last executing test programs: 34m27.16471354s ago: executing program 3 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0x80000000, {0x21, 0x6, 0x0, 0x6c06, 0x6}}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 34m23.18447915s ago: executing program 3 (id=7): inotify_init1(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002080), r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) fanotify_init(0x40, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) syz_open_dev$vim2m(0x0, 0x3, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) 34m19.520059611s ago: executing program 3 (id=10): unshare(0x2040400) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() io_setup(0xbf, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='\'pids'], 0x6) sched_rr_get_interval(r1, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 34m14.236320467s ago: executing program 3 (id=15): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000100)=0x3, 0x5, 0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 33m59.124285477s ago: executing program 32 (id=15): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000100)=0x3, 0x5, 0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 18m44.66188066s ago: executing program 4 (id=1074): fanotify_init(0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}}) ioctl$COMEDI_SETRSUBD(0xffffffffffffffff, 0x6410) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "83fa7e8f5ac4bd4f577c1203d9b21e73"}, 0x11, 0x1) dup3(r5, r4, 0x0) finit_module(r5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) memfd_create(0x0, 0x1) 18m32.777130401s ago: executing program 4 (id=1085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000"], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x2, 0xb, 0x5}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x24, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000000400000000000000", @ANYRES32=r7, @ANYBLOB="ae1e020000000040"], 0x20}}, 0x0) 18m31.195738956s ago: executing program 4 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200000000002) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x4000006) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read(r3, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000300)=0x20001, 0x4) r4 = msgget$private(0x0, 0x31) msgrcv(0x0, 0x0, 0xe, 0x2, 0x2000) msgctl$IPC_STAT(r4, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd601d200000442c"], 0x0) socket$netlink(0x10, 0x3, 0x0) 18m28.935774549s ago: executing program 4 (id=1089): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) ioctl$FBIOGETCMAP(r4, 0x4604, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71ffff15cdf0311c00003a52a7d96bd1", 0x10) r6 = accept4$alg(r5, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r6, &(0x7f0000001c00), 0x0, 0x80) 18m26.816150457s ago: executing program 4 (id=1092): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x102) 18m23.010965134s ago: executing program 4 (id=1095): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f02, 0x7000000, 0x0, 0x46, 0x0, 0x0}, 0x84) futex(&(0x7f000000cffc), 0x80000000000b, 0x800, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x20, 0x0) ftruncate(r2, 0x1e8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000180)={'ip6erspan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x1c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 18m5.795840314s ago: executing program 33 (id=1095): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f02, 0x7000000, 0x0, 0x46, 0x0, 0x0}, 0x84) futex(&(0x7f000000cffc), 0x80000000000b, 0x800, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x20, 0x0) ftruncate(r2, 0x1e8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000180)={'ip6erspan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x1c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 6.555815946s ago: executing program 5 (id=3686): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r2, 0x8, r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r7, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 5.397884249s ago: executing program 5 (id=3691): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000003c0)='./file0\x00', 0x2000001, &(0x7f0000000180)={[{@inline_dentry}, {@usrjquota={'usrjquota', 0x3d, 'nouser_xattr'}}, {@acl}, {@resgid={'resgid', 0x3d, 0xee00}}, {@inline_xattr}, {@grpjquota={'grpjquota', 0x3d, '('}}, {@quota}, {@nouser_xattr}, {@usrjquota={'usrjquota', 0x3d, 'nouser_xattr'}}, {@user_xattr}, {@fsync_mode_strict}, {@noquota}, {@jqfmt_vfsold}, {@four_active_logs}]}, 0x1, 0x552b, &(0x7f0000000b40)="$eJzs3EtvG2UXAODjpOn96xchFuw6UoWUSLVVp00FuwCtuIhUUYEFK3Bsx3Jre6LYcUJWLFgiFvwTBBIrlvwGFqzZIRYgdkggz4whKReB7NRp8zzS+My8fn3mvJYV6czEDuDUWkx+/rEUV+JCRMxHxOWIbL9UbJm1PDwXEVcjYu7QVirGfx84GxEXI+LKKHmes1Q89en14bXVH9746atvzp259NmX385u1cCsPR8R3e18f6+bx7SVxwfFeG3YzmL31rCI+RPdh8Vxmse95maWYa82nlfL4s1WPj/d3u2P4lanVh/FVnsrG9/u5SfsD1vjPNkLHtR2suNGczOL7X6axdZBXtf+Qf637aA/yPM0inwfZOljMBjHfLy538zXs/0wi/XeoBjP86aN5v4oDotYnC7qaaeR1bE5yTt9sr3Z7u3uJ8PmTr+d9pLVSvWFSvV2ubqTNpqD5q1yrdu4fStZanVG08qDZq271krTVqdZqafd5WSpVa+Xq9Vk6U5zs13rJdVq5WblRnl1udi7nrx6752k00iWRvHldm930O70k610J8lfsZysVG6+uJxcqyZvrW8kG/fv3l3fePu9O+/ee2n99VeKSX8qK1laubGyUq7eKK9Ul0/R+j8qip7i+mEipVkXAPDkmaj/Lx9KpP8H/oPj6/937kccf/8f+v+peKL639Pe///D+rVhzIQPHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqfXdwuevZTuL+fGlYvx/xdAzxXEpIuYi4te/MB9nj+ScL/Is/M38hUdq+LoUWYbROc4V28WIWCu2X/5/3O8CAAAAPL2++PDqJ3m3nj8szrogHqf8os3c5fenlK8UEQuL308p29zo4dkpJcs+32dif0rZsgtY56eULL/kdmbSLOOLa/9q8vyRcP5QKOVhbtJyAACAk+doJzBxFwIAAMCJ9fGsC2A2SjG+lTm+F5z95/0fNwQvHDkCAAAATqhHv2p/WOkx1gEAAADMRtb/+/0/AAAAeLrlv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAbO3eTmzYQxwH0bxsX+qWiqvtepTs4Ro/QZZcVB+glOEAW5Aq5AGcguxwhggiPQyBCSiQPthK9J5lhrOHHDMKLmZEGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEu6rVfz638//3fN2e66yTMaAAAA4JxNvZo3b6ap/rm9/7W99b2tFxFRRsS5uXsVH04yqzanfmp/ddy+ftaHm4gmYf8d4/b6FBG/2uv+26V/BQAAAHi/1ovlLM3W08t06A7Rp7RoU375nSmviIh6epcprdzn/cgU1vy/R/E3U1qzgDXJFJaW3Ea50l6ledwPq3aTo6JIRXn2Y4dOZhs7AADQo+qk6HcWAgAAQJ/+DN0BhlHE41bmYStwnIp2e+/jSQ0AAAB4g4qhOwAAAAB0Vb3UoJn/93T+3875fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl7SpV/P1YjnrmrPddZNnNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zczOpqmKMcoeIqLgQS92s62tvYkHJXjwTxBCuq2xW3+0OdhSxFy8Sc69iB5FBCXe+j/03GAv9dbDHip4VuZXdtJE3BQ6s2k+H3jzvjMM875vFkK+82YXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDK+L1JnGSbhSKOy2N3H95cy/qdR/rM7a17S1nL4qjJpI+GV+o7Ua+9RAAAADg+kqq+DyHcT7dXsj5eyOv/tDonq/l/eK6Iq3r+0bp/Z7noq9o/a7//9uCl3YEWinGyi15cHw2X96fSeXKznG3P/+8ZnfzO589ekvwDiT/cfHGc5vcz+u7Onfe7eTjXRLYAwOM4VfVlUP0/lPWDNhMD4Njo1Arvqv5PFtrNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAJ483wTBVHIYSlziTO7Dy8uXZQf3vr3lLVzt26tRW+mVwzu0QaQri4PhouNzqb2Xbt+o3Lq6PR8GrzwashhLZGf7ec/uWPpzg5hMcc648W7qpgXxCXH/as5HM0ghb/KAEA8JSY27OXli2r6++n2yvZsWgxhH9+3Fv/v1GLw5T1/4NPzt2tj1Wv/wdPeJZHSX/jyhf9a9dvvLV+ZfXS8NLws7dPD94ZnDl/9uz5fv6spO+JCQAAAP/lxFRndctWr//jxf3r/ydrcZiy/v/y+8HX9bES9f+BJot+bWcCAABwvL3w2t9/RQccj7rd8NXqxsbVQbHd3T9dbFtI9dDmylav/5PFtrMCAAAAmjDejPas/1+oxWHK9f9nf3r5l/o1kxDCfLn+f2rt89GF5qYz0w79xeD5w3+duO05AgAA0K75stXX/9P8/f9495WHOITw5utFXP4M4FT1f/LBtz/Xx6q//3+muSnOpLhX3I+874XQ6bWdEQAAAE+zE2XLiv0/0+2VT389+VHX+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATfs3AAD//31cRhM=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fdatasync(r0) 4.880068294s ago: executing program 1 (id=3694): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r2, 0x8, r0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) 4.30634028s ago: executing program 2 (id=3695): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r2, 0x8, r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r7, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 3.709428866s ago: executing program 1 (id=3697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) 2.86510361s ago: executing program 1 (id=3699): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r2, 0x8, r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r7, @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 2.723750104s ago: executing program 2 (id=3700): r0 = syz_clone3(&(0x7f00000003c0)={0xac020080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0xffffffffffffffff, 0x0) 2.372975154s ago: executing program 2 (id=3702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) 2.372839944s ago: executing program 5 (id=3703): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.775074841s ago: executing program 0 (id=3704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4004040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x14}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 1.611992345s ago: executing program 1 (id=3705): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r2, 0x8, r0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) 1.581471266s ago: executing program 5 (id=3706): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x140, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x108, 0x2, [@TCA_BASIC_EMATCHES={0x78, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x251d, 0x0, 0xff16}}}, @TCF_EM_CANID={0x14, 0x3ffe, 0x0, 0x0, {{0x3, 0x7, 0x8000}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0xfffa, 0x0, 0x7f}, "20e580a6ee25fca248a9f270f1f3977ec7ef64a8cd1852158509870a5c3d77a95c3ebc9411d73d1991"}}]}]}, @TCA_BASIC_ACT={0x8c, 0x3, [@m_connmark={0x88, 0x6, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40a, 0x10001, 0xffffffffffffffff, 0x4000a4, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x6, 0x7, 0x8, 0x2}, 0x39e0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x200, 0x7, 0x2, 0x9}, 0x41}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.578746726s ago: executing program 2 (id=3707): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r2, 0x8, r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r7, @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 662.360111ms ago: executing program 5 (id=3709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x20006}]}}}}}}}, 0x0) 498.785626ms ago: executing program 1 (id=3710): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@stripe}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) fallocate(r0, 0x3, 0x7f, 0x8000c61) 498.659786ms ago: executing program 5 (id=3711): syz_usb_connect(0x2, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x3f1ab41b7e1cb1f8, 0x49, 0x59, 0xe5, 0x20, 0xbd26, 0x5a86, 0x130f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0xb, 0x0, 0x3, "", [{{0x9, 0x4, 0x54, 0x1, 0x0, 0xef, 0x1, 0x1, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0xc356, 0xa}}]}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) sendmsg(0xffffffffffffffff, 0x0, 0x4040000) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) capset(0x0, 0x0) 433.096318ms ago: executing program 0 (id=3712): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x80, 0x0}, 0xe07e872420dfefca) pipe2$9p(&(0x7f0000000040), 0x80800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000034000000030a01020000000000000000010000000900030073797a320000000008000a40000000040900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xac}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="92b8dad24aa169e3e64ef86e23b31dfe20da"], 0x8) 321.547181ms ago: executing program 1 (id=3713): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r2, 0x8, r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x88901, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r7, @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 293.437792ms ago: executing program 0 (id=3714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd2c, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_DATA_WEP40={0x9, 0xa}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8e00000000000000005dfed183"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x50}}, 0x0) 182.967885ms ago: executing program 0 (id=3715): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 175.219935ms ago: executing program 2 (id=3716): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) close_range(r0, r1, 0x0) 54.789509ms ago: executing program 0 (id=3717): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") chown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 0s ago: executing program 2 (id=3718): unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) kernel console output (not intermixed with test programs): 6][T13918] REISERFS (device loop0): Using r5 hash to sort names [ 1365.919720][T13918] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1367.769337][T13937] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1430'. [ 1367.824255][T13937] loop0: detected capacity change from 0 to 512 [ 1368.532270][T13937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1368.819541][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.058109][T13948] netlink: 'syz.5.1432': attribute type 28 has an invalid length. [ 1371.110812][T13950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1433'. [ 1371.710242][T13965] netlink: 'syz.1.1427': attribute type 28 has an invalid length. [ 1373.032179][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 1375.165534][T13978] loop0: detected capacity change from 0 to 8192 [ 1375.212913][T13978] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1375.241893][T13978] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1375.274665][T13978] REISERFS (device loop0): using ordered data mode [ 1375.281514][T13978] reiserfs: using flush barriers [ 1375.297368][T13978] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1375.369616][T13978] REISERFS (device loop0): checking transaction log (loop0) [ 1375.416515][T13978] REISERFS (device loop0): Using r5 hash to sort names [ 1375.445176][T13978] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1376.696144][T13997] tipc: Can't bind to reserved service type 1 [ 1377.057409][T14001] netlink: 'syz.1.1442': attribute type 28 has an invalid length. [ 1378.102820][T14014] netlink: 'syz.0.1444': attribute type 28 has an invalid length. [ 1379.671554][T14012] loop1: detected capacity change from 0 to 32768 [ 1379.742381][T14012] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1380.610764][T14012] XFS (loop1): Ending clean mount [ 1380.636532][T14012] XFS (loop1): Quotacheck needed: Please wait. [ 1380.808207][T14012] XFS (loop1): Quotacheck: Done. [ 1381.331806][ T28] audit: type=1804 audit(2000000189.780:181): pid=14033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1447" name="/newroot/365/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=1 errno=0 [ 1381.502807][T14029] loop0: detected capacity change from 0 to 8192 [ 1381.630564][T14029] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1381.701440][T14029] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1381.760426][T14029] REISERFS (device loop0): using ordered data mode [ 1381.767548][T14029] reiserfs: using flush barriers [ 1381.792545][T14029] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1381.818031][ T5778] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1381.828088][T14029] REISERFS (device loop0): checking transaction log (loop0) [ 1381.861544][T14029] REISERFS (device loop0): Using r5 hash to sort names [ 1381.881951][T14029] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1383.705030][T14050] netlink: 'syz.2.1455': attribute type 28 has an invalid length. [ 1391.738107][T14092] loop1: detected capacity change from 0 to 2048 [ 1391.895717][T14090] loop0: detected capacity change from 0 to 