last executing test programs: 6m19.137629679s ago: executing program 32 (id=184): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(r1, 0xb) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) 6m0.368851241s ago: executing program 33 (id=384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000001880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@mpls_uc={0x8847, {[], @ipv4=@generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xd5, 0x5c, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) 5m34.190988222s ago: executing program 34 (id=613): socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) 5m20.946103656s ago: executing program 35 (id=596): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e23, 0xb9ad, @remote, 0x37f}}, [0x7fffffff, 0xfffffffffffff575, 0x0, 0xde1f, 0xfffffffffffffff8, 0x5, 0x5513, 0x2, 0x8000, 0x3c, 0x8, 0x2, 0x3ff, 0x100, 0xffffffffffffff43]}, &(0x7f0000000080)=0x100) 4m40.678085031s ago: executing program 36 (id=1057): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) 4m38.132706167s ago: executing program 37 (id=1078): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/238) 3m41.064479458s ago: executing program 9 (id=1542): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000540)='./file0\x00', &(0x7f0000000500)='./file0\x00') 3m40.901858858s ago: executing program 9 (id=1543): getsockopt(0xffffffffffffffff, 0x8, 0x2711, &(0x7f00000002c0)=""/4, &(0x7f0000000000)=0x4) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={r2, @in={{0x2, 0x4e20, @empty}}, 0x3b, 0x9, 0x81, 0x4, 0x20, 0x7fffffff, 0xff}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r3, 0x4}, &(0x7f0000000240)=0x8) 3m40.616404564s ago: executing program 9 (id=1546): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={[{@overriderock}, {@dmode={'dmode', 0x3d, 0x6}}, {@nocompress}, {@unhide}, {@utf8}, {@overriderock}, {@showassoc}, {@session={'session', 0x3d, 0x45}}]}, 0x1, 0x698, &(0x7f0000000a80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 3m40.320391561s ago: executing program 9 (id=1549): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f00000000c0), 0x25, 0x76e, &(0x7f0000000b40)="$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") 3m39.727363785s ago: executing program 9 (id=1551): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r3, r3) fchown(r2, r3, 0x0) 3m38.489447947s ago: executing program 9 (id=1556): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) 3m38.268928219s ago: executing program 38 (id=1556): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) 3m10.795662915s ago: executing program 6 (id=1757): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x17, 0xb0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) unshare(0x24020400) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 3m10.431596935s ago: executing program 6 (id=1759): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000001440)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 3m9.511968508s ago: executing program 6 (id=1774): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 3m9.109507791s ago: executing program 6 (id=1777): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x95) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00') 3m8.370522604s ago: executing program 6 (id=1781): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd30, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000600)=ANY=[], 0x0) 3m6.685836301s ago: executing program 6 (id=1798): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fdatasync(r0) 3m6.425249706s ago: executing program 39 (id=1798): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fdatasync(r0) 2m7.658135946s ago: executing program 5 (id=2312): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nojournal_checksum}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) rename(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m7.362674703s ago: executing program 5 (id=2313): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m7.136148556s ago: executing program 5 (id=2314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty}, 0x1c) accept(r0, 0x0, 0x0) 2m6.20440263s ago: executing program 5 (id=2323): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000f80)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRES16, @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="2c733527445357a21d79a4b56d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078030033e07b480ad2f41c3ccd7956530c7be5c0d1833a801d65d4954140d856bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826b50f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668"], 0x9, 0xc1e, &(0x7f0000001240)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2m5.68313608s ago: executing program 5 (id=2325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "bd88818314ff7d84", '\x00', "7f00", "78cb6e6d9d2574d4"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2m4.780615082s ago: executing program 5 (id=2332): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) close_range(r1, r0, 0x0) 2m4.620463321s ago: executing program 40 (id=2332): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) close_range(r1, r0, 0x0) 1m34.832498839s ago: executing program 0 (id=2600): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) 1m33.94994915s ago: executing program 0 (id=2609): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 1m33.77048283s ago: executing program 0 (id=2611): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1m33.560303623s ago: executing program 0 (id=2614): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@nfs_stale_rw}, {@fat=@debug}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 1m33.199638833s ago: executing program 0 (id=2617): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r1, 0x0, 0xc010) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) 1m32.513709583s ago: executing program 0 (id=2623): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1m32.350668962s ago: executing program 41 (id=2623): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 43.823904171s ago: executing program 1 (id=2985): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000200)="66b9a00d00000f32dbd567f0879f00a00000670f4fa1ea000000660f388080062e0f01c5baf80c66b8d789868866efbafc0cec0f0666b9800000c00f320f304466b8010000000f23d80f21f86635800000300f23f866350a00000044360f01d1", 0x60}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000017c000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.464138492s ago: executing program 1 (id=2988): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x3, 0x41100, 0x40, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40, 0xffffffff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xe, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18, 0x0, r1, {0x1}}, 0x18) dup3(r2, r0, 0x0) 43.176468839s ago: executing program 1 (id=2991): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 43.018400678s ago: executing program 1 (id=2994): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) msync(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x6) 42.412549983s ago: executing program 1 (id=2997): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x48, &(0x7f0000001fc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x12, 0x11, 0x0, @empty, @mcast2, {[], {0x4000, 0xe22, 0x12, 0x0, @gue={{0x2, 0x1, 0x2, 0x5}, 'fD'}}}}}}}, 0x0) 41.94276425s ago: executing program 1 (id=3002): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b46ea5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9"], 0x1, 0x5514, &(0x7f0000013680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r1 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) ftruncate(r1, 0x6) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000000000006000000000000000600000009000000020000000000001d7b9e07b1"]) 41.716524863s ago: executing program 42 (id=3002): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b46ea5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9"], 0x1, 0x5514, &(0x7f0000013680)="$eJzs3M1rI2UcB/Bf2u2+uxbx4G0HFqGFTdh0X9Dbqrv4gl2KLwdPmiZpyG6SKU2a1p48eBQP/iei4Mmjf4MHz97Eg+JNWMk8U9n6gkqzjd1+PjD9zjyZ/Ob3hNLyTEICOLEWs19+qsSlOBcR8xFxMaLYr5Rb4XaK5yLickTMPbJVyvHfB05HxPmIuDQpnmpWyoc+uzq+cvPHN37++tszpy58/tV3s5s1MGvPR0R/M+3v9FPmnZT3y/HGuFtk/8a4zPRA/0F5nKfcaa8XFXYa++c1irzeSefnm9vDSW70Gs1JdrobxfjmIF1wOO7s1ymecL+xVRy32utFdod5kZ291NfuXvrbtjccpTqtst6HRfkYjfYzjbd322k+mw+KbA5G5Xiqm7fau5Mcl1leLpp5r1X0sX6YV/r/7c3uYHs3G7e3ht18kN2s1V+o1W9V61t5qz1q36g2+q1bN7KlTm9yWnXUbvRvd/K802vXmnl/OVvqNJvVej1butNe7zYGWb1eu167Vr25XO5dzV69927Wa2VLk3y5O9gedXvDbCPfytIzlrOV2vUXl7Mr9ezt1bVs7a27d1fX3nn/znv3Xlp9/ZXypD+1lS2tXFtZqdavVVfqy8d3/pP/9f9p/h+XTU9x/nAolVk3AHD8WP8D0/fwH8847uv/sP6fCuv/kz1/OBTrfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE+v7hS9eK3YW0/GFcvypcuiZ8rgSEXMR8fAvzMfpAzXnyzoLf3P+wh96+KYSRYXJNc6U2/mIuF1uvz79uF8FAAAAeHJ9+dHlT9NqPf1YnHVDHKV002bu4gdTqleJiIXFH6ZQJcqbTfHs4btKJr/fp2J3StWKG1hnp1Qs3XI7Na1q/8r8gTj7SFRSzB1pOwAAwJE4uBI42lUIAAAAR+mTWTfAbBTvtJafxS8/wH8mRfmG4LkDRwAAAMAxVJl1AwAAAMBjV6z/ff8fAAAAPNnS9/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAb+zcTU7qUBQH8NOWvsf7yiPGuVtxBstwCQ4dGhbgJlgCbsENsAacuQQDhrYoNZgY+xXJ75e0t7chf06ZnXtJAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALj3my9n97cVd05zNtpl2ngYAAAA4Zp0vZ8XFpJz/qe7/q26dVfMkItKIONa7Z/GjlplVOfkHn8/f1fAQUSTsvuNndfyOiMvqeP7f9a8AAAAAp2s1X0zLbr08TYYuiO6NX6/KRZv071VLyUlE5JOnrwdss4NJujudt1BWYZc8ipuW0ooFrHFLYeWS26ittE/JasP4YEjKIe21HAAAoBf1TqDfLgQAAIA+XQ9dAMNIYr+Vud8LLv55/7Yh+Ks2AwAAAL6hZOgCAAAAgM4V/b/3/wEAAMBpK9//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJfW+XK2mi+mTXM222baeRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF/bnHQVCIAzCYO/6zmTuf1hp0NTUpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Lmf3yiqOADg39lfWJRYq+mhxmjiQS9SFgS5etA0HvwTTJqyYHXxB/QghJj04s30ZsLF6NEYE0298T9whoQL3jj0gIknD5qZnWkfK+giMLPtfj7Jm/ed2WHe9w1N0++8aQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMrO23txO9/Mj+JWeezG3StreX9zrM9d27q1lLc8zupMen94Kd3JFptLBAAAgNnRrur7iLjd3V7J+9Z8Uf93q3Pymv+7I6O4qufH6/6qr2r/vP36y50XdgeaH42TX/Ts+nBw7J+pdJ7cLKfbs/95Rqe488Wzl3bxH9J6b/P5nW5xP7Ovr19/p1eEh+rIFgD4P45WfRlUPw/lfb/JxACYGZ2k8K7q//Z8szkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1KG3GU9XcRYRS529OHfz7pW1oh/bv7Z1a6lqp65e3UqvmV+iGxFn14eDY3VNZB+4eOnyx6vD4eDCfYO5iHjAR48evBwRj//K8XD/6oMJzol47HMX1Bi0yq/1aclnfwQNf2MCAODA6ZYtr+tvd7dX8mPZQsRf399b/7+WxJHW/2N9Wv/f+fDUjXSstP7v1zbDKfHNkQd+tLxx/rPli5cuv7F+fvXc4NzgkzeP99/qnzh98uTp5eJZybInJgAAADyaXtnS+r+1ELEztv5/OIljwvr/82/7X6ZjtWe5/v8Xe4t+TWcCAAAw25575Y/fs/scz3q9+GJ1Y+NCf7Td3T8+2jaQ6kM7VLa0/m8vNJ0VAAAAUIedzeye9f8zSRwTrv8/88OLP6XXbEfEXLn+f3Tt0+GZ+qbTkD8nOquOXyd+4lMFAABgqs2VLV3/7xbv/7d2X3loRcTrrxZhVv4ZwInq//a7X/2YjpW+/3+ixjlOo9bi6H4U/WJEZ7HpjAAAADjInipbXuz/1t1e+ejnw+/3vP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULe/AwAA///lFT7r") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r1 