12747] usb 10-1: config 0 descriptor?? [ 716.220572][T12747] usb 10-1: can't set config #0, error -71 [ 716.228045][T12747] usb 10-1: USB disconnect, device number 13 [ 716.620503][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 717.231473][T21556] tipc: Enabled bearer , priority 10 [ 717.254713][T21556] tipc: Enabling of bearer rejected, failed to enable media [ 717.640950][T21563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4999'. [ 717.898518][T21572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5009'. [ 718.700720][T21577] batman_adv: batadv0: Removing interface: dummy0 [ 718.719378][T21577] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 718.735565][T21577] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 718.745362][T21577] bridge0: port 1(wlan1) entered disabled state [ 718.784313][T21577] bond8: (slave veth15): Releasing active interface [ 718.800784][T21577] bond9: (slave bridge5): Releasing active interface [ 718.821325][T21577] bond10: (slave ip6gretap0): Releasing backup interface [ 718.844671][T21577] ip6gretap0: left allmulticast mode [ 718.866806][T21583] team0: Mode changed to "activebackup" [ 718.888943][T21587] vlan0: entered promiscuous mode [ 719.136279][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5015'. [ 719.159872][T21594] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.168721][T21594] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.177507][T21594] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.186348][T21594] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.197374][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5015'. [ 720.033263][T21601] vlan4: entered promiscuous mode [ 720.044462][T21601] vlan4: entered allmulticast mode [ 720.049716][T21601] bridge0: entered allmulticast mode [ 720.082833][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5019'. [ 720.117162][T21601] vlan3: left allmulticast mode [ 720.122786][T21601] bond0: left allmulticast mode [ 720.127678][T21601] vlan3: left promiscuous mode [ 720.134197][T12745] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 720.141660][T21601] bridge0: port 1(vlan3) entered disabled state [ 720.541404][T12745] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 721.910229][T21634] lo speed is unknown, defaulting to 1000 [ 721.919012][T21634] lo speed is unknown, defaulting to 1000 [ 721.931494][T21634] lo speed is unknown, defaulting to 1000 [ 721.951020][T21634] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 722.016398][T21634] lo speed is unknown, defaulting to 1000 [ 722.056207][T21634] lo speed is unknown, defaulting to 1000 [ 722.069556][T21634] lo speed is unknown, defaulting to 1000 [ 722.077379][T21634] lo speed is unknown, defaulting to 1000 [ 722.585038][T21646] netlink: 'syz.6.5034': attribute type 2 has an invalid length. [ 722.781611][T21651] bridge0: port 1(vlan2) entered blocking state [ 722.789833][T21651] bridge0: port 1(vlan2) entered disabled state [ 722.797380][T21651] vlan2: entered allmulticast mode [ 722.808350][T21651] bond0: entered allmulticast mode [ 722.815001][T21651] vlan2: entered promiscuous mode [ 725.113362][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5047'. [ 726.092803][T21706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5055'. [ 726.161188][T21706] bridge0: failed insert local address into bridge forwarding table [ 726.633567][T21718] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 726.653288][T21721] Invalid ELF header magic: != ELF [ 728.965515][T21744] loop2: detected capacity change from 0 to 512 [ 730.948666][T21784] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5073'. [ 730.966014][T21784] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5073'. [ 732.360496][T21813] tipc: Failed to remove unknown binding: 66,0,0/4:3873657640/3873657642 [ 732.369811][T21813] tipc: Failed to remove unknown binding: 66,0,0/4:3873657640/3873657641 [ 732.440649][T21813] tipc: Failed to remove unknown binding: 66,0,0/4:3873657640/3873657642 [ 732.449256][T21813] tipc: Failed to remove unknown binding: 66,0,0/4:3873657640/3873657641 [ 732.684500][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 732.768052][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 732.982254][T21819] binder: 21816:21819 ioctl c0306201 200000001440 returned -14 [ 733.193073][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 733.199141][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 733.356887][T21809] ceph: No mds server is up or the cluster is laggy [ 733.434694][T21833] Invalid ELF header magic: != ELF [ 733.848173][T21850] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5093'. [ 733.913857][T21850] 8021q: adding VLAN 0 to HW filter on device bond6 [ 733.953520][T21854] macvlan2: entered promiscuous mode [ 733.976372][T21854] macvlan2: entered allmulticast mode [ 734.002277][T21854] bond6: entered allmulticast mode [ 734.007625][T21854] bond6: entered promiscuous mode [ 734.013977][T21854] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 734.021912][T21854] team0: Device macvlan2 is of different type [ 734.037875][T21854] bond6: left allmulticast mode [ 734.049697][T21854] bond6: left