8192 [ 1391.971156][T14090] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1392.033608][T14096] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1392.046217][T14090] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1392.056729][T14090] REISERFS (device loop0): using ordered data mode [ 1392.064071][T14090] reiserfs: using flush barriers [ 1392.083149][T14090] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1392.145692][T14090] REISERFS (device loop0): checking transaction log (loop0) [ 1392.314546][T14090] REISERFS (device loop0): Using r5 hash to sort names [ 1392.561445][T14092] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1392.730188][T14090] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1392.773719][T14092] Remounting filesystem read-only [ 1392.992327][ T5778] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1393.029054][ T5778] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 1393.073044][ T5778] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 1393.088706][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1393.097696][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1393.114778][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1393.316866][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1466'. [ 1393.536804][ T5778] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 1393.587554][ T5778] NILFS (loop1): discard dirty block: blocknr=3, size=1024 [ 1393.630301][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1393.673731][ T5778] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 1393.708808][ T5778] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 1393.748939][ T5778] NILFS (loop1): discard dirty page: offset=268697600, ino=6 [ 1393.784982][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1393.794233][ T5778] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1393.801493][ T5778] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1393.809439][ T5778] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1393.819199][ T5778] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 1393.826004][ T5778] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 1393.833341][ T5778] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 1393.840888][ T5778] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 1393.848306][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1393.857288][ T5778] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 1393.864469][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1393.890671][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1393.938689][ T5778] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 1393.952902][ T5778] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1394.415711][T14109] loop1: detected capacity change from 0 to 32768 [ 1394.475683][T14109] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1394.547643][T14109] XFS (loop1): Ending clean mount [ 1394.559301][T14109] XFS (loop1): Quotacheck needed: Please wait. [ 1394.753615][T14109] XFS (loop1): Quotacheck: Done. [ 1395.502831][ T28] audit: type=1804 audit(2000000202.853:182): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1465" name="/newroot/369/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=1 errno=0 [ 1395.926762][ T5778] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1397.727036][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1473'. [ 1397.744391][T14144] loop0: detected capacity change from 0 to 128 [ 1398.153784][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1475'. [ 1398.171983][T14150] loop1: detected capacity change from 0 to 128 [ 1398.628367][T14159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1477'. [ 1399.414333][T14163] loop1: detected capacity change from 0 to 128 [ 1399.671039][T14168] loop0: detected capacity change from 0 to 256 [ 1399.711636][T14168] exfat: Deprecated parameter 'utf8' [ 1399.733064][T14168] exFAT-fs (loop0): bogus number of FAT structure [ 1399.777544][T14168] exFAT-fs (loop0): failed to read boot sector [ 1399.909244][T14168] exFAT-fs (loop0): failed to recognize exfat type [ 1401.871446][T14174] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1402.778631][T14179] loop0: detected capacity change from 0 to 8192 [ 1402.826273][T14179] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1402.849957][T14179] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1402.859580][T14179] REISERFS (device loop0): using ordered data mode [ 1402.866361][T14179] reiserfs: using flush barriers [ 1402.873477][T14179] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1402.892555][T14179] REISERFS (device loop0): checking transaction log (loop0) [ 1402.901451][T14179] REISERFS (device loop0): Using r5 hash to sort names [ 1402.908968][T14179] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1403.099599][T14186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1485'. [ 1404.311628][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 1404.329149][T14198] loop1: detected capacity change from 0 to 128 [ 1404.473900][T14196] loop0: detected capacity change from 0 to 8192 [ 1404.592925][T14196] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1404.709521][T14196] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1404.741475][T14196] REISERFS (device loop0): using ordered data mode [ 1404.748623][T14196] reiserfs: using flush barriers [ 1404.756568][T14196] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1404.789775][T14196] REISERFS (device loop0): checking transaction log (loop0) [ 1404.844764][T14196] REISERFS (device loop0): Using r5 hash to sort names [ 1404.852202][T14196] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1407.674430][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1491'. [ 1407.924050][T14218] loop1: detected capacity change from 0 to 8192 [ 1407.947867][T14218] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1407.972341][T14218] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1407.988176][T14218] REISERFS (device loop1): using ordered data mode [ 1407.995850][T14218] reiserfs: using flush barriers [ 1408.009326][T14218] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1408.071009][T14218] REISERFS (device loop1): checking transaction log (loop1) [ 1408.124355][T14218] REISERFS (device loop1): Using r5 hash to sort names [ 1408.131800][T14218] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1408.461322][T14227] netlink: 'syz.2.1494': attribute type 28 has an invalid length. [ 1409.267924][T14235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1495'. [ 1409.333357][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'. [ 1410.831036][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1498'. [ 1410.936542][T14249] loop1: detected capacity change from 0 to 128 [ 1412.253336][T14260] loop0: detected capacity change from 0 to 2048 [ 1412.364156][T14263] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1412.592109][T14260] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1412.650535][T14260] Remounting filesystem read-only [ 1412.735775][T14268] netlink: 'syz.2.1503': attribute type 28 has an invalid length. [ 1412.890940][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1413.202218][T14259] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1413.319505][T14259] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 1413.326325][T14259] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 1413.399916][T14259] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1413.454525][T14259] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1413.519137][T14259] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1413.550349][T14259] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 1413.582214][T14259] NILFS (loop0): discard dirty block: blocknr=3, size=1024 [ 1413.614537][T14259] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1413.634499][T14259] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 1413.656075][T14259] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 1413.677671][T14259] NILFS (loop0): discard dirty page: offset=268697600, ino=6 [ 1413.688459][T14259] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1413.709200][T14259] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 1413.727604][T14259] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 1413.743568][T14259] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 1413.773322][T14259] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1413.783589][T14259] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 1413.810457][T14259] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 1413.830509][T14259] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1413.856038][T14259] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1413.931605][T14259] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 1413.965488][T14259] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1414.032729][T14259] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1414.041905][T14259] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 1414.182647][T14259] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1414.619022][T14276] loop1: detected capacity change from 0 to 8192 [ 1414.724443][T14276] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1414.780216][T14276] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1414.789719][T14276] REISERFS (device loop1): using ordered data mode [ 1414.797889][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'. [ 1414.797991][T14276] reiserfs: using flush barriers [ 1414.843704][T14276] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1414.861017][T14276] REISERFS (device loop1): checking transaction log (loop1) [ 1414.882699][T14276] REISERFS (device loop1): Using r5 hash to sort names [ 1414.898087][T14276] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1415.014381][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 1416.138830][T14296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1511'. [ 1416.225812][T14298] netlink: 'syz.0.1510': attribute type 4 has an invalid length. [ 1416.400259][T14299] netlink: 'syz.0.1510': attribute type 4 has an invalid length. [ 1417.693598][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1513'. [ 1417.969061][T14307] netlink: 'syz.1.1512': attribute type 28 has an invalid length. [ 1419.962450][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1516'. [ 1420.096810][T14317] loop1: detected capacity change from 0 to 2048 [ 1420.173804][T14320] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1420.267915][T14317] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1420.299503][T14317] Remounting filesystem read-only [ 1420.483408][T14317] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1420.522558][T14317] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 1420.555295][T14317] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 1420.576999][T14317] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1420.623517][T14317] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1420.654983][T14317] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1420.683255][T14317] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 1420.709110][T14317] NILFS (loop1): discard dirty block: blocknr=3, size=1024 [ 1420.776366][T14317] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1420.842680][T14317] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 1420.902846][T14317] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 1420.934802][T14317] NILFS (loop1): discard dirty page: offset=268697600, ino=6 [ 1420.976319][T14317] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1421.022201][T14317] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1421.067467][T14317] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1421.093249][T14317] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1421.125680][T14317] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 1421.182362][T14317] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 1421.211680][T14317] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 1421.244205][T14317] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 1421.276695][T14317] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1421.296504][T14317] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 1421.303957][T14317] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1421.313103][T14317] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1421.322229][T14317] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 1421.329588][T14317] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1423.602150][T14335] vxcan1 speed is unknown, defaulting to 1000 [ 1425.021012][T14341] loop1: detected capacity change from 0 to 16 [ 1425.666900][T14341] erofs: (device loop1): mounted with root inode @ nid 36. [ 1425.713621][T14336] syz.1.1523: attempt to access beyond end of device [ 1425.713621][T14336] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1425.765947][T14336] syz.1.1523: attempt to access beyond end of device [ 1425.765947][T14336] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1425.783856][T14336] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1425.796373][ T28] audit: type=1800 audit(2000000231.479:183): pid=14336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1523" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1425.874349][T14339] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1425.886537][T14339] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1426.408742][T14353] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14353] [ 1427.187716][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1525'. [ 1427.278350][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 1427.293146][T14358] loop1: detected capacity change from 0 to 128 [ 1427.907422][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1528'. [ 1430.725774][T14388] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1532'. [ 1431.252394][T14391] overlayfs: missing 'lowerdir' [ 1437.403778][T14428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1540'. [ 1437.952741][T14434] loop1: detected capacity change from 0 to 32768 [ 1438.598077][T14445] read_mapping_page failed! [ 1438.603075][T14445] ERROR: (device loop1): txCommit: [ 1438.603075][T14445] [ 1439.513846][ T3481] read_mapping_page failed! [ 1439.547491][ T3481] ERROR: (device loop1): txCommit: [ 1439.547491][ T3481] [ 1439.555440][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1545'. [ 1439.617754][ T3481] jfs_write_inode: jfs_commit_inode failed! [ 1440.620303][T14458] Invalid ELF header type: 3 != 1 [ 1445.080425][T14495] siw: device registration error -23 [ 1445.097013][T14495] smc: removing ib device syz2 [ 1447.494974][T14510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1558'. [ 1447.557015][T14510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 1447.594941][T14511] overlayfs: failed to clone upperpath [ 1447.618653][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 1448.370222][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1563'. [ 1452.023002][T14527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 1452.062187][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1567'. [ 1453.057523][ T49] hsr_slave_0: left promiscuous mode [ 1453.091044][ T49] hsr_slave_1: left promiscuous mode [ 