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) ftruncate(r1, 0x6) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000000000006000000000000000600000009000000020000000000001d7b9e07b1"]) 6.159882094s ago: executing program 7 (id=3314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x98a, 0xa, 0xe, 0x6, 0xfffffffa, 0x7ffffffe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.820428133s ago: executing program 7 (id=3315): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) 5.684902041s ago: executing program 7 (id=3316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x27, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x800e001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) read$FUSE(r1, &(0x7f0000002580)={0x2020}, 0x2020) 4.592044264s ago: executing program 7 (id=3331): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000002003f13c7160d7f89c701ff0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.221954506s ago: executing program 7 (id=3336): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a440)={0x28, 0x0, 0x5, {{0x5, 0xce7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) 3.497308398s ago: executing program 2 (id=3345): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) unshare(0x6a040000) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000200)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r1], 0x38}}, 0x50) 3.164008577s ago: executing program 2 (id=3350): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2.988926167s ago: executing program 4 (id=3353): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 2.787298688s ago: executing program 2 (id=3355): timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) fcntl$setstatus(r1, 0x4, 0x42800) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) socket$inet_icmp(0x2, 0x2, 0x1) write$P9_RGETLOCK(r2, 0x0, 0xffffff6a) 2.302185247s ago: executing program 4 (id=3356): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6db) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) 2.124038187s ago: executing program 8 (id=3358): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 2.05935524s ago: executing program 4 (id=3359): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xc95, 0x881, 0xffffffff}) fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) lgetxattr(0x0, 0x0, 0x0, 0x0) 1.838294173s ago: executing program 4 (id=3361): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000480)=[{r1, 0xc210}, {r1, 0x4405}], 0x2, 0x0, 0x0, 0x0) close(0x3) 1.580599128s ago: executing program 2 (id=3364): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.566776279s ago: executing program 3 (id=3365): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r5 = socket$netlink(0x10, 0x3, 0xc) splice(r3, 0x0, r5, 0x0, 0x10d00, 0xf) 1.418752808s ago: executing program 3 (id=3366): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) close(0x3) r2 = accept$alg(r1, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) sendmmsg$inet(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048080) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 1.400461078s ago: executing program 8 (id=3367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000006000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001729000180070001007274000014000280080001400000000908000240000000031400000011"], 0xb4}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x300, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.348481461s ago: executing program 4 (id=3368): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.263491736s ago: executing program 3 (id=3369): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r1, r1, 0x0, 0x8000002) 1.189337151s ago: executing program 8 (id=3370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0xc3ec}}, 0x0) 1.096447326s ago: executing program 3 (id=3371): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80810000, 0x433, 0x0, 0x84, 0x1, 0x0, 0x0, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x1e, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x127, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr(&(0x7f0000002080)='./file0/file0\x00', &(0x7f00000042c0)=@random={'btrfs.', '^\xc8\xff\x00'}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000004380)={0x10, 0x0, r4}, 0x10) 1.069514667s ago: executing program 8 (id=3372): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x202, 0x40) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @local, 0x401}, 0x1c) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10101, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 1.007654111s ago: executing program 3 (id=3373): r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x420, 0x40000336}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) 960.621394ms ago: executing program 7 (id=3374): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) 908.062787ms ago: executing program 8 (id=3375): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000004c0)=0x10) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0x2}, &(0x7f0000000100)=0x8) 740.847507ms ago: executing program 3 (id=3376): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x103082, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x1, &(0x7f00000016c0)) 305.186902ms ago: executing program 2 (id=3377): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1d0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) 121.994392ms ago: executing program 4 (id=3378): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3ff, 0x800, 0x5, 0x0, 0xfffffffffffffff9, 0x100000}, 0x0, 0x0) close(0x4) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 394.15µs ago: executing program 2 (id=3379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0x1e}, {&(0x7f0000000140)="448b7cff000000000000108a15df09", 0xf}], 0x2) 0s ago: executing program 8 (id=3380): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x19, r3, 0x1, 0x0, 0x6, @random="000000000004"}, 0x14) kernel console output (not intermixed with test programs): ge_slave_1 entered promiscuous mode [ 284.419002][T11168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.483746][T11168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.679045][T11168] team0: Port device team_slave_0 added [ 284.697981][T11218] 9pnet: p9_errstr2errno: server reported unknown error G3v;8;:Ei{_2xz~~F-DҢ^sm [ 284.716744][ T1235] tipc: Left network mode [ 284.718669][T11168] team0: Port device team_slave_1 added [ 284.807909][T11168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.830230][T11168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.940011][T11168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.009986][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 285.251988][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 285.416329][T11168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.429073][T11168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.493410][T11168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.636351][T11168] device hsr_slave_0 entered promiscuous mode [ 285.660768][T11168] device hsr_slave_1 entered promiscuous mode [ 285.680673][T11168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.691047][T11168] Cannot create hsr debugfs directory [ 286.088846][T11271] loop2: detected capacity change from 0 to 128 [ 286.270819][T11279] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1828'. [ 286.383037][T11285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1828'. [ 286.478193][T11288] overlayfs: failed to clone upperpath [ 287.223722][T11321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1839'. [ 287.322576][ T7432] Bluetooth: hci2: command 0x041b tx timeout [ 287.524382][ T1235] device hsr_slave_0 left promiscuous mode [ 287.540577][ T1235] device hsr_slave_1 left promiscuous mode [ 287.558880][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.584366][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.611002][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.641826][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.655558][ T1235] batman_adv: batadv0: Removing interface: ipvlan2 [ 287.665625][ T1235] device bridge_slave_1 left promiscuous mode [ 287.680414][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.749759][ T1235] device bridge_slave_0 left promiscuous mode [ 287.763134][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.855921][ T1235] device veth1_macvtap left promiscuous mode [ 287.862148][ T4267] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 287.869934][ T1235] device veth0_macvtap left promiscuous mode [ 287.884322][ T1235] device veth1_vlan left promiscuous mode [ 287.890708][ T1235] device veth0_vlan left promiscuous mode [ 288.105047][ T4267] usb 6-1: Using ep0 maxpacket: 32 [ 288.206509][ T1235] team0 (unregistering): Port device team_slave_1 removed [ 288.223706][ T1235] team0 (unregistering): Port device team_slave_0 removed [ 288.421955][ T4267] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 288.451092][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.480192][ T4267] usb 6-1: Product: syz [ 288.484716][ T4267] usb 6-1: Manufacturer: syz [ 288.489752][ T4267] usb 6-1: SerialNumber: syz [ 288.497164][ T4267] usb 6-1: config 0 descriptor?? [ 288.515442][T11168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.571933][T11168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.590142][T11168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.649639][T11168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 288.862686][ T4267] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 002 [ 288.965696][T11168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.988116][T11168] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.012875][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.026782][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.054646][T11371] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 