promiscuous mode [ 734.273083][T21866] netlink: 'syz.6.5097': attribute type 3 has an invalid length. [ 734.286653][T21866] netlink: 'syz.6.5097': attribute type 3 has an invalid length. [ 735.589133][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5108'. [ 737.798281][T21927] loop9: detected capacity change from 0 to 512 [ 737.878827][T21927] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.982698][T21927] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.679736][T21943] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5122'. [ 739.082622][T16762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.246938][T21960] binder: 21959:21960 ioctl c0306201 200000000300 returned -14 [ 739.870912][ T28] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 740.060599][ T28] usb 10-1: Using ep0 maxpacket: 16 [ 740.069739][ T28] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.084024][ T28] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 740.098659][ T28] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 740.116235][ T28] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 740.160891][ T28] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.175905][ T28] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 740.190568][ T28] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 740.227523][ T28] usb 10-1: Manufacturer: syz [ 740.239571][ T28] usb 10-1: config 0 descriptor?? [ 740.258235][T21976] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 740.585624][ T28] rc_core: IR keymap rc-hauppauge not found [ 740.592239][ T28] Registered IR keymap rc-empty [ 740.597980][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 740.623315][T21993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5139'. [ 740.654394][T21993] 8021q: adding VLAN 0 to HW filter on device bond12 [ 740.656804][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 740.687915][ T27] audit: type=1326 audit(1779109642.916:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.1.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 740.699861][T21993] macvlan2: entered promiscuous mode [ 740.717489][T21993] macvlan2: entered allmulticast mode [ 740.723715][T21993] bond12: entered allmulticast mode [ 740.728963][T21993] bond12: entered promiscuous mode [ 740.734914][T21993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 740.742469][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 740.744412][T21993] team0: Port device macvlan2 added [ 740.779939][ T27] audit: type=1326 audit(1779109642.916:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.1.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 740.812585][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5142'. [ 740.817722][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input19 [ 740.844089][ T27] audit: type=1326 audit(1779109642.946:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.1.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 740.876529][ T27] audit: type=1326 audit(1779109642.946:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.1.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 740.892251][T21998] team1: entered promiscuous mode [ 740.901973][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 740.915276][T21998] team1: entered allmulticast mode [ 740.919393][ T27] audit: type=1326 audit(1779109642.946:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.1.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 740.925658][T21998] 8021q: adding VLAN 0 to HW filter on device team1 [ 740.949328][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 740.959924][ T27] audit: type=1326 audit(1779109642.946:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.1.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 740.961321][T21999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5142'. [ 741.005687][T21999] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 741.020250][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 741.047991][ T27] audit: type=1326 audit(1779109642.946:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.1.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 741.050638][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 741.078647][ T27] audit: type=1326 audit(1779109642.946:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.1.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 741.206148][T21999] team2: entered promiscuous mode [ 741.211813][T21999] team2: entered allmulticast mode [ 741.218387][T21999] 8021q: adding VLAN 0 to HW filter on device team2 [ 741.227689][ T27] audit: type=1326 audit(1779109642.946:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.1.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 741.466038][ T27] audit: type=1326 audit(1779109642.946:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.1.