1453.097401][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1453.121720][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.170317][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.182368][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.212416][ T49] bridge_slave_1: left allmulticast mode [ 1453.227206][ T49] bridge_slave_1: left promiscuous mode [ 1453.243270][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.274941][ T49] bridge_slave_0: left allmulticast mode [ 1453.280686][ T49] bridge_slave_0: left promiscuous mode [ 1453.307036][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.387107][ T49] veth1_macvtap: left promiscuous mode [ 1453.392957][ T49] veth0_macvtap: left promiscuous mode [ 1453.406181][ T49] veth1_vlan: left promiscuous mode [ 1453.419267][ T49] veth0_vlan: left promiscuous mode [ 1453.962601][ T49] team0 (unregistering): Port device bridge1 removed [ 1458.564024][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1458.649198][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1458.734500][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.822915][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1459.509572][ T49] bond0 (unregistering): Released all slaves [ 1459.669770][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 1459.669824][T14576] lo speed is unknown, defaulting to 1000 [ 1459.796080][T14576] lo speed is unknown, defaulting to 1000 [ 1459.803834][T14576] lo speed is unknown, defaulting to 1000 [ 1459.816325][T14576] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1459.837447][T14576] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1459.879552][T14576] lo speed is unknown, defaulting to 1000 [ 1459.890465][T14576] lo speed is unknown, defaulting to 1000 [ 1459.898388][T14576] lo speed is unknown, defaulting to 1000 [ 1459.905822][T14576] lo speed is unknown, defaulting to 1000 [ 1460.082158][T14593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 1463.075919][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1578'. [ 1463.124253][T14595] overlayfs: failed to clone upperpath [ 1463.157609][T14595] loop1: detected capacity change from 0 to 256 [ 1463.165400][T14595] FAT-fs (loop1): Unrecognized mount option "nonumtailá=0" or missing value [ 1463.241353][T14594] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1463.617487][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1580'. [ 1464.153445][ T9468] IPVS: starting estimator thread 0... [ 1464.246097][T14605] IPVS: using max 18 ests per chain, 43200 per kthread [ 1464.599453][T14609] loop1: detected capacity change from 0 to 8192 [ 1464.644437][T14609] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1464.670373][T14609] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1465.999634][T14613] lo speed is unknown, defaulting to 1000 [ 1466.105344][T14609] REISERFS (device loop1): using ordered data mode [ 1466.167697][T14609] reiserfs: using flush barriers [ 1466.193577][T14609] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1466.213002][ T49] IPVS: stop unused estimator thread 0... [ 1466.222229][T14609] REISERFS (device loop1): checking transaction log (loop1) [ 1466.260361][T14609] REISERFS (device loop1): Using r5 hash to sort names [ 1468.837313][T14609] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1469.042555][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1587'. [ 1471.018265][T14640] netlink: 'syz.0.1591': attribute type 28 has an invalid length. [ 1471.374946][T14642] netlink: 'syz.2.1592': attribute type 28 has an invalid length. [ 1471.497260][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1590'. [ 1473.753012][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 1473.964527][T14657] loop1: detected capacity change from 0 to 2048 [ 1474.039823][T14658] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1474.159483][T14657] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1474.192429][T14657] Remounting filesystem read-only [ 1474.249956][T14657] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1474.282225][T14657] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 1474.289025][T14657] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 1474.341213][T14657] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1474.400499][T14657] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1474.427406][T14657] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1474.799264][T14664] lo speed is unknown, defaulting to 1000 [ 1475.191878][T14657] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 1475.198689][T14657] NILFS (loop1): discard dirty block: blocknr=3, size=1024 [ 1475.254805][T14657] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1475.279568][T14657] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 1475.287754][T14657] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 1475.295302][T14657] NILFS (loop1): discard dirty page: offset=268697600, ino=6 [ 1475.302843][T14657] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1475.312010][T14657] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1475.363715][T14657] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1475.405092][T14657] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1475.437186][T14657] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 1475.473235][T14657] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 1475.535913][T14657] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 1475.552285][T14657] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 1475.559774][T14657] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1475.575697][T14657] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 1475.582946][T14657] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1475.592347][T14657] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1475.602089][T14657] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 1475.610282][T14657] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1476.081193][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1599'. [ 1478.819104][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.613710][T14680] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1601'. [ 1482.544878][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 1482.554339][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'. [ 1482.576709][T14687] netlink: 'syz.0.1602': attribute type 11 has an invalid length. [ 1482.585774][T14687] netlink: 'syz.0.1602': attribute type 13 has an invalid length. [ 1482.610256][T14690] bridge0: entered allmulticast mode [ 1485.738890][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1603'. [ 1486.196451][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1613'. [ 1488.123881][T14714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'. [ 1489.913641][T14730] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1612'. [ 1490.048034][T14734] netlink: 'syz.5.1615': attribute type 4 has an invalid length. [ 1490.055970][T14734] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1615'. [ 1490.073516][T14734] .`: renamed from bond0 (while UP) [ 1490.731532][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 1494.478417][T14754] netlink: 'syz.1.1620': attribute type 24 has an invalid length. [ 1496.489180][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1628'. [ 1496.830424][T14779] netlink: 'syz.5.1626': attribute type 4 has an invalid length. [ 1497.249626][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 1497.260730][T14785] netlink: 'syz.5.1626': attribute type 4 has an invalid length. [ 1499.280221][T14798] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1632'. [ 1500.261700][T14805] lo speed is unknown, defaulting to 1000 [ 1503.688199][T14823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1638'. [ 1505.156007][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1640'. [ 1505.559480][T14847] fuse: Bad value for 'fd' [ 1506.007813][T14843] fuse: Bad value for 'fd' [ 1506.530976][T14851] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1643'. [ 1507.667941][T14865] trusted_key: encrypted_key: master key parameter 'defaul' is invalid [ 1507.836568][T14865] netlink: 'syz.5.1648': attribute type 5 has an invalid length. [ 1510.651036][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1653'. [ 1510.750585][T14897] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1656'. [ 1511.150776][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'. [ 1512.240872][T14914] netlink: 'syz.1.1661': attribute type 10 has an invalid length. [ 1512.248912][T14914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1661'. [ 1512.786658][T14917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'. [ 1515.290927][T14936] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1666'. [ 1515.581844][T14940] netlink: 'syz.0.1667': attribute type 28 has an invalid length. [ 1516.605789][T14946] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1670'. [ 1518.702724][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1673'. [ 1518.833885][T14965] netlink: 'syz.2.1672': attribute type 4 has an invalid length. [ 1519.020116][ T8579] lo speed is unknown, defaulting to 1000 [ 1519.053883][T14968] netlink: 'syz.2.1672': attribute type 4 has an invalid length. [ 1519.116304][T11511] lo speed is unknown, defaulting to 1000 [ 1523.885059][T14984] netlink: 'syz.1.1677': attribute type 28 has an invalid length. [ 1524.734909][T14987] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1678'. [ 1525.311731][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1680'. [ 1526.318821][T14998] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1682'. [ 1527.712481][T15009] lo speed is unknown, defaulting to 1000 [ 1530.189391][T15026] netlink: 'syz.2.1687': attribute type 28 has an invalid length. [ 1532.638132][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 1533.437196][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 1533.845838][T15030] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1690'. [ 1533.936282][T15042] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1694'. [ 1535.411131][T15063] netlink: 'syz.0.1700': attribute type 28 has an invalid length. [ 1538.273946][T15074] netlink: 'syz.0.1701': attribute type 28 has an invalid length. [ 1538.635079][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1702'. [ 1538.749087][T15070] Process accounting resumed [ 1539.005422][T15080] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1704'. [ 1539.966955][T15085] raw_sendmsg: syz.0.1705 forgot to set AF_INET. Fix it! [ 1541.498437][T15091] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1707'. [ 1542.116515][T15101] netlink: 'syz.5.1709': attribute type 28 has an invalid length. [ 1543.641112][T15114] netlink: 'syz.0.1713': attribute type 28 has an invalid length. [ 1543.758697][T15116] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1714'. [ 1544.991453][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.045527][T15128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 1545.659608][T15133] x_tables: duplicate underflow at hook 1 [ 1545.676049][T15133] vlan2: entered allmulticast mode [ 1545.681283][T15133] macsec0: entered allmulticast mode [ 1545.687198][T15133] veth1_macvtap: entered allmulticast mode [ 1546.859205][T15146] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1721'. [ 1547.168763][T15152] netlink: 'syz.0.1720': attribute type 28 has an invalid length. [ 1548.606109][T15164] netlink: 'syz.0.1731': attribute type 28 has an invalid length. [ 1549.128532][T15169] netlink: 'syz.5.1724': attribute type 28 has an invalid length. [ 1549.220219][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1725'. [ 1549.603987][T15179] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1727'. [ 1550.447463][T15176] lo speed is unknown, defaulting to 1000 [ 1553.236064][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 1554.252532][T15198] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1733'. [ 1559.407405][T15222] netlink: 'syz.2.1736': attribute type 28 has an invalid length. [ 1560.187629][T15229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1738'. [ 1561.011933][T15227] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1740'. [ 1561.907289][T15242] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1744'. [ 1562.230414][T15253] netlink: 'syz.5.1746': attribute type 28 has an invalid length. [ 1563.336809][T15266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1749'. [ 1563.440665][T15267] netlink: 'syz.5.1748': attribute type 28 has an invalid length. [ 1564.359006][T15274] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1753'. [ 1565.240326][T15286] netlink: 'syz.0.1756': attribute type 28 has an invalid length. [ 1566.540159][T15296] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1758'. [ 1567.372017][T15313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1763'. [ 1568.615327][T15319] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1766'. [ 1569.129149][T15324] netlink: 'syz.5.1767': attribute type 28 has an invalid length. [ 1569.974399][T15335] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1770'. [ 1570.213288][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 1570.879840][T15338] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1772'. [ 1570.955902][ T28] audit: type=1326 audit(2000000367.310:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15344 comm="syz.0.1774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d73f9cdd9 code=0x0 [ 1571.112197][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 1572.881749][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'. [ 1573.258823][T15372] netlink: 'syz.5.1778': attribute type 28 has an invalid length. [ 1573.724263][T15375] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1779'. [ 1574.103429][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1782'. [ 1575.429990][T15391] netlink: 'syz.0.1784': attribute type 28 has an invalid length. [ 1576.116944][T15393] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1785'. [ 1576.309583][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'. [ 1576.604155][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 1577.806816][ T966] libceph: connect (1)[c::]:6789 error -101 [ 1577.812993][ T966] libceph: mon0 (1)[c::]:6789 connect error [ 1577.849521][T15405] ceph: No mds server is up or the cluster is laggy [ 1577.867342][T15407] bridge0: left allmulticast mode [ 1577.976615][T15415] netlink: 'syz.2.1790': attribute type 28 has an invalid length. [ 1578.535424][T15407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1579.093226][T15426] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1794'. [ 1579.207755][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 1579.350200][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1795'. [ 1580.678116][T15441] netlink: 'syz.0.1796': attribute type 28 has an invalid length. [ 1581.422751][T15440] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1806'. [ 1581.667592][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1797'. [ 1583.634520][T15454] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1799'. [ 1585.708844][T15464] netlink: 'syz.1.1800': attribute type 28 has an invalid length. [ 1586.552538][T15471] mac80211_hwsim hwsim3 wlan0: Caught tx_queue_len zero misconfig [ 1586.650625][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 1587.208481][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1804'. [ 1587.663335][T15483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1808'. [ 