289.084766][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.119171][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.128871][ T4967] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.136015][ T4967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.163102][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.193306][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.202844][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.211374][ T4967] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.218542][ T4967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.289491][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.314671][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.340614][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.369671][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.388616][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.400310][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.408823][ T7433] Bluetooth: hci2: command 0x040f tx timeout [ 289.424724][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.462996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.488630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.540485][T11168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.582149][T11334] i2c i2c-1: failure reading status [ 289.591459][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.601379][ T4236] usb 6-1: USB disconnect, device number 2 [ 289.634329][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.150681][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.183819][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.216893][T11168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.330298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.353782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.439083][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.457400][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.500090][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.533168][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.554246][T11168] device veth0_vlan entered promiscuous mode [ 290.612145][T11168] device veth1_vlan entered promiscuous mode [ 290.664703][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.711336][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.740175][T11168] device veth0_macvtap entered promiscuous mode [ 290.785218][T11168] device veth1_macvtap entered promiscuous mode [ 290.848399][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.888249][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.899807][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.919698][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.939401][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.958265][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.968296][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.991373][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.005229][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.031656][ T4565] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 291.044417][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.065991][T11168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.084927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.101078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 291.110953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.126730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.140079][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.170690][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.196221][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.241257][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.256404][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.280281][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.301397][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.368722][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.379265][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.399130][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.422379][T11168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.436024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.450134][ T4565] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.472986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.481946][ T7433] Bluetooth: hci2: command 0x0419 tx timeout [ 291.490434][ T4565] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.537661][T11168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.562271][T11168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.579647][T11168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.594147][T11168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.631928][ T4565] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.663218][ T4565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.671288][ T4565] usb 6-1: SerialNumber: syz [ 291.872180][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.881209][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.916948][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.977644][ T4854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.989287][ T4565] usb 6-1: 0:2 : does not exist [ 292.013903][ T4854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.078629][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 292.108627][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1888'. [ 292.129411][ T4565] usb 6-1: USB disconnect, device number 3 [ 292.444329][ T4793] udevd[4793]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.155840][T11506] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1902'. [ 293.279978][T11509] Set syz1 is full, maxelem 1023 reached [ 293.524919][T11529] overlayfs: failed to clone upperpath [ 293.741833][ T7433] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 293.964271][T11542] overlayfs: failed to clone upperpath [ 294.011804][ T7433] usb 1-1: Using ep0 maxpacket: 32 [ 294.311892][ T7433] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 294.340539][ T7433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.370217][ T7433] usb 1-1: Product: syz [ 294.402647][ T7433] usb 1-1: Manufacturer: syz [ 294.407345][ T7433] usb 1-1: SerialNumber: syz [ 294.443402][ T7433] usb 1-1: config 0 descriptor?? [ 294.815483][ T7433] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 006 [ 295.048423][T11581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.245129][T11590] loop5: detected capacity change from 0 to 256 [ 295.262735][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1927'. [ 295.553324][T11521] i2c i2c-1: failure reading status [ 295.621048][ T4174] usb 1-1: USB disconnect, device number 6 [ 295.669090][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1934'. [ 296.282840][T11637] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 296.874929][T11656] loop2: detected capacity change from 0 to 32768 [ 296.959315][T11656] JBD2: Ignoring recovery information on journal [ 297.019903][T11656] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 297.320247][ T8212] ocfs2: Unmounting device (7,2) on (node local) [ 297.801787][ T4236] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 298.041889][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 298.331995][ T4236] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 298.341447][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.400080][ T4236] usb 3-1: Product: syz [ 298.411637][ T4236] usb 3-1: Manufacturer: syz [ 298.416299][ T4236] usb 3-1: SerialNumber: syz [ 298.480742][ T4236] usb 3-1: config 0 descriptor?? [ 298.853606][ T4236] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 010 [ 298.877555][T11726] overlayfs: failed to clone upperpath [ 299.263908][T11735] IPv6: addrconf: prefix option has invalid lifetime [ 299.568089][T11714] loop5: detected capacity change from 0 to 256 [ 299.577440][T11685] i2c i2c-1: failure reading status [ 299.588790][ T4659] usb 3-1: USB disconnect, device number 10 [ 300.615243][ T7433] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 300.881671][ T7433] usb 3-1: Using ep0 maxpacket: 32 [ 301.185898][ T7433] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 301.207631][ T7433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.223209][ T7433] usb 3-1: Product: syz [ 301.227539][ T7433] usb 3-1: Manufacturer: syz [ 301.237082][ T7433] usb 3-1: SerialNumber: syz [ 301.247549][ T7433] usb 3-1: config 0 descriptor?? [ 301.311237][T11714] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.341638][T11714] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 301.384139][ T7433] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 301.423772][T11714] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x3537acc1, utbl_chksum : 0xe619d30d) [ 301.483536][T11714] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0xffff0000) [ 301.543770][T11714] exFAT-fs (loop5): Filesystem has been set read-only [ 301.571506][T11714] exFAT-fs (loop5): failed to initialize root inode [ 301.611225][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1975'. [ 301.659763][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1975'. [ 302.085329][ T26] audit: type=1326 audit(1769786851.297:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11830 comm="syz.0.1981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8699f6eb9 code=0x0 [ 302.451383][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1983'. [ 302.954985][T11860] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 302.981050][T11859] autofs4:pid:11859:autofs_fill_super: called with bogus options [ 303.113233][ T7433] gspca_ov534_9: reg_w failed -71 [ 303.314990][T11874] kvm: vcpu 0: requested 12330 ns lapic timer period limited to 200000 ns [ 303.467560][T11878] Set syz1 is full, maxelem 1023 reached [ 303.482151][ T7433] gspca_ov534_9: Unknown sensor 0000 [ 303.482217][ T7433] ov534_9: probe of 3-1:0.0 failed with error -22 [ 303.535638][ T7433] usb 3-1: USB disconnect, device number 11 [ 305.122017][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2011'. [ 305.731224][T11963] device geneve2 entered promiscuous mode [ 306.583892][T11995] Invalid ELF header magic: != ELF [ 308.050408][T12058] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2043'. [ 308.112022][T12060] loop2: detected capacity change from 0 to 512 [ 308.142256][T12063] loop5: detected capacity change from 0 to 128 [ 308.160605][ T4569] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 308.269796][T12060] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 308.310788][T12063] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 308.338646][T12060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 308.389209][T12060] System zones: 1-12 [ 308.418081][T12063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.427055][ T4569] usb 1-1: Using ep0 maxpacket: 8 [ 308.436672][T12060] EXT4-fs (loop2): 1 truncate cleaned up [ 308.492172][T12060] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 308.551911][ T4569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.573431][ T4569] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 308.601807][ T4569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.648658][ T4569] usb 1-1: config 0 descriptor?? [ 308.940070][T12090] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.2051'. [ 308.941307][ T4569] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 308.967606][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2051'. [ 309.086605][T12092] loop5: detected capacity change from 0 to 1024 [ 309.272678][T12092] hfsplus: invalid catalog btree flag [ 309.279510][T12092] hfsplus: failed to load catalog file [ 309.910013][T12122] loop5: detected capacity change from 0 to 512 [ 310.114269][T12122] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2058: iget: bad extra_isize 50264 (inode size 256) [ 310.230080][T12131] netlink: 'syz.4.2061': attribute type 10 has an invalid length. [ 310.248437][T12122] EXT4-fs (loop5): Remounting filesystem read-only [ 310.298967][T12122] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2058: couldn't read orphan inode 15 (err -117) [ 310.414544][T12131] team0: Port device dummy0 added [ 310.439122][T12122] EXT4-fs (loop5): Remounting filesystem read-only [ 310.448412][T12133] netlink: 'syz.4.2061': attribute type 10 has an invalid length. [ 310.470043][T12122] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,journal_dev=0x0000000000000010,inode_readahead_blks=0x0000000000000000,noinit_itable,errors=continue,errors=continue,errors=remount-ro,inode_readahead_blks=0x0000000000000004,auto_da_alloc,norecovery,stripe=0x000000000. Quota mode: none. [ 310.498874][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.648419][T12133] team0: Port device dummy0 removed [ 310.673065][T12122] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.2058: Invalid block bitmap block 3347956625 in block_group 0 [ 310.709729][T12133] device dummy0 entered promiscuous mode [ 310.720480][T12122] EXT4-fs (loop5): Remounting filesystem read-only [ 310.750176][T12133] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 310.833132][ T7432] usb 1-1: USB disconnect, device number 7 [ 310.841600][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 311.388110][T12164] 9pnet: p9_fd_create_tcp (12164): problem connecting socket to 127.0.0.1 [ 311.446343][T12168] loop2: detected capacity change from 0 to 512 [ 311.460744][T12170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2072'. [ 311.566218][T12173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2074'. [ 311.623461][T12168] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.2073: inode #1: comm syz.2.2073: iget: illegal inode # [ 311.702040][T12168] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2073: error while reading EA inode 1 err=-117 [ 311.747532][T12168] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.2073: inode #1: comm syz.2.2073: iget: illegal inode # [ 311.790404][T12168] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2073: error while reading EA inode 1 err=-117 [ 311.843507][T12168] EXT4-fs (loop2): 1 orphan inode deleted [ 311.861767][T12168] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,noinit_itable,norecovery,noinit_itable,max_batch_time=0x0000000000000006,nodiscard,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 312.220806][T12192] loop0: detected capacity change from 0 to 1024 [ 312.302311][ T4236] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 312.661872][ T4236] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.673521][T12192] hfsplus: b-tree write err: -5, ino 3 [ 312.701720][ T4236] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 312.825955][ T4854] hfsplus: bad catalog file entry [ 312.879677][ T4854] hfsplus: b-tree write err: -5, ino 3 [ 312.901818][ T4236] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.921243][ T4236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.961626][ T4236] usb 6-1: Product: syz [ 312.983511][ T4236] usb 6-1: Manufacturer: syz [ 312.995956][ T4236] usb 6-1: SerialNumber: syz [ 313.297710][T12226] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 313.586753][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2088'. [ 313.751024][T12240] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2089'. [ 313.916909][T12245] loop2: detected capacity change from 0 to 2048 [ 314.006223][T12245] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.131838][ T4236] cdc_ncm 6-1:1.0: bind() failure [ 314.151777][ T4236] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 314.158677][ T4236] cdc_ncm 6-1:1.1: bind() failure [ 314.201813][ T2857] Bluetooth: hci1: command 0x0406 tx timeout [ 314.381626][ T4236] usb 6-1: USB disconnect, device number 4 [ 315.003127][ T4569] hid-generic 0005:16C0:05DF.000C: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 315.220353][T12287] sctp: [Deprecated]: syz.0.2101 (pid 12287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.220353][T12287] Use struct sctp_sack_info instead [ 315.292873][T12289] sctp: [Deprecated]: syz.0.2101 (pid 12289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.292873][T12289] Use struct sctp_sack_info instead [ 315.490939][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2103'. [ 315.703923][T12294] team0: Port device team_slave_0 removed [ 315.843435][ T26] audit: type=1326 audit(1769786865.057:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591844eb9 code=0x7fc00000 [ 315.971740][ T26] audit: type=1326 audit(1769786865.087:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb591844eb9 code=0x7fc00000 [ 316.008907][T12305] loop2: detected capacity change from 0 to 1024 [ 316.018971][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2107'. [ 316.116387][T12312] loop0: detected capacity change from 0 to 256 [ 316.123151][ T26] audit: type=1326 audit(1769786865.087:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591844eb9 code=0x7fc00000 [ 316.173181][T12305] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.324912][T12312] FAT-fs (loop0): Directory bread(block 64) failed [ 316.363667][T12312] FAT-fs (loop0): Directory bread(block 65) failed [ 316.383764][ T26] audit: type=1326 audit(1769786865.087:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591844eb9 code=0x7fc00000 [ 316.406234][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.423318][T12312] FAT-fs (loop0): Directory bread(block 66) failed [ 316.445368][T12312] FAT-fs (loop0): Directory bread(block 67) failed [ 316.462074][T12312] FAT-fs (loop0): Directory bread(block 68) failed [ 316.468896][T12312] FAT-fs (loop0): Directory bread(block 69) failed [ 316.499245][ T26] audit: type=1326 audit(1769786865.087:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591844eb9 code=0x7fc00000 [ 316.530497][T12312] FAT-fs (loop0): Directory bread(block 70) failed [ 316.578593][T12312] FAT-fs (loop0): Directory bread(block 71) failed [ 316.620241][T12312] FAT-fs (loop0): Directory bread(block 72) failed [ 316.647739][T12312] FAT-fs (loop0): Directory bread(block 73) failed [ 316.681164][ T26] audit: type=1326 audit(1769786865.087:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591844eb9 code=0x7fc00000 [ 316.763112][ T26] audit: type=1326 audit(1769786865.087:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591844eb9 code=0x7fc00000 [ 316.919834][ T26] audit: type=1326 audit(1769786865.087:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591844eb9 code=0x7fc00000 [ 317.060972][ T26] audit: type=1326 audit(1769786865.087:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591844eb9 code=0x7fc00000 [ 317.123650][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 317.159689][ T26] audit: type=1326 audit(1769786865.087:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12299 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591844eb9 code=0x7fc00000 [ 317.191325][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.256316][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.262717][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.164035][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2129'. [ 318.301467][T12390] netlink: 'syz.5.2124': attribute type 10 has an invalid length. [ 318.482314][T12390] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 319.252961][T12430] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.2138'. [ 319.421069][T12437] syz.5.2141 sent an empty control message without MSG_MORE. [ 319.500990][T12441] loop2: detected capacity change from 0 to 128 [ 319.616017][T12441] attempt to access beyond end of device [ 319.616017][T12441] loop2: rw=2049, want=142, limit=128 [ 319.673044][T12441] attempt to access beyond end of device [ 319.673044][T12441] loop2: rw=2049, want=140, limit=128 [ 319.715771][T12441] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 319.732472][T12441] attempt to access beyond end of device [ 319.732472][T12441] loop2: rw=2049, want=144, limit=128 [ 319.764505][T12441] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 319.777180][T12441] attempt to access beyond end of device [ 319.777180][T12441] loop2: rw=2049, want=146, limit=128 [ 319.809399][T12441] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 319.832083][T12441] attempt to access beyond end of device [ 319.832083][T12441] loop2: rw=2049, want=250, limit=128 [ 319.891086][T12438] attempt to access beyond end of device [ 319.891086][T12438] loop2: rw=2049, want=140, limit=128 [ 319.915650][T12438] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 321.177258][T12487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.270487][T12487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.305917][T12491] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 