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccbd9ce59 code=0x7ffc0000 [ 741.829351][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 741.910964][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 741.950211][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 742.000887][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 742.040621][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 742.081270][ T28] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 742.125056][ T28] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 742.147761][ T28] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 742.186863][ T28] usb 10-1: USB disconnect, device number 14 [ 742.535264][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5155'. [ 742.600953][T12929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 742.990421][ T5829] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 743.868091][T22048] netlink: 35 bytes leftover after parsing attributes in process `syz.9.5162'. [ 744.434047][T22062] loop9: detected capacity change from 0 to 16 [ 744.471562][T22062] erofs: (device loop9): mounted with root inode @ nid 36. [ 745.615907][ T5776] Bluetooth: hci0: ACL packet too small [ 745.880436][ T28] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 746.067589][ T28] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 746.077617][ T28] usb 3-1: config 0 has no interface number 0 [ 746.086209][ T28] usb 3-1: config 0 interface 41 has no altsetting 0 [ 746.095945][ T28] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 746.105307][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.113741][ T28] usb 3-1: Product: syz [ 746.118070][ T28] usb 3-1: Manufacturer: syz [ 746.123667][ T28] usb 3-1: SerialNumber: syz [ 746.134401][ T28] usb 3-1: config 0 descriptor?? [ 746.245166][T22098] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 747.334564][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.341587][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.526288][ T42] [ 747.528658][ T42] ============================================ [ 747.534813][ T42] WARNING: possible recursive locking detected [ 747.540975][ T42] syzkaller #0 Not tainted [ 747.545382][ T42] -------------------------------------------- [ 747.551510][ T42] kworker/u4:2/42 is trying to acquire lock: [ 747.557466][ T42] ffffe8ffffd49c48 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x644/0xa70 [ 747.566718][ T42] [ 747.566718][ T42] but task is already holding lock: [ 747.574088][ T42] ffffe8ffffd49c98 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4db/0xa70 [ 747.583333][ T42] [ 747.583333][ T42] other info that might help us debug this: [ 747.591395][ T42] Possible unsafe locking scenario: [ 747.591395][ T42] [ 747.598843][ T42] CPU0 [ 747.602108][ T42] ---- [ 747.605368][ T42] lock(&pd_list->lock); [ 747.609681][ T42] lock(&pd_list->lock); [ 747.613992][ T42] [ 747.613992][ T42] *** DEADLOCK *** [ 747.613992][ T42] [ 747.622124][ T42] May be due to missing lock nesting notation [ 747.622124][ T42] [ 747.630433][ T42] 3 locks held by kworker/u4:2/42: [ 747.635527][ T42] #0: ffff888144a55138 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 747.647442][ T42] #1: ffffc90000b2fd00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 747.659259][ T42] #2: ffffe8ffffd49c98 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4db/0xa70 [ 747.668907][ T42] [ 747.668907][ T42] stack backtrace: [ 747.674783][ T42] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 747.682141][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 747.692185][ T42] Workqueue: pencrypt_parallel padata_parallel_worker [ 747.698943][ T42] Call Trace: [ 747.702212][ T42] [ 747.705135][ T42] dump_stack_lvl+0x18c/0x250 [ 747.709803][ T42] ? show_regs_print_info+0x20/0x20 [ 747.714991][ T42] ? print_deadlock_bug+0x435/0x5d0 [ 747.720195][ T42] __lock_acquire+0x5dbc/0x7d40 [ 747.725063][ T42] ? verify_lock_unused+0x140/0x140 [ 747.730262][ T42] ? mark_lock+0x94/0x320 [ 747.734582][ T42] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 747.740550][ T42] lock_acquire+0x19e/0x420 [ 747.745048][ T42] ? padata_do_serial+0x644/0xa70 [ 747.750068][ T42] ? lockdep_hardirqs_on+0x98/0x150 [ 747.755251][ T42] ? queue_work_on+0x19a/0x1f0 [ 747.760010][ T42] ? read_lock_is_recursive+0x20/0x20 [ 747.765373][ T42] ? __rwlock_init+0x150/0x150 [ 747.770133][ T42] ? generic_gcmaes_encrypt+0x289/0x3d0 [ 747.775692][ T42] _raw_spin_lock+0x2e/0x40 [ 747.780205][ T42] ? padata_do_serial+0x644/0xa70 [ 747.785248][ T42] padata_do_serial+0x644/0xa70 [ 747.790092][ T42] ? padata_parallel_worker+0x44/0x1c0 [ 747.795539][ T42] padata_parallel_worker+0x6f/0x1c0 [ 747.800832][ T42] ? process_scheduled_works+0x96f/0x15d0 [ 747.806543][ T42] process_scheduled_works+0xa5d/0x15d0 [ 747.812082][ T42] ? worker_attach_to_pool+0x380/0x380 [ 747.817528][ T42] ? assign_work+0x3d2/0x5d0 [ 747.822117][ T42] worker_thread+0xa55/0xfc0 [ 747.826716][ T42] kthread+0x2fa/0x390 [ 747.830770][ T42] ? pr_cont_work+0x560/0x560 [ 747.835519][ T42] ? kthread_blkcg+0xd0/0xd0 [ 747.840094][ T42] ret_from_fork+0x48/0x80 [ 747.844500][ T42] ? kthread_blkcg+0xd0/0xd0 [ 747.849071][ T42] ret_from_fork_asm+0x11/0x20 [ 747.853829][ T42] [ 747.859606][ T28] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 749.286422][ T28] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 749.298195][ T28] CoreChips: probe of 3-1:0.41 failed with error -71 [ 749.308074][ T28] usb 3-1: USB disconnect, device number 33