1587.762225][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 1588.506299][T15487] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1809'. [ 1588.876776][T15494] netlink: 'syz.2.1811': attribute type 28 has an invalid length. [ 1589.730719][T15499] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1812'. [ 1590.092054][ T28] audit: type=1326 audit(2000000385.222:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290eb9cdd9 code=0x7ffc0000 [ 1590.188681][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 1590.904816][ T28] audit: type=1326 audit(2000000385.222:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290eb9cdd9 code=0x7ffc0000 [ 1590.939610][ T28] audit: type=1326 audit(2000000385.222:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f290eb9cdd9 code=0x7ffc0000 [ 1590.977585][ T28] audit: type=1326 audit(2000000385.222:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290eb9cdd9 code=0x7ffc0000 [ 1591.227158][ T28] audit: type=1326 audit(2000000385.222:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290eb9cdd9 code=0x7ffc0000 [ 1591.741607][ T28] audit: type=1326 audit(2000000385.671:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f290eb9cdd9 code=0x7ffc0000 [ 1592.164623][ T28] audit: type=1326 audit(2000000385.671:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290eb9cdd9 code=0x7ffc0000 [ 1592.196086][T15519] lo speed is unknown, defaulting to 1000 [ 1593.455355][ T28] audit: type=1326 audit(2000000385.671:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290eb9cdd9 code=0x7ffc0000 [ 1593.612379][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 1593.632902][ T28] audit: type=1326 audit(2000000385.727:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f290eb9cdd9 code=0x7ffc0000 [ 1593.770886][ T28] audit: type=1326 audit(2000000385.970:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290eb9cdd9 code=0x7ffc0000 [ 1595.198427][T15541] netlink: 'syz.2.1821': attribute type 28 has an invalid length. [ 1595.675704][T15545] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1822'. [ 1595.922115][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1823'. [ 1596.858747][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 1598.009651][T15568] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1828'. [ 1599.039501][T15571] ceph: No mds server is up or the cluster is laggy [ 1599.159595][T11750] libceph: connect (1)[c::]:6789 error -101 [ 1599.165901][T15573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1599.182669][T11750] libceph: mon0 (1)[c::]:6789 connect error [ 1599.578547][T15579] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by " [ 1601.360320][T15590] netlink: 'syz.2.1831': attribute type 28 has an invalid length. [ 1602.007626][T15599] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1834'. [ 1602.018970][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'. [ 1602.993951][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1836'. [ 1603.219812][T15618] overlayfs: failed to clone upperpath [ 1603.661400][T15624] netlink: 'syz.2.1842': attribute type 28 has an invalid length. [ 1605.705785][T15634] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1846'. [ 1609.770143][T15661] netlink: 'syz.2.1853': attribute type 28 has an invalid length. [ 1611.827504][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.010675][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1854'. [ 1613.192851][T15676] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1857'. [ 1613.695444][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1859'. [ 1614.037056][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 1614.785808][T15695] overlayfs: failed to clone upperpath [ 1616.447747][T15705] netlink: 'syz.1.1864': attribute type 28 has an invalid length. [ 1616.459553][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 1617.985285][T15727] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1871'. [ 1618.297887][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 1618.489827][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 1619.397979][T15745] netlink: 'syz.0.1875': attribute type 28 has an invalid length. [ 1622.379887][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 1622.642334][T15778] netlink: 'syz.5.1885': attribute type 28 has an invalid length. [ 1623.536085][T15790] netlink: 'syz.2.1886': attribute type 28 has an invalid length. [ 1629.687528][T15822] netlink: 'syz.2.1895': attribute type 28 has an invalid length. [ 1629.867784][T15824] netlink: 'syz.0.1896': attribute type 28 has an invalid length. [ 1631.101229][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1899'. [ 1631.718137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1634.688637][T15872] netlink: 'syz.0.1906': attribute type 28 has an invalid length. [ 1635.052137][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 1636.637795][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 1637.548137][T15896] tipc: Enabling of bearer rejected, failed to enable media [ 1639.237232][T15906] netlink: 'syz.1.1918': attribute type 28 has an invalid length. [ 1640.975388][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 1644.252605][T15959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1930'. [ 1644.364716][T15960] netlink: 'syz.1.1929': attribute type 28 has an invalid length. [ 1650.192549][T15999] netlink: 'syz.1.1940': attribute type 28 has an invalid length. [ 1650.487736][T16008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1941'. [ 1651.435764][T16018] netlink: 'syz.5.1944': attribute type 28 has an invalid length. [ 1656.299656][T16050] netlink: 'syz.0.1951': attribute type 28 has an invalid length. [ 1656.793054][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1952'. [ 1657.134560][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 1657.171059][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'. [ 1657.340471][T16059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1954'. [ 1657.724875][T16064] netlink: 'syz.1.1955': attribute type 28 has an invalid length. [ 1660.570431][T16089] netlink: 'syz.2.1961': attribute type 28 has an invalid length. [ 1661.878055][T16093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1963'. [ 1662.627299][T16101] netlink: 'syz.1.1964': attribute type 28 has an invalid length. [ 1666.541369][T16122] netlink: 'syz.2.1971': attribute type 28 has an invalid length. [ 1667.212367][T16127] lo speed is unknown, defaulting to 1000 [ 1670.257410][T16152] netlink: 'syz.5.1976': attribute type 28 has an invalid length. [ 1673.382551][T16177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'. [ 1675.575882][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.274676][T16205] netlink: 'syz.5.1989': attribute type 28 has an invalid length. [ 1680.816173][T16235] netlink: 'syz.0.1997': attribute type 28 has an invalid length. [ 1682.656320][T16247] netlink: 'syz.0.2000': attribute type 28 has an invalid length. [ 1684.153005][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'. [ 1686.285714][T16280] netlink: 'syz.0.2007': attribute type 28 has an invalid length. [ 1687.525744][T16289] netlink: 'syz.0.2012': attribute type 28 has an invalid length. [ 1689.918419][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 1690.030163][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'. [ 1690.356125][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 1691.903610][T16326] netlink: 'syz.1.2022': attribute type 28 has an invalid length. [ 1692.273039][T16323] netlink: 'syz.5.2020': attribute type 28 has an invalid length. [ 1692.495932][T16330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2025'. [ 1697.460425][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1698.275615][T16370] netlink: 'syz.1.2034': attribute type 28 has an invalid length. [ 1705.381323][T16428] netlink: 'syz.1.2046': attribute type 28 has an invalid length. [ 1708.504422][T16446] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by " [ 1709.045591][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 1709.226687][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2055'. [ 1709.409917][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2056'. [ 1709.495195][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 1709.855324][T16456] bridge0: port 3(geneve1) entered blocking state [ 1709.862612][T16456] bridge0: port 3(geneve1) entered disabled state [ 1709.874775][T16456] geneve1: entered allmulticast mode [ 1709.892823][T16456] geneve1: entered promiscuous mode [ 1709.901293][T16456] bridge0: port 3(geneve1) entered blocking state [ 1709.907937][T16456] bridge0: port 3(geneve1) entered forwarding state [ 1712.959325][T16479] netlink: 'syz.0.2061': attribute type 28 has an invalid length. [ 1713.093774][T16481] netlink: 'syz.1.2062': attribute type 28 has an invalid length. [ 1714.265984][T16498] overlayfs: failed to resolve './file2': -2 [ 1715.887630][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2067'. [ 1716.643027][T16517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2068'. [ 1717.973266][T16526] netlink: 'syz.0.2073': attribute type 28 has an invalid length. [ 1718.661372][T16538] netlink: 'syz.0.2074': attribute type 28 has an invalid length. [ 1719.520607][T16545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'. [ 1721.853400][T16562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.863093][T16562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.904327][T16562] bridge0: port 3(geneve1) entered disabled state [ 1723.321622][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2081'. [ 1723.573812][T16570] netlink: 'syz.5.2082': attribute type 28 has an invalid length. [ 1725.978355][T16582] netlink: 'syz.0.2085': attribute type 28 has an invalid length. [ 1726.746198][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2086'. [ 1732.756405][T16620] netlink: 'syz.1.2095': attribute type 28 has an invalid length. [ 1733.906690][T16639] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2103'. [ 1734.666130][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2104'. [ 1735.380684][T16649] netlink: 'syz.1.2106': attribute type 28 has an invalid length. [ 1736.226375][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 1736.269039][T16658] bridge0: port 3(geneve1) entered blocking state [ 1736.276241][T16658] bridge0: port 3(geneve1) entered disabled state [ 1736.286187][T16658] geneve1: entered allmulticast mode [ 1736.298546][T16658] geneve1: entered promiscuous mode [ 1737.640159][T16664] netlink: 'syz.0.2110': attribute type 28 has an invalid length. [ 1738.880062][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'. [ 1739.072187][T16681] netlink: 'syz.5.2115': attribute type 28 has an invalid length. [ 1740.418385][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 1740.441703][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2117'. [ 1741.176595][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1741.229978][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2118'. [ 1741.263439][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2118'. [ 1741.476836][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'. [ 1741.595870][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2118'. [ 1741.750875][T16696] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.760008][T16696] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.769012][T16696] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.778521][T16696] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.794012][T16701] bridge0: port 1(geneve1) entered blocking state [ 1741.801528][T16701] bridge0: port 1(geneve1) entered disabled state [ 1741.809228][T16701] geneve1: entered allmulticast mode [ 1741.823495][T16701] geneve1: entered promiscuous mode [ 1741.836237][T16701] bridge0: port 1(geneve1) entered blocking state [ 1741.842864][T16701] bridge0: port 1(geneve1) entered forwarding state [ 1742.880609][T16710] netlink: 'syz.0.2120': attribute type 28 has an invalid length. [ 1744.455375][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2123'. [ 1745.428317][T16732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'. [ 1745.532435][T16731] netlink: 'syz.5.2125': attribute type 28 has an invalid length. [ 1745.619341][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 1746.842178][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'. [ 1747.036650][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 1747.586202][T16758] netlink: 'syz.0.2131': attribute type 28 has an invalid length. [ 1750.209259][T16773] netlink: 'syz.1.2136': attribute type 28 has an invalid length. [ 1750.220602][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 1751.047297][T16783] netlink: 'syz.1.2138': attribute type 28 has an invalid length. [ 1752.137459][T16788] xt_recent: Unsupported userspace flags (000000de) [ 1752.499044][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 1753.662927][T16803] netlink: 'syz.0.2142': attribute type 28 has an invalid length. [ 1755.118060][T16811] netlink: 'syz.1.2147': attribute type 28 has an invalid length. [ 1756.973318][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 1756.973333][ T28] audit: type=1326 audit(2000000540.826:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.2146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d73f9cdd9 code=0x7ffc0000 [ 1757.706046][ T28] audit: type=1326 audit(2000000540.826:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.2146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d73f9cdd9 code=0x7ffc0000 [ 1757.772574][ T28] audit: type=1326 audit(2000000540.826:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.2146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d73f9cdd9 code=0x7ffc0000 [ 1757.823410][ T28] audit: type=1326 audit(2000000540.826:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.2146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d73f9cdd9 code=0x7ffc0000 [ 1757.876791][ T28] audit: type=1326 audit(2000000540.826:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.2146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1d73f9cdd9 code=0x7ffc0000 [ 1758.049892][ T28] audit: type=1326 audit(2000000540.845:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.0.2146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1d73f5d60e code=0x7ffc0000 [ 1758.136169][T16827] netlink: 'syz.1.2149': attribute type 28 has an invalid length. [ 1758.302083][ T28] audit: type=1326 audit(2000000540.976:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.2146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d73f9cb42 code=0x7ffc0000 [ 1758.538645][ T28] audit: type=1326 audit(2000000540.976:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.2146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d73f9cb42 code=0x7ffc0000 [ 1758.807715][ T28] audit: type=1326 audit(2000000540.976:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.2146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d73f9cdd9 code=0x7ffc0000 [ 1758.853276][ T28] audit: type=1326 audit(2000000540.976:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.2146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d73f9cb42 code=0x7ffc0000 [ 1759.348056][T16833] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1759.430129][T16838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'. [ 1760.479183][T16850] netlink: 'syz.0.2154': attribute type 28 has an invalid length. [ 1763.285489][T16869] netlink: 