322.024841][T12516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2159'. [ 323.293904][T12561] loop2: detected capacity change from 0 to 128 [ 323.490564][T12564] loop5: detected capacity change from 0 to 1024 [ 323.564194][T12564] EXT4-fs (loop5): Ignoring removed nobh option [ 323.601714][T12564] EXT4-fs (loop5): Ignoring removed bh option [ 323.611340][T12564] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 323.735971][T12564] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 323.862637][T12564] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.2175: Allocating blocks 385-513 which overlap fs metadata [ 323.997863][T12577] bond0: (slave wlan1): Error: Slave device does not support XDP [ 324.036529][T12563] EXT4-fs (loop5): pa ffff8880745e3a80: logic 16, phys. 129, len 24 [ 324.044656][T12563] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 324.323329][ T8212] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 324.399380][ T8212] FAT-fs (loop2): Filesystem has been set read-only [ 324.971410][T12609] sd 0:0:1:0: PR command failed: 2 [ 325.014711][T12609] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 325.091894][T12609] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 325.760391][T12644] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2192'. [ 325.841029][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2192'. [ 326.402374][T12652] netlink: 'syz.3.2194': attribute type 13 has an invalid length. [ 326.446752][T12662] loop2: detected capacity change from 0 to 512 [ 326.509424][T12662] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 326.969019][T12668] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2201'. [ 327.437559][T12689] loop2: detected capacity change from 0 to 32768 [ 327.588419][T12689] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 327.597719][T12689] BTRFS info (device loop2): turning on sync discard [ 327.604704][T12689] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 327.614186][T12689] BTRFS info (device loop2): use zstd compression, level 3 [ 327.621441][T12689] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 327.632126][T12689] BTRFS info (device loop2): trying to use backup root at mount time [ 327.640239][T12689] BTRFS info (device loop2): enabling auto defrag [ 327.646977][T12689] BTRFS info (device loop2): using free space tree [ 327.653588][T12689] BTRFS info (device loop2): has skinny extents [ 327.752933][T12626] loop0: detected capacity change from 0 to 32768 [ 327.926407][T12626] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 327.938928][T12626] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 327.958786][ T4967] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 328.061793][T12689] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 328.077664][ T4967] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 328.139962][T12626] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 328.206596][T12689] BTRFS warning (device loop2): couldn't read tree root [ 328.235688][T12689] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 328.245887][T12689] BTRFS warning (device loop2): couldn't read tree root [ 328.275536][ T4569] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 328.292099][ T4569] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 328.299300][T12689] BTRFS info (device loop2): enabling ssd optimizations [ 328.308292][T12689] BTRFS info (device loop2): clearing free space tree [ 328.315239][T12689] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 328.325175][T12689] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 328.369606][T12689] BTRFS info (device loop2): creating free space tree [ 328.381139][T12689] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 328.390842][T12689] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 328.406120][T12689] BTRFS info (device loop2): checking UUID tree [ 328.433260][ T4569] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 141ms [ 328.445701][ T4569] gfs2: fsid=syz:syz.0: jid=0: Done [ 328.455256][T12626] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 328.508356][T12626] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 328.887536][T12740] loop5: detected capacity change from 0 to 1024 [ 329.105735][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.437612][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.944635][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2219'. [ 331.483043][T12839] overlayfs: failed to clone upperpath [ 332.621878][ T4569] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 332.950696][T12848] loop0: detected capacity change from 0 to 32768 [ 333.010917][T12848] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 333.035975][ T4569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.036010][ T4569] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 333.036028][ T4569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.047695][ T4569] usb 3-1: config 0 descriptor?? [ 333.092152][T12848] BTRFS info (device loop0): force clearing of disk cache [ 333.092258][T12848] BTRFS info (device loop0): max_inline at 0 [ 333.092281][T12848] BTRFS info (device loop0): enabling auto defrag [ 333.092314][T12848] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 333.092519][T12848] BTRFS info (device loop0): force zstd compression, level 3 [ 333.092543][T12848] BTRFS info (device loop0): enabling disk space caching [ 333.092561][T12848] BTRFS info (device loop0): disk space caching is enabled [ 333.092577][T12848] BTRFS info (device loop0): has skinny extents [ 333.336845][T12848] BTRFS info (device loop0): enabling ssd optimizations [ 333.337928][T12848] BTRFS info (device loop0): clearing free space tree [ 333.337987][T12848] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 333.338014][T12848] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 333.345424][T12910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2254'. [ 333.553076][ T4569] wacom 0003:056A:00F8.000D: unbalanced collection at end of report description [ 333.553497][ T4569] wacom 0003:056A:00F8.000D: parse failed [ 333.553531][ T4569] wacom: probe of 0003:056A:00F8.000D failed with error -22 [ 333.992613][ T4569] usb 3-1: USB disconnect, device number 12 [ 334.420650][ T4273] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 334.705030][T12944] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2264'. [ 334.758492][T12944] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 335.332182][T12950] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2264'. [ 335.347930][T12950] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 335.901254][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 336.240833][T13017] xt_hashlimit: size too large, truncated to 1048576 [ 336.286498][T13019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2283'. [ 336.536141][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020c17000: rx timeout, send abort [ 337.036188][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880796f7400: rx timeout, send abort [ 337.047292][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020c17000: abort rx timeout. Force session deactivation [ 337.544578][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880796f7400: abort rx timeout. Force session deactivation [ 338.998669][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2285'. [ 339.076369][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2290'. [ 339.087411][T13032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.129338][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2290'. [ 339.147174][T13037] bond1: (slave bond0): Error -16 calling set_mac_address [ 339.201797][T13043] bond1 (unregistering): Released all slaves [ 340.058890][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2292'. [ 340.120437][T13057] device erspan0 entered promiscuous mode [ 340.147390][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2294'. [ 340.174590][T13057] device erspan0 left promiscuous mode [ 340.561969][T13081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2300'. [ 340.763430][T13093] xt_hashlimit: size too large, truncated to 1048576 [ 340.989683][T13104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2306'. [ 341.090396][T13104] netlink: 'syz.4.2306': attribute type 1 has an invalid length. [ 341.583013][T13132] loop5: detected capacity change from 0 to 1024 [ 341.605109][T13132] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 341.618463][T13132] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.657965][T13132] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,nojournal_checksum,nomblk_io_submit,noauto_da_alloc,. Quota mode: writeback. [ 342.164207][T13148] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2315'. [ 343.197724][T13187] loop5: detected capacity change from 0 to 2048 [ 343.300033][T13187] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 343.348256][T13187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.530134][T10182] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh [ 343.553056][T10182] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh [ 343.670457][T13203] netlink: 'syz.0.2327': attribute type 12 has an invalid length. [ 345.503404][T13256] chnl_net:caif_netlink_parms(): no params data found [ 346.015955][T13256] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.043123][T13256] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.051246][T13256] device bridge_slave_0 entered promiscuous mode [ 346.102292][T13281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2345'. [ 346.170276][T13256] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.190263][T13256] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.214632][T13256] device bridge_slave_1 entered promiscuous mode [ 346.316652][T13256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.348865][T13256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.463858][T13256] team0: Port device team_slave_0 added [ 346.490506][T13256] team0: Port device team_slave_1 added [ 346.573355][T13256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.595836][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.636039][T13256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.702856][T13256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.721164][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.753909][T13256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.855779][T13256] device