'syz.2.2159': attribute type 28 has an invalid length. [ 1763.457351][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2160'. [ 1765.641920][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1766.347633][T16888] netlink: 'syz.2.2164': attribute type 28 has an invalid length. [ 1773.986746][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 1774.470651][T16944] netlink: 'syz.5.2175': attribute type 28 has an invalid length. [ 1774.867429][ C1] hrtimer: interrupt took 48184 ns [ 1775.360788][T16950] netlink: 'syz.2.2178': attribute type 10 has an invalid length. [ 1775.506250][T16957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2180'. [ 1777.304085][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1779.750709][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2184'. [ 1779.841866][T16976] fuse: Bad value for 'fd' [ 1783.117197][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1784.257264][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'. [ 1785.462329][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'. [ 1787.292171][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'. [ 1787.997712][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2198'. [ 1788.990540][T17051] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2199'. [ 1789.465957][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 1790.411096][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 1792.165099][T17074] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1792.921129][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 1793.521553][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 1794.572742][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 1795.108966][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2215'. [ 1795.825195][T17106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2214'. [ 1796.880888][ C0] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.187 [ 1797.403399][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'. [ 1797.572159][T13555] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1798.649883][T17138] netlink: 'syz.0.2224': attribute type 12 has an invalid length. [ 1799.061919][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'. [ 1799.101571][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2226'. [ 1799.125379][T13750] wlan1: Trigger new scan to find an IBSS to join [ 1799.216677][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 1799.274657][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1799.284855][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1800.431600][T13750] wlan1: Creating new IBSS network, BSSID 2e:10:8d:c5:64:13 [ 1800.727812][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1803.205644][T17181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 1804.226239][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2239'. [ 1804.889133][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2240'. [ 1806.363723][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 1806.819392][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1806.964284][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 1806.964299][ T28] audit: type=1326 audit(2000000588.178:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.2.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1807.015792][ T28] audit: type=1326 audit(2000000588.178:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.2.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1807.054658][ T28] audit: type=1326 audit(2000000588.215:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.2.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1807.084201][ T28] audit: type=1326 audit(2000000588.215:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.2.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1807.110206][ T28] audit: type=1326 audit(2000000588.215:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.2.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1807.150107][ T28] audit: type=1326 audit(2000000588.225:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.2.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1807.214942][ T28] audit: type=1326 audit(2000000588.225:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.2.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1807.268435][ T28] audit: type=1326 audit(2000000588.225:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.2.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1807.307459][ T28] audit: type=1326 audit(2000000588.225:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.2.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1807.342444][ T28] audit: type=1326 audit(2000000588.225:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17212 comm="syz.2.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1808.446287][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2248'. [ 1808.562712][T17238] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1811.560830][T17257] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2256'. [ 1811.755919][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1814.353722][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 1814.399360][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2259'. [ 1817.151636][T17299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2265'. [ 1818.624587][T17310] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1819.810432][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 1820.541337][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'. [ 1823.659327][T17341] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2275'. [ 1827.183233][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'. [ 1827.517979][T17359] netlink: 'syz.0.2280': attribute type 39 has an invalid length. [ 1830.235036][T17399] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1830.830313][T17407] fuse: Unknown parameter '0x0000000000000006' [ 1830.841849][T17407] 9pnet_fd: Insufficient options for proto=fd [ 1832.593753][ T3481] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1833.853531][T17427] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1834.542625][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 1836.078623][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2302'. [ 1836.864420][T17467] smc: net device vcan0 applied user defined pnetid SYZ1 [ 1836.878245][T17467] smc: net device vcan0 erased user defined pnetid SYZ1 [ 1838.171299][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2305'. [ 1840.210453][T17490] veth1_to_team: Caught tx_queue_len zero misconfig [ 1840.717986][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 1848.770082][T17528] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12227] was attempted by " [ 1851.193842][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2321'. [ 1856.245432][T17567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1856.378987][T17566] ceph: No mds server is up or the cluster is laggy [ 1859.034937][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2328'. [ 1860.748979][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'. [ 1862.471428][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 1864.867435][T17636] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2340'. [ 1864.918221][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 1866.297502][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 1867.794547][ T7718] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1868.263538][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.187 [ 1868.273696][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.187 [ 1869.579549][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 1869.606988][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 1869.994637][T17664] wlan0 speed is unknown, defaulting to 1000 [ 1870.006550][T17664] wlan0 speed is unknown, defaulting to 1000 [ 1870.063784][T17664] wlan0 speed is unknown, defaulting to 1000 [ 1870.257515][T17664] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1870.291166][T17664] wlan0 speed is unknown, defaulting to 1000 [ 1870.298870][T17664] wlan0 speed is unknown, defaulting to 1000 [ 1870.306607][T17664] wlan0 speed is unknown, defaulting to 1000 [ 1870.314411][T17664] wlan0 speed is unknown, defaulting to 1000 [ 1871.533572][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2349'. [ 1871.617231][T17674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2348'. [ 1871.928353][T13555] Bluetooth: hci1: Unable to find connection with handle 0x00c8 [ 1872.877509][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1873.259992][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2353'. [ 1873.315856][T17699] netlink: 'syz.1.2355': attribute type 4 has an invalid length. [ 1873.324143][T17699] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2355'. [ 1873.399734][T17702] overlayfs: failed to clone lowerpath [ 1873.692561][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'. [ 1874.093523][T17711] (syz.5.2360,17711,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1874.409262][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'. [ 1874.888237][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2362'. [ 1875.095261][T17717] overlayfs: failed to clone lowerpath [ 1875.742929][T17717] overlayfs: failed to clone upperpath [ 1877.638723][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 1878.213284][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2372'. [ 1879.353485][T17757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 1880.214584][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 1881.675979][T17767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 1881.965201][T17782] pim6reg: entered allmulticast mode [ 1882.215047][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'. [ 1882.355456][T17788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2380'. [ 1882.367137][T17788] pim6reg: left allmulticast mode [ 1883.566103][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1885.019274][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1885.127550][T17803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2385'. [ 1886.200665][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2387'. [ 1887.740740][T17819] Cannot find add_set index 0 as target [ 1887.979415][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2392'. [ 1888.018305][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 1888.173861][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2393'. [ 1889.140091][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2397'. [ 1891.565921][T17864] overlayfs: failed to clone upperpath [ 1891.881365][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1892.328658][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2404'. [ 1892.497865][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2405'. [ 1893.200168][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2409'. [ 1894.063890][T17896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 1895.751566][T17912] trusted_key: encrypted_key: key user:syz not found [ 1895.761672][T17912] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2415'. [ 1896.475282][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 1896.872644][T17925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2419'. [ 1898.012641][T17933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2421'. [ 1898.710824][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 1901.664995][T17946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'. [ 1902.398747][T13555] Bluetooth: hci4: Unable to find connection with handle 0x00c8 [ 1904.273970][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'. [ 1904.358876][T17973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2430'. [ 1905.022650][ T7718] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1905.738074][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2435'. [ 1905.842624][T17987] Error parsing options; rc = [-22] [ 1906.881494][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1907.516230][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 1907.656541][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2442'. [ 1908.080512][T18016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'. [ 1909.629218][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2446'. [ 1913.291546][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2448'. [ 1913.311013][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2447'. [ 1915.174463][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'. [ 1915.336998][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2454'. [ 1916.107490][T18056] pim6reg: entered allmulticast mode [ 1916.809643][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2457'. [ 1917.285335][T18058] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 1919.259441][T18089] netlink: 'syz.2.2462': attribute type 3 has an invalid length. [ 1919.267573][T18089] netlink: 'syz.2.2462': attribute type 1 has an invalid length. [ 1921.595504][T18105] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1922.626854][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2468'. [ 1923.030185][T18122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2474'. [ 1924.191550][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'. [ 1924.499798][T18133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2476'. [ 1924.707686][T18139] bridge0: entered promiscuous mode [ 1924.742426][T18139] bridge0: entered allmulticast mode [ 1925.197697][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2479'. [ 1925.711694][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.187 [ 1925.962241][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 1927.360856][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2488'. [ 1929.067207][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2493'. [ 1930.119516][T18207] 9pnet_fd: Insufficient options for proto=fd [ 1931.397586][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2500'. [ 1931.454081][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2500'. [ 1932.357192][T18227] Error parsing options; rc = [-22] [ 1933.204010][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'. [ 1935.070682][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 1936.759036][T18235] bridge0: port 1(geneve1) entered disabled state [ 1937.449867][T18235] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.459122][T18235] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.469870][T18235] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.478951][T18235] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.515964][T18235] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1937.525216][T18235] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1937.534248][T18235] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1937.543482][T18235] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1937.570622][T18252] bridge2: entered promiscuous mode [ 1937.576138][T18252] bridge2: entered allmulticast mode [ 1937.708294][T18264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2513'. [ 1938.055160][T18287] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1938.114307][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1938.249236][T18295] xt_cluster: node mask cannot exceed total number of nodes [ 1939.331409][T18295] ªªªªªª: renamed from vlan0 (while UP) [ 