hsr_slave_0 entered promiscuous mode [ 346.903304][T13256] device hsr_slave_1 entered promiscuous mode [ 346.927463][T13256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.982304][T13256] Cannot create hsr debugfs directory [ 347.081619][ T7433] Bluetooth: hci4: command 0x0409 tx timeout [ 347.325198][T13256] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 347.354336][T13256] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.490251][T13256] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 347.519389][T13256] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.677544][T13256] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 347.692932][T13256] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.718985][T13346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.727181][T13346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.737757][T13346] device bridge_slave_0 left promiscuous mode [ 347.746324][T13346] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.761353][T13346] device bridge_slave_1 left promiscuous mode [ 347.769130][T13346] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.785482][T13346] bond0: (slave bond_slave_0): Releasing backup interface [ 347.808221][T13346] bond0: (slave bond_slave_1): Releasing backup interface [ 347.894045][T13346] team0: Port device team_slave_1 removed [ 347.900975][T13346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.909233][T13346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.920045][T13346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.930941][T13346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.958674][T13350] team0: Mode changed to "activebackup" [ 348.069194][T13256] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 348.089786][T13256] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.305198][T13256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 348.345104][T13372] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.2362'. [ 348.359602][T13372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2362'. [ 348.396038][T13256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 348.417443][T13256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 348.444160][T13256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 348.586830][T13256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.623859][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.636552][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.661413][T13256] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.699272][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.716673][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.740870][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.748156][ T4854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.815674][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.839853][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.855616][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.876920][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.884205][ T4854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.909146][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.928754][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.954699][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.989619][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.006388][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.028688][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.040359][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.050000][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.068940][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.106882][T13256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.150079][T13256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.161777][ T7433] Bluetooth: hci4: command 0x041b tx timeout [ 349.192783][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.206659][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.319005][T13410] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 349.364789][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2374'. [ 349.597227][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.605659][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.648201][T13256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.715692][T13431] loop0: detected capacity change from 0 to 512 [ 349.733730][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.752488][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.829148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.846121][T13431] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,barrier,noblock_validity,journal_ioprio=0x0000000000000004,delalloc,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 349.851274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.875103][T13431] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.974674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.993299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.001901][T13431] loop_set_status: loop0 () has still dirty pages (nrpages=3) [ 350.016734][T13256] device veth0_vlan entered promiscuous mode [ 350.066626][T13256] device veth1_vlan entered promiscuous mode [ 350.149562][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 350.167390][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 350.185358][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 350.205020][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.221247][T13256] device veth0_macvtap entered promiscuous mode [ 350.264626][T13256] device veth1_macvtap entered promiscuous mode [ 350.323103][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.358984][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.374505][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.386160][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.396840][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.407755][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.418384][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.437963][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.506740][T13256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.519195][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.552903][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.561179][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.654090][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.689028][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.718379][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.747966][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.760818][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.771216][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.793842][T13458] overlayfs: failed to clone upperpath [ 350.799591][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.815281][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.826272][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.836576][T13256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.852658][T13463] overlayfs: failed to clone lowerpath [ 350.858220][T13256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.890898][T13256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.906952][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.922128][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.948721][T13256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.964427][T13256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.981029][T13256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.994598][T13256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.178016][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.211755][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.241918][ T7433] Bluetooth: hci4: command 0x040f tx timeout [ 351.255339][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.282281][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.303945][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.362787][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.539731][T13491] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2392'. [ 352.474402][T13532] xt_hashlimit: max too large, truncated to 1048576 [ 353.325504][ T7433] Bluetooth: hci4: command 0x0419 tx timeout [ 353.422567][T13570] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.2402'. [ 353.462514][T13570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2402'. [ 353.580546][T13572] overlayfs: failed to clone lowerpath [ 355.093129][T13631] 9pnet: Insufficient options for proto=fd [ 355.615718][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2422'. [ 356.080611][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2427'. [ 356.120765][T13668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2427'. [ 356.208853][T13668] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2427'. [ 357.663762][ T1108] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 357.692166][ T1108] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 358.559264][T13773] netlink: 'syz.3.2453': attribute type 10 has an invalid length. [ 358.877876][T13781] mkiss: ax0: crc mode is auto. [ 359.065339][T13796] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 359.241772][T13807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2462'. [ 361.103599][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2481'. [ 361.301762][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'. [ 361.343838][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2483'. [ 361.435195][T13897] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2483'. [ 363.536114][T13964] loop2: detected capacity change from 0 to 1024 [ 363.642023][T13964] EXT4-fs (loop2): Ignoring removed nobh option [ 363.671602][T13964] EXT4-fs (loop2): Ignoring removed bh option [ 363.677817][T13964] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 363.790974][T13964] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 363.853735][T13964] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.2496: Allocating blocks 385-513 which overlap fs metadata [ 363.948634][T13977] loop0: detected capacity change from 0 to 1024 [ 363.988805][T13977] EXT4-fs (loop0): Ignoring removed orlov option [ 364.012157][T13963] EXT4-fs (loop2): pa ffff8880745e3540: logic 16, phys. 129, len 24 [ 364.020276][T13963] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 364.038903][T13977] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 364.054754][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.079496][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.104497][T13977] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,orlov,nolazytime,quota,nomblk_io_submit,. Quota mode: writeback. [ 364.216847][T13986] lo: Caught tx_queue_len zero misconfig [ 364.231843][T13986] veth0: Caught tx_queue_len zero misconfig [ 364.838470][T14011] loop2: detected capacity change from 0 to 128 [ 365.052648][ T7433] Process accounting resumed [ 365.070404][ T7433] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 365.089281][ T7433] FAT-fs (loop2): Filesystem has been set read-only [ 365.462365][T14031] fuse: Bad value for 'fd' [ 365.815118][T13814] Set syz1 is full, maxelem 65536 reached [ 367.328548][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 367.328562][ T26] audit: type=1326 audit(1769786916.537:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14070 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc626130eb9 code=0x7ffc0000 [ 367.419235][ T26] audit: type=1326 audit(1769786916.577:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14070 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc626130eb9 code=0x7ffc0000 [ 367.507682][ T26] audit: type=1326 audit(1769786916.577:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14070 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc626130eb9 code=0x7ffc0000 [ 367.540731][ T26] audit: type=1326 audit(1769786916.577:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14070 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc626130eb9 code=0x7ffc0000 [ 367.682494][ T26] audit: type=1326 audit(1769786916.577:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14070 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc626130eb9 code=0x7ffc0000 [ 367.810533][ T26] audit: type=1326 audit(1769786916.577:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14070 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc626130eb9 code=0x7ffc0000 [ 367.868449][T14100] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2519'. [ 367.937779][ T26] audit: type=1326 audit(1769786916.577:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14070 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc626130eb9 code=0x7ffc0000 [ 368.060276][ T26] audit: type=1326 audit(1769786916.577:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14070 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc626130eb9 code=0x7ffc0000 [ 368.172970][ T26] audit: type=1326 audit(1769786916.577:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14070 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc626130eb9 code=0x7ffc0000 [ 368.281201][ T26] audit: type=1326 audit(1769786916.577:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14070 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc626130eb9 code=0x7ffc0000 [ 368.645187][T14123] binder: 14121:14123 unknown command 0 [ 368.662893][T14123] binder: 14121:14123 ioctl c0306201 2000000001c0 returned -22 [ 368.682894][T14124] tipc: Started in network mode [ 368.687934][T14124] tipc: Node identity f2849f3445fb, cluster identity 4711 [ 368.720508][T14124] tipc: Enabled bearer , priority 0 [ 368.838247][T14126] device syzkaller0 entered promiscuous mode [ 368.860002][T14129] netlink: 'syz.0.2536': attribute type 13 has an invalid length. [ 368.945039][T14129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.969032][T14129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.052337][T14122] tipc: Resetting bearer [ 369.141024][T14122] tipc: Disabling bearer [ 369.273533][T14134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2547'. [ 369.522660][T14147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2540'. [ 369.658288][T14151] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 370.662923][T14180] netlink: 'syz.4.2551': attribute type 13 has an invalid length. [ 370.845473][T14189] loop0: detected capacity change from 0 to 1024 [ 370.885109][T14189] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 370.922986][T14189] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 370.987877][T14194] loop1: detected capacity change from 0 to 1024 [ 371.002756][T14189] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,nojournal_checksum,nomblk_io_submit,noauto_da_alloc,. Quota mode: writeback. [ 371.075222][T14194] EXT4-fs (loop1): Ignoring removed orlov option [ 371.111638][T14194] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 371.223000][T14194] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,orlov,nolazytime,quota,nomblk_io_submit,. Quota mode: writeback. [ 371.443420][T14207] loop0: detected capacity change from 0 to 2048 [ 371.584698][T14207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.980083][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2565'. [ 371.994806][T14239] fuse: Bad value for 'fd' [ 372.035268][T14240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.042613][T14240] IPv6: NLM_F_CREATE should be set when creating new route [ 372.120702][T14235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.128078][T14235] IPv6: NLM_F_CREATE should be set when creating new route [ 373.090128][T14289] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 373.296668][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2586'. [ 373.318575][T14301] device team1 entered promiscuous mode [ 373.325789][T14301] 8021q: adding VLAN 0 to HW filter on device team1 [ 373.369574][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.396431][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.488633][T14306] tipc: Enabled bearer , priority 0 [ 373.578459][T14306] device syzkaller0 entered promiscuous mode [ 373.666665][T14305] tipc: Resetting bearer [ 373.744509][T14305] tipc: Disabling bearer [ 374.176953][T14326] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.185853][T14326] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.195141][T14326] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.204722][T14326] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.300264][T14326] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 374.529098][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 374.529112][ T26] audit: type=1326 audit(1769786923.737:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.3.2588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb591844eb9 code=0x0 [ 375.010667][T14369] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2604'. [ 375.440148][T14388] netlink: 'syz.3.2610': attribute type 12 has an invalid length. [ 375.728748][T14397] loop0: detected capacity change from 0 to 128 [ 376.147486][ T7433] libceph: connect (1)[c::]:6789 error -101 [ 376.156130][ T7433] libceph: mon0 (1)[c::]:6789 connect error [ 376.180877][ T7433] libceph: connect (1)[c::]:6789 error -101 [ 376.187126][ T7433] libceph: mon0 (1)[c::]:6789 connect error [ 376.226630][ T13] libceph: connect (1)[c::]:6789 error -101 [ 376.232949][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 376.425823][ T7433] libceph: connect (1)[c::]:6789 error -101 [ 376.434751][ T7433] libceph: mon0 (1)[c::]:6789 connect error [ 376.495313][ T7] libceph: connect (1)[c::]:6789 error -101 [ 376.508180][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 376.518543][ T7433] libceph: connect (1)[c::]:6789 error -101 [ 376.557606][ T7433] libceph: mon0 (1)[c::]:6789 connect error [ 376.722976][T14403] ceph: No mds server is up or the cluster is laggy [ 376.722976][T14407] ceph: No mds server is up or the cluster is laggy [ 376.753860][T14433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.761174][T14433] IPv6: NLM_F_CREATE should be set when creating new route [ 376.767244][T14412] ceph: No mds server is up or the cluster is laggy [ 376.977380][ T7433] libceph: connect (1)[c::]:6789 error -101 [ 376.992124][ T7433] libceph: mon0 (1)[c::]:6789 connect error [ 377.443021][T14455] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2632'. [ 377.530714][T14458] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2632'. [ 378.051648][T14436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.111871][T14436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.625661][T14436] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.634756][T14436] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.643897][T14436] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.653288][T14436] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.686885][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.693357][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.702046][T14436] device bond1 left promiscuous mode [ 378.899785][T14436] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.910105][T14436] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.919804][T14436] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.929274][T14436] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.035518][T14457] netlink: 'syz.1.2631': attribute type 12 has an invalid length. [ 379.189060][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2638'. [ 379.250116][T14471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.286094][T14481] bond1 (unregistering): Released all slaves [ 379.334350][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 379.570222][T14494] netlink: 'syz.3.2643': attribute type 1 has an invalid length. [ 379.627732][T14494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 379.638658][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2643'. [ 379.716248][T14497] bond3 (unregistering): Released all slaves [ 379.900615][T14449] chnl_net:caif_netlink_parms(): no params data found [ 380.054736][T14507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.062144][T14507] IPv6: NLM_F_CREATE should be set when creating new route [ 381.411701][ T4660] Bluetooth: hci2: command 0x041b tx timeout [ 381.528581][T14511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.219638][T14511] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.228617][T14511] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.237619][T14511] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.246877][T14511] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.509061][T14511] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.518170][T14511] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.527633][T14511] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.538281][T14511] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.566322][T14515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2647'. [ 