1939.389080][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'. [ 1939.840208][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2523'. [ 1939.918918][ T2971] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1940.742495][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 1943.963785][T18342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1944.088937][T18340] netlink: 'syz.0.2532': attribute type 10 has an invalid length. [ 1944.225441][T18342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1944.347686][T18340] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 1944.377863][T18340] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1947.482738][T18384] overlayfs: failed to clone lowerpath [ 1947.948353][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 1948.327567][T18391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1948.358451][T18391] netlink: 'syz.5.2546': attribute type 10 has an invalid length. [ 1948.421097][T18391] wlan1: mtu less than device minimum [ 1948.440774][T18391] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 1948.480022][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'. [ 1948.505934][T18391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1953.649995][T18445] xt_connbytes: Forcing CT accounting to be enabled [ 1954.325612][T18452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1954.352772][T18452] netlink: 'syz.2.2560': attribute type 10 has an invalid length. [ 1954.400239][T18452] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1954.415047][T18453] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1954.423916][T18453] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1954.432684][T18453] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1954.441826][T18453] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1954.453340][T18453] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.462283][T18453] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.471218][T18453] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.480144][T18453] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.694548][T18457] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1954.703493][T18457] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1954.712198][T18457] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1954.721140][T18457] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1954.774233][T18457] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.784026][T18457] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.793565][T18457] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.802966][T18457] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1954.826875][T18456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1954.890949][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2562'. [ 1955.830455][T18465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2563'. [ 1956.348813][T18473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'. [ 1956.510194][T18473] nbd: socks must be embedded in a SOCK_ITEM attr [ 1957.000644][ C0] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 1957.267793][T18487] overlayfs: failed to clone lowerpath [ 1958.631912][T18477] udevd[18477]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1958.664356][T18477] udevd[18477]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1959.762799][T18493] netlink: 'syz.2.2572': attribute type 2 has an invalid length. [ 1959.776970][T18493] netlink: 'syz.2.2572': attribute type 2 has an invalid length. [ 1960.303962][T18499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2573'. [ 1962.704305][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2578'. [ 1963.825561][ T8579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1963.835972][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1963.845983][ T9468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1963.903005][ T8579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1963.930820][T13750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1964.316031][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2585'. [ 1965.250887][ T6624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.559622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.568800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.577316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.585770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.779264][T18580] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1969.408938][T14395] net_ratelimit: 1 callbacks suppressed [ 1969.408958][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.825642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.834002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.842447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.404261][ T2971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.413423][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.422276][T11511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1971.395158][T18646] lo speed is unknown, defaulting to 1000 [ 1971.401224][T18646] lo speed is unknown, defaulting to 1000 [ 1971.407798][T18646] lo speed is unknown, defaulting to 1000 [ 1971.421571][T18646] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1971.465359][T18646] lo speed is unknown, defaulting to 1000 [ 1971.472375][T18646] lo speed is unknown, defaulting to 1000 [ 1971.479200][T18646] lo speed is unknown, defaulting to 1000 [ 1971.486134][T18646] lo speed is unknown, defaulting to 1000 [ 1971.504720][T18648] 9pnet_fd: Insufficient options for proto=fd [ 1973.152456][T14395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1973.437270][T18660] fuse: Bad value for 'fd' [ 1973.456537][T18660] overlay: ./file0 is not a directory [ 1974.095834][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 1974.798612][T18670] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2605'. [ 1974.807737][T18670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2605'. [ 1974.816731][T18670] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2605'. [ 1974.825843][T18670] netlink: 'syz.1.2605': attribute type 2 has an invalid length. [ 1974.834455][T18670] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2605'. [ 1974.959672][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 1974.959692][ T28] audit: type=1326 audit(2000000720.223:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18671 comm="syz.2.2606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1975.726947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.735537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.743997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.841678][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2604'. [ 1976.309917][ T28] audit: type=1326 audit(2000000720.223:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18671 comm="syz.2.2606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1976.447977][ T28] audit: type=1326 audit(2000000720.223:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18671 comm="syz.2.2606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1976.473057][ T28] audit: type=1326 audit(2000000720.223:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18671 comm="syz.2.2606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1976.542954][ T28] audit: type=1326 audit(2000000720.223:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18671 comm="syz.2.2606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1976.665634][ T28] audit: type=1326 audit(2000000720.223:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18671 comm="syz.2.2606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1976.789767][ T28] audit: type=1326 audit(2000000720.223:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18671 comm="syz.2.2606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1976.882244][ T28] audit: type=1326 audit(2000000720.223:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18671 comm="syz.2.2606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1976.974286][ T28] audit: type=1326 audit(2000000720.223:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18671 comm="syz.2.2606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1977.075242][ T28] audit: type=1326 audit(2000000720.223:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18671 comm="syz.2.2606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ca59cdd9 code=0x7ffc0000 [ 1977.139838][T18681] bond_slave_0: left promiscuous mode [ 1977.145990][T18681] bond_slave_1: left promiscuous mode [ 1977.152901][T18681] dummy0: left promiscuous mode [ 1977.158996][T18681] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 1977.747941][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2609'. [ 1977.776788][T18681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1977.794591][T18681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1977.885487][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'. [ 1979.024007][T18681] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.035446][T18681] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.044520][T18681] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.053593][T18681] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.490408][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'. [ 1980.197292][T18729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 1981.223684][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2616'. [ 1987.058389][T18773] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 1988.145275][T18779] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1988.306215][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 1989.448197][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'. [ 1993.009237][T18812] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1993.617105][T18821] siw: device registration error -23 [ 1993.726046][T18823] xt_connbytes: Forcing CT accounting to be enabled [ 1994.215176][T18825] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1994.562230][T18828] xt_hashlimit: max too large, truncated to 1048576 [ 1994.687593][T18837] overlayfs: missing 'lowerdir' [ 1996.327029][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2643'. [ 1997.877412][T18854] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2648'. [ 1998.265455][T18858] No such timeout policy "syz1" [ 1999.245719][T18864] Cannot find del_set index 2 as target [ 2000.164893][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2647'. [ 2000.460549][T18871] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2000.597670][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2652'. [ 2001.515946][T18884] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2658'. [ 2004.441780][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2004.942896][T18900] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2004.961766][T18901] 9p: Unknown access argument ŸT: -22 [ 2005.207928][T18905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2661'. [ 2005.217672][T18905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2661'. [ 2005.226864][T18905] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2661'. [ 2005.236014][T18905] netlink: 'syz.0.2661': attribute type 2 has an invalid length. [ 2005.243916][T18905] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2661'. [ 2007.639992][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'. [ 2007.963757][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2667'. [ 2008.472541][T18938] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2008.973641][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2672'. [ 2012.072506][T18971] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2012.137311][T18975] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 2012.140944][T18973] IPVS: stopping master sync thread 18975 ... [ 2012.246728][T18973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2685'. [ 2012.901296][T18994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2687'. [ 2012.928156][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2012.946493][T18994] IPv6: sit2: Disabled Multicast RS [ 2012.957737][T18994] sit2: entered allmulticast mode [ 2013.466878][T18995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2683'. [ 2014.314718][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 2015.023534][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 2016.750589][T19025] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 2016.770261][T19024] IPVS: stopping master sync thread 19025 ... [ 2016.788701][T19024] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2698'. [ 2017.139159][T19034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2700'. [ 2017.158089][T19037] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2017.405838][T19034] nbd: socks must be embedded in a SOCK_ITEM attr [ 2019.647114][T19032] udevd[19032]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2019.836926][T19062] futex_wake_op: syz.2.2709 tries to shift op by 144; fix this program [ 2021.004779][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2705'. [ 2021.030593][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2708'. [ 2021.457891][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2711'. [ 2021.994737][T19077] IPVS: Error connecting to the multicast addr [ 2022.034809][T19077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2712'. [ 2022.218127][T19033] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 2022.611256][T19085] wlan0 speed is unknown, defaulting to 1000 [ 2022.619834][T19085] lo speed is unknown, defaulting to 1000 [ 2022.721102][T19085] 9pnet_virtio: no channels available for device syz [ 2023.096007][T19094] bridge5: entered promiscuous mode [ 2023.101596][T19094] bridge5: entered allmulticast mode [ 2023.919980][T19033] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 2024.680388][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2721'. [ 2024.954175][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2724'. [ 2025.125792][T19126] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 2025.152392][T19126] CIFS mount error: No usable UNC path provided in device string! [ 2025.152392][T19126] [ 2025.162990][T19126] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2026.335044][T19132] netlink: 'syz.2.2732': attribute type 4 has an invalid length. [ 2026.469708][T11750] lo speed is unknown, defaulting to 1000 [ 2026.594482][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'. [ 2028.232551][T19033] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2028.446871][T19033] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 2028.854193][T19033] Bluetooth: hci1: unexpected event for opcode 0x0c24 [ 2029.083322][T19033] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 2029.216029][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 2029.516710][T19176] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2029.687587][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2745'. [ 2029.796674][T19033] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 2029.957258][T19033] Bluetooth: hci1: unexpected event for opcode 0x201c [ 2030.555858][T19033] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 2030.587102][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2749'. [ 2030.678310][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2756'. [ 2030.687382][T19033] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2030.788577][T19033] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 2032.012279][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 2032.060464][T19033] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 2032.399459][T19238] bridge4: entered promiscuous mode [ 2032.404935][T19238] bridge4: entered allmulticast mode [ 2033.654740][T19256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2781'. [ 2033.881353][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'. [ 2033.892289][T19033] Bluetooth: hci4: command 0x0406 tx timeout [ 2034.273388][T19267] tmpfs: Bad value for 'mpol' [ 2034.572507][T19033] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 2034.808436][T19282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2791'. [ 2034.887934][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2787'. [ 2035.737700][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'. [ 2035.811664][T19300] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2797'. [ 2036.337262][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2801'. [ 2036.579213][T19314] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2036.597897][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2803'. [ 2038.090160][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2816'. [ 2038.825240][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2817'. [ 2039.336958][T19353] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2040.091928][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2040.091945][ T28] audit: type=1326 audit(2000000781.318:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.0.2829" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d73f9cdd9 code=0x7ffc0000 [ 2040.128635][ T28] audit: type=1326 audit(2000000781.318:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.0.2829" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d73f9cdd9 code=0x7ffc0000 [ 2040.157389][ T28] audit: type=1326 audit(2000000781.355:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.0.2829" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d73f9cdd9 code=0x7ffc0000 [ 2040.190881][ T28] audit: type=1326 audit(2000000781.355:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.0.2829" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d73f9cdd9 code=0x7ffc0000 [ 2040.245371][ T28] audit: type=1326 audit(2000000781.411:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.0.2829" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1d73f5d60e code=0x7ffc0000 [ 2040.308716][ T28] audit: type=1326 audit(2000000781.411:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.0.2829" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1d73f5d60e code=0x7ffc0000 [ 2040.337825][ T28] audit: type=1326 audit(2000000781.439:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.0.2829" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f1d73f9cdd9 code=0x7ffc0000 [ 2040.366599][ T28] audit: type=1326 audit(2000000781.449:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.0.2829" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1d73f5d60e code=0x7ffc0000 [ 2040.395460][ T28] audit: type=1326 audit(2000000781.449:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.0.2829" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1d73f5d60e code=0x7ffc0000 [ 2040.439916][ T28] audit: type=1326 audit(2000000781.458:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.0.2829" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1d73f5d60e code=0x7ffc0000 [ 2041.309538][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'. [ 2041.395634][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2041.583768][T19402] erspan0: entered promiscuous mode [ 2041.600656][T19402] erspan0: entered allmulticast mode [ 2041.627723][T19033] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2041.800227][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 2042.025761][T19033] Bluetooth: hci4: unexpected event for opcode 0x040d [ 2042.614075][T19033] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 2042.735991][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2847'. [ 2044.060800][T19448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 2044.939781][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 2045.655723][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'. [ 2046.113479][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 2047.445109][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'. [ 2047.536597][T19520] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2881'. [ 2047.915583][T19528] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 65, id = 0 [ 2047.934340][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2884'. [ 2048.050843][T19525] bridge2: entered promiscuous mode [ 2048.081823][T19525] bridge2: entered allmulticast mode [ 2048.908826][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2887'. [ 2049.448978][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2890'. [ 2050.550644][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2892'. [ 2050.588644][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2891'. [ 2050.710517][T19033] Bluetooth: hci4: unexpected event for opcode 0x080c [ 2051.360228][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'. [ 2051.699134][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2903'. [ 2052.549154][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2907'. [ 2052.594866][T19596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2907'. [ 2052.659521][T19600] netlink: 'syz.1.2909': attribute type 21 has an invalid length. [ 2052.704956][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 2053.052393][T19616] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2053.141627][T19619] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2918'. [ 2053.398160][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2914'. [ 2053.877043][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2054.929423][T19646] __nla_validate_parse: 2 callbacks suppressed [ 2054.929446][T19646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2926'. [ 2054.950364][T19646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2926'. [ 2054.961583][T19646] netlink: 'syz.2.2926': attribute type 6 has an invalid length. [ 2055.377573][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2929'. [ 2055.667859][T19654] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2057.499183][T19674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2937'. [ 2057.809664][T19688] netlink: 'syz.5.2943': attribute type 4 has an invalid length. [ 2057.816814][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'. [ 2057.818033][T19688] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2943'. [ 2057.847611][T19690] netlink: 540 bytes leftover after parsing attributes in process `syz.1.2944'. [ 2057.863164][T19688] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 2057.949699][T19694] netlink: 'syz.0.2945': attribute type 6 has an invalid length. [ 2058.176319][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2949'. [ 2058.452438][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'. [ 2059.627088][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2958'. [ 2060.178936][T19757] IPVS: ip_vs_add_dest(): server weight less than zero [ 2060.644875][T19771] __nla_validate_parse: 2 callbacks suppressed [ 2060.644896][T19771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 2060.757484][T19775] ip6gre1: entered promiscuous mode [ 2061.436597][T19774] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2061.485504][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2061.495509][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2062.123431][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2981'. [ 2062.166989][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 2062.473650][T19806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2991'. [ 2062.680250][T19815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2996'. [ 2063.136169][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3002'. [ 2063.442189][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3007'. [ 2063.718162][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3008'. [ 2064.292905][T19859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'. [ 2064.477070][T19866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3015'. [ 2065.218136][T19033] Bluetooth: hci2: Malformed LE Event: 0x1d [ 2066.011605][T19940] gre1: entered promiscuous mode [ 2066.257758][T19948] __nla_validate_parse: 6 callbacks suppressed [ 2066.257776][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3050'. [ 2066.937924][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'. [ 2067.705598][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'. [ 2067.811682][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2067.822264][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2067.832401][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2068.344778][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3061'. [ 2068.374670][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 2068.592170][T19989] bridge0: port 1(bond0) entered blocking state [ 2068.598628][T19989] bridge0: port 1(bond0) entered disabled state [ 2068.616364][T19989] bond0: entered allmulticast mode [ 2068.621609][T19989] bond_slave_0: entered allmulticast mode [ 2068.643169][T19989] bond_slave_1: entered allmulticast mode [ 2068.652926][T19989] dummy0: entered allmulticast mode [ 2068.658708][T19989] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 2068.673261][T19989] bond0: entered promiscuous mode [ 2068.689759][T19989] bond_slave_0: entered promiscuous mode [ 2068.695719][T19989] bond_slave_1: entered promiscuous mode [ 2068.722261][T19989] dummy0: entered promiscuous mode [ 2068.730709][T19989] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 2068.741978][T19995] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3068'. [ 2069.109877][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3071'. [ 2069.350534][T19033] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 2069.441521][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2070.630221][T20039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3083'. [ 2070.909407][T20040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'. [ 2072.303239][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3097'. [ 2072.850083][T20075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3098'. [ 2074.037128][T20099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'. [ 2075.479213][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3115'. [ 2075.974364][T20112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3116'. [ 2076.225909][T20131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 2076.248561][T20131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 2076.272067][T20131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 2076.302852][T20131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 2076.348519][T20131] geneve4: entered promiscuous mode [ 2076.373754][T20131] geneve4: entered allmulticast mode [ 2076.512669][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'. [ 2077.492178][T20149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3129'. [ 2077.641366][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3127'. [ 2078.415094][T19033] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 2079.076786][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3137'. [ 2080.282674][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3139'. [ 2080.942873][T20204] netlink: 'syz.0.3148': attribute type 16 has an invalid length. [ 2080.973145][T20204] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3148'. [ 2081.108713][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3147'. [ 2082.284151][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3153'. [ 2082.774133][T19033] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2082.787013][T19033] Bluetooth: hci1: Injecting HCI hardware error event [ 2082.809062][T11193] Bluetooth: hci1: hardware error 0x00 [ 2083.789725][T20237] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.3160'. [ 2083.877392][T20242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3161'. [ 2084.603783][T20247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3165'. [ 2084.812662][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3169'. [ 2084.849536][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 2084.849554][ T28] audit: type=1326 audit(2000000823.204:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20261 comm="syz.2.3171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22ca59cdd9 code=0x0 [ 2084.994940][T11193] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2085.791360][T20277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3175'. [ 2086.400771][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3181'. [ 2087.151248][T20307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3187'. [ 2087.857241][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3190'. [ 2088.167851][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2088.177996][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2089.389274][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3202'. [ 2091.054766][T20395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 2092.895709][T20446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3246'. [ 2092.972494][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3248'. [ 2094.312966][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2095.027713][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'. [ 2096.407175][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3283'. [ 2097.381658][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3287'. [ 2097.726000][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3289'. [ 2099.356784][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2099.471250][T20577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3298'. [ 2099.935872][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3301'. [ 2102.451883][T20628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3316'. [ 2103.925983][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3329'. [ 2104.529563][T20658] tipc: Enabling of bearer rejected, failed to enable media [ 2104.642307][T20669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3334'. [ 2104.658625][T20669] vlan2: entered promiscuous mode [ 2104.663917][T20669] gretap0: entered promiscuous mode [ 2104.929328][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3332'. [ 2106.452506][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 2106.529618][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 2106.565530][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3347'. [ 2107.553583][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'. [ 2107.766615][T20731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 2108.791641][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3356'. [ 2109.854389][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3365'. [ 2110.196421][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 2111.307717][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3374'. [ 2111.648587][T20797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3378'. [ 2112.512125][T20817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3380'. [ 2113.523935][T20831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3390'. [ 2113.791657][T20841] netlink: 'syz.1.3395': attribute type 3 has an invalid length. [ 2113.799810][T20841] netlink: 'syz.1.3395': attribute type 1 has an invalid length. [ 2113.807965][T20841] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3395'. [ 2114.284032][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3396'. [ 2114.639945][T20852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3397'. [ 2115.325226][T20856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3399'. [ 2117.890527][T20890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3411'. [ 2118.103132][T20904] netlink: 'syz.1.3414': attribute type 32 has an invalid length. [ 2120.971857][T20947] xt_l2tp: v2 tid > 0xffff: 37482740 [ 2121.196572][T20959] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3434'. [ 2121.225780][T11193] Bluetooth: hci4: unexpected event 0x04 length: 245 > 10 [ 2121.241922][T20961] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3435'. [ 2123.832239][T11193] Bluetooth: hci4: command 0x0406 tx timeout [ 2127.843817][T21063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3474'. [ 2128.880300][T21071] 9pnet_fd: Insufficient options for proto=fd [ 2129.335527][T21087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3483'. [ 2129.795953][T21091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3484'. [ 2130.053360][T21098] tipc: Started in network mode [ 2130.058648][T21098] tipc: Node identity , cluster identity 4711 [ 2130.186633][T21100] 9pnet_fd: Insufficient options for proto=fd [ 2130.872363][T21105] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3489'. [ 2131.115918][T21115] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 2131.140974][T21115] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 2131.282642][T21118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'. [ 2132.846628][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3504'. [ 2134.189247][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 2134.527209][T21190] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3521'. [ 2134.544198][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3518'. [ 2134.810682][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3526'. [ 2135.092406][T21207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3528'. [ 2135.134051][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2135.873000][T21214] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3529'. [ 2135.901215][T21214] netlink: zone id is out of range [ 2135.912417][T21214] netlink: zone id is out of range [ 2135.924365][T21214] netlink: zone id is out of range [ 2135.934807][T21214] netlink: zone id is out of range [ 2135.951512][T21214] netlink: zone id is out of range [ 2135.961654][T21214] netlink: zone id is out of range [ 2135.973972][T21214] netlink: zone id is out of range [ 2135.988116][T21214] netlink: zone id is out of range [ 2136.008699][T21214] netlink: zone id is out of range [ 2136.025370][T21214] netlink: zone id is out of range [ 2136.042468][T21220] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3532'. [ 2136.123441][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3534'. [ 2136.443246][T21237] vlan2: entered allmulticast mode [ 2136.453928][T21237] veth0_to_bond: entered allmulticast mode [ 2137.191153][T21245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'. [ 2138.118789][T21269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3552'. [ 2140.111922][T21310] __nla_validate_parse: 1 callbacks suppressed [ 2140.111966][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'. [ 2142.831530][T21359] batadv_slave_0: entered promiscuous mode [ 2142.850970][T21359] batman_adv: batadv0: Adding interface: macvtap1 [ 2142.885012][T21359] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2142.966478][T21359] batman_adv: batadv0: Interface activated: macvtap1 [ 2144.481886][T21380] wlan0 speed is unknown, defaulting to 1000 [ 2144.524696][T21380] lo speed is unknown, defaulting to 1000 [ 2144.662942][T21386] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2145.005763][T21392] overlayfs: failed to clone upperpath [ 2145.360632][T21409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3606'. [ 2147.162256][T21449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3625'. [ 2147.304759][T21458] fuse: Bad value for 'fd' [ 2147.427078][T21464] team0: entered promiscuous mode [ 2147.432337][T21464] team_slave_0: entered promiscuous mode [ 2147.438629][T21464] team_slave_1: entered promiscuous mode [ 2147.445676][T21464] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2147.732245][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3626'. [ 2149.953193][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3646'. [ 2150.113447][T21506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3648'. [ 2151.179036][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 2151.951399][T21541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'. [ 2152.182116][T21550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'. [ 2152.965827][T21555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3666'. [ 2153.476076][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'. [ 2154.559103][T21589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3680'. [ 2155.213766][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3686'. [ 2156.250615][T21618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'. [ 2157.697049][T21630] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3696'. [ 2157.880565][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'. [ 2158.863711][T21642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3701'. [ 2159.057579][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'. [ 2160.525094][T21666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3708'. [ 2161.006352][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3712'. [ 2161.393076][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3713'. [ 2161.952297][T18596] ------------[ cut here ]------------ [ 2161.958715][T18596] WARNING: CPU: 1 PID: 18596 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2161.970231][T18596] Modules linked in: [ 2161.974274][T18596] CPU: 1 PID: 18596 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 2161.982071][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2161.992554][T18596] Workqueue: phy15 ieee80211_csa_finalize_work [ 2161.998959][T18596] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2162.006484][T18596] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 2162.026745][T18596] RSP: 0018:ffffc900051179c0 EFLAGS: 00010293 [ 2162.032934][T18596] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: ffff88802abc3c00 [ 2162.041004][T18596] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2162.049019][T18596] RBP: dffffc0000000000 R08: ffff88806bce15af R09: 1ffff1100d79c2b5 [ 2162.057310][ C0] ------------[ cut here ]------------ [ 2162.057370][ C0] WARNING: CPU: 0 PID: 21685 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 2162.063002][T18596] R10: dffffc0000000000 R11: ffffed100d79c2b6 R12: 0000000000000001 [ 2162.073717][ C0] Modules linked in: [ 2162.073736][ C0] CPU: 0 PID: 21685 Comm: syz.1.3713 Not tainted syzkaller #0 [ 2162.073758][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2162.073770][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 2162.073804][ C0] Code: 24 4c 89 e7 e8 be 74 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 b9 b2 82 f7 0f 0b e9 f6 f7 ff ff e8 ad b2 82 f7 <0f> 0b e9 48 fb ff ff e8 a1 b2 82 f7 48 c7 c7 20 89 64 8e 4c 89 e6 [ 2162.073825][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 2162.073853][ C0] RAX: ffffffff8a046f53 RBX: ffffffff8a045d56 RCX: ffff888021fc1e00 [ 2162.073870][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2162.073885][ C0] RBP: 0000000000000000 R08: ffff888021fc1e00 R09: 0000000000000003 [ 2162.073900][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88806bce23c0 [ 2162.081934][T18596] R13: ffff88806bce25d9 R14: ffff88801cbeac70 R15: ffff88801cbeace8 [ 2162.085889][ C0] R13: dffffc0000000000 R14: ffff88806bce28b0 R15: ffff888053275824 [ 2162.085911][ C0] FS: 00007f290faba6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2162.085929][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2162.085943][ C0] CR2: 00007f1d69e09000 CR3: 000000007db07000 CR4: 00000000003506f0 [ 2162.093523][T18596] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2162.103732][ C0] Call Trace: [ 2162.103745][ C0] [ 2162.103758][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 2162.103804][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 2162.103842][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 2162.103886][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 2162.110259][T18596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2162.110280][T18596] CR2: 000000110c32dff1 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 2162.110301][T18596] Call Trace: [ 2162.130011][ C0] __iterate_interfaces+0x243/0x500 [ 2162.130065][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2162.130094][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2162.136210][T18596] [ 2162.136285][T18596] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 2162.144279][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2162.152539][T18596] ieee80211_csa_finalize+0x5a6/0xf20 [ 2162.160376][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2162.168373][T18596] ? mutex_lock_nested+0x20/0x20 [ 2162.176498][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 2162.176540][ C0] __hrtimer_run_queues+0x520/0xc40 [ 2162.184765][T18596] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2162.193703][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 2162.193743][ C0] ? hw_scan_work+0xf60/0xf60 [ 2162.193773][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 2162.200412][T18596] ? ieee80211_csa_finalize_work+0x140/0x140 [ 2162.208447][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 2162.208487][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 2162.208517][ C0] handle_softirqs+0x280/0x820 [ 2162.208586][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 2162.208615][ C0] ? do_softirq+0x1a0/0x1a0 [ 2162.208643][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2162.208677][ C0] __irq_exit_rcu+0xd3/0x190 [ 2162.208702][ C0] ? irq_exit_rcu+0x20/0x20 [ 2162.217699][T18596] ? read_lock_is_recursive+0x20/0x20 [ 2162.221017][ C0] irq_exit_rcu+0x9/0x20 [ 2162.223913][T18596] ieee80211_csa_finalize_work+0xf6/0x140 [ 2162.229464][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2162.235034][T18596] ? process_scheduled_works+0x96f/0x15d0 [ 2162.241730][ C0] [ 2162.247719][T18596] process_scheduled_works+0xa5d/0x15d0 [ 2162.253926][ C0] [ 2162.262190][T18596] ? worker_attach_to_pool+0x380/0x380 [ 2162.265420][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2162.265456][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 2162.270665][T18596] ? assign_work+0x3d2/0x5d0 [ 2162.276942][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0b 74 cc f6 65 8b 05 4c a1 73 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 2162.276965][ C0] RSP: 0018:ffffc9000de2f5a0 EFLAGS: 00000206 [ 2162.284199][T18596] worker_thread+0xa55/0xfc0 [ 2162.287214][ C0] [ 2162.287223][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 7fd48c5bd9908f00 [ 2162.287243][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 2162.287259][ C0] RBP: ffffc9000de2f638 R08: ffffffff911c65af R09: 1ffffffff2238cb5 [ 2162.287278][ C0] R10: dffffc0000000000 R11: fffffbfff2238cb6 R12: dffffc0000000000 [ 2162.293871][T18596] kthread+0x2fa/0x390 [ 2162.300088][ C0] R13: 1ffff1100efeb546 R14: ffff888077f5a9d0 R15: 1ffff92001bc5eb4 [ 2162.300132][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2162.305533][T18596] ? pr_cont_work+0x560/0x560 [ 2162.312736][ C0] __skb_try_recv_datagram+0x17d/0x4d0 [ 2162.318372][T18596] ? kthread_blkcg+0xd0/0xd0 [ 2162.323154][ C0] ? sock_load_diag_module+0x140/0x140 [ 2162.328349][T18596] ret_from_fork+0x48/0x80 [ 2162.334391][ C0] __unix_dgram_recvmsg+0x2f8/0xd80 [ 2162.340719][T18596] ? kthread_blkcg+0xd0/0xd0 [ 2162.345378][ C0] ? unix_unhash+0x10/0x10 [ 2162.350495][T18596] ret_from_fork_asm+0x11/0x20 [ 2162.356562][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2162.363055][T18596] [ 2162.367819][ C0] ? mark_lock+0x94/0x320 [ 2162.372666][T18596] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2162.372717][T18596] CPU: 1 PID: 18596 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 2162.372779][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2162.372830][T18596] Workqueue: phy15 ieee80211_csa_finalize_work [ 2162.372927][T18596] Call Trace: [ 2162.372949][T18596] [ 2162.372971][T18596] dump_stack_lvl+0x18c/0x250 [ 2162.373072][T18596] ? show_regs_print_info+0x20/0x20 [ 2162.373162][T18596] ? load_image+0x420/0x420 [ 2162.373322][T18596] panic+0x2dc/0x730 [ 2162.373415][T18596] ? bpf_jit_dump+0xd0/0xd0 [ 2162.373516][T18596] ? ret_from_fork_asm+0x11/0x20 [ 2162.373606][T18596] __warn+0x2e0/0x470 [ 2162.373676][T18596] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2162.373762][T18596] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2162.373830][T18596] report_bug+0x2be/0x4f0 [ 2162.373894][T18596] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2162.373970][T18596] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2162.374035][T18596] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 2162.374118][T18596] handle_bug+0xcf/0x120 [ 2162.374193][T18596] exc_invalid_op+0x1a/0x50 [ 2162.374264][T18596] asm_exc_invalid_op+0x1a/0x20 [ 2162.374328][T18596] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2162.374402][T18596] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 2162.374454][T18596] RSP: 0018:ffffc900051179c0 EFLAGS: 00010293 [ 2162.374505][T18596] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: ffff88802abc3c00 [ 2162.374546][T18596] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2162.374579][T18596] RBP: dffffc0000000000 R08: ffff88806bce15af R09: 1ffff1100d79c2b5 [ 2162.374617][T18596] R10: dffffc0000000000 R11: ffffed100d79c2b6 R12: 0000000000000001 [ 2162.374659][T18596] R13: ffff88806bce25d9 R14: ffff88801cbeac70 R15: ffff88801cbeace8 [ 2162.374725][T18596] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 2162.374865][T18596] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 2162.374953][T18596] ieee80211_csa_finalize+0x5a6/0xf20 [ 2162.375033][T18596] ? mutex_lock_nested+0x20/0x20 [ 2162.375102][T18596] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2162.375168][T18596] ? ieee80211_csa_finalize_work+0x140/0x140 [ 2162.375245][T18596] ? read_lock_is_recursive+0x20/0x20 [ 2162.375334][T18596] ieee80211_csa_finalize_work+0xf6/0x140 [ 2162.375419][T18596] ? process_scheduled_works+0x96f/0x15d0 [ 2162.375496][T18596] process_scheduled_works+0xa5d/0x15d0 [ 2162.375706][T18596] ? worker_attach_to_pool+0x380/0x380 [ 2162.375806][T18596] ? assign_work+0x3d2/0x5d0 [ 2162.375915][T18596] worker_thread+0xa55/0xfc0 [ 2162.376063][T18596] kthread+0x2fa/0x390 [ 2162.376110][T18596] ? pr_cont_work+0x560/0x560 [ 2162.376183][T18596] ? kthread_blkcg+0xd0/0xd0 [ 2162.376238][T18596] ret_from_fork+0x48/0x80 [ 2162.376297][T18596] ? kthread_blkcg+0xd0/0xd0 [ 2162.376354][T18596] ret_from_fork_asm+0x11/0x20 [ 2162.376476][T18596] [ 2162.377950][T18596] Kernel Offset: disabled