382.720665][T14449] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.771378][T14449] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.806268][T14449] device bridge_slave_0 entered promiscuous mode [ 382.832043][T14449] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.859630][T14449] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.892514][T14449] device bridge_slave_1 entered promiscuous mode [ 383.034681][T14449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.090438][T14449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.264081][T14449] team0: Port device team_slave_0 added [ 383.310743][T14449] team0: Port device team_slave_1 added [ 383.379450][T14449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.400962][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.481643][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 383.488929][T14449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.520847][T14449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.545599][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.635704][T14449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.765951][T14449] device hsr_slave_0 entered promiscuous mode [ 383.794462][T14449] device hsr_slave_1 entered promiscuous mode [ 383.816112][T14449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.843386][T14449] Cannot create hsr debugfs directory [ 384.258174][ T4658] libceph: connect (1)[c::]:6789 error -97 [ 384.274884][ T4658] libceph: mon0 (1)[c::]:6789 connect error [ 384.291359][T14587] ceph: No mds server is up or the cluster is laggy [ 384.551632][ T4658] libceph: connect (1)[c::]:6789 error -97 [ 384.557609][ T4658] libceph: mon0 (1)[c::]:6789 connect error [ 384.763265][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2674'. [ 384.934770][T14631] ptrace attach of "./syz-executor exec"[14637] was attempted by "./syz-executor exec"[14631] [ 385.029539][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2678'. [ 385.213904][T14651] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2680'. [ 385.372923][T14449] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 385.398121][T14449] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 385.436179][T14449] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 385.457644][T14449] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 385.511640][ T8425] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 385.571786][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 385.640921][T14449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.670471][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.686389][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.704338][T14449] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.735828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.757312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.762255][ T8425] usb 2-1: Using ep0 maxpacket: 16 [ 385.803669][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.810861][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.846746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.879384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.882544][ T8425] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.899624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.921645][ T8425] usb 2-1: config 0 has no interfaces? [ 385.940233][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.947429][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.982971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 385.992740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 386.029736][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 386.063683][ T8425] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 386.081693][ T8425] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 386.089851][ T8425] usb 2-1: Product: syz [ 386.103853][ T8425] usb 2-1: SerialNumber: syz [ 386.114894][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 386.132608][ T8425] usb 2-1: config 0 descriptor?? [ 386.142894][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 386.192754][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 386.223917][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 386.248499][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 386.262990][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 386.298223][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 386.318345][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.345359][T14449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 386.437120][T14650] Dead loop on virtual device ipvlan1, fix it urgently! [ 386.558291][ T8425] usb 2-1: USB disconnect, device number 4 [ 386.786508][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.798946][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.827375][T14449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.094418][T14650] syz.1.2680 (14650) used greatest stack depth: 11120 bytes left [ 387.324896][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 387.338220][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 387.374592][ T7419] libceph: connect (1)[c::]:6789 error -101 [ 387.385824][ T7419] libceph: mon0 (1)[c::]:6789 connect error [ 387.400746][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 387.417733][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 387.428364][ T8425] libceph: connect (1)[c::]:6789 error -101 [ 387.440792][ T8425] libceph: mon0 (1)[c::]:6789 connect error [ 387.448092][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 387.456775][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 387.472374][T14449] device veth0_vlan entered promiscuous mode [ 387.508797][ T8425] libceph: connect (1)[c::]:6789 error -101 [ 387.517487][ T8425] libceph: mon0 (1)[c::]:6789 connect error [ 387.550005][T14449] device veth1_vlan entered promiscuous mode [ 387.600499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 387.617759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 387.629078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 387.650619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.671865][ T8425] libceph: connect (1)[c::]:6789 error -101 [ 387.678678][T14449] device veth0_macvtap entered promiscuous mode [ 387.685339][ T8425] libceph: mon0 (1)[c::]:6789 connect error [ 387.696076][T14449] device veth1_macvtap entered promiscuous mode [ 387.713235][ T8425] libceph: connect (1)[c::]:6789 error -101 [ 387.719282][ T8425] libceph: mon0 (1)[c::]:6789 connect error [ 387.735699][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.746515][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.756676][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.769253][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.779569][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.790243][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.800466][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.812180][ T7419] libceph: connect (1)[c::]:6789 error -101 [ 387.821473][ T7419] libceph: mon0 (1)[c::]:6789 connect error [ 387.827639][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.843470][T14449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.852660][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.862357][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.870758][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.883054][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.896855][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.911352][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.940115][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.962602][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.984471][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.006341][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.024370][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.036046][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.059270][T14449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.081098][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 388.095658][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 388.117901][T14449] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.144296][T14449] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.163344][T14449] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.177980][T14753] ceph: No mds server is up or the cluster is laggy [ 388.191578][T14758] ceph: No mds server is up or the cluster is laggy [ 388.200113][T14449] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.212410][ T7419] libceph: connect (1)[c::]:6789 error -101 [ 388.217948][T14776] capability: warning: `syz.4.2701' uses 32-bit capabilities (legacy support in use) [ 388.218618][ T7419] libceph: mon0 (1)[c::]:6789 connect error [ 388.241616][T14762] ceph: No mds server is up or the cluster is laggy [ 388.278284][ T7419] libceph: connect (1)[c::]:6789 error -101 [ 388.300117][ T7419] libceph: mon0 (1)[c::]:6789 connect error [ 388.344339][ T4174] libceph: connect (1)[c::]:6789 error -101 [ 388.358126][ T4174] libceph: mon0 (1)[c::]:6789 connect error [ 388.560372][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.631542][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.651216][ T4854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.667002][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.682528][ T4854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.799792][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.748296][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2718'. [ 391.023169][T14866] team0 (unregistering): Port device team_slave_0 removed [ 391.051449][T14866] team0 (unregistering): Failed to send options change via netlink (err -105) [ 391.060914][T14866] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 391.084891][T14866] team0 (unregistering): Port device team_slave_1 removed [ 391.167609][T14845] netlink: 'syz.3.2716': attribute type 5 has an invalid length. [ 392.306708][T14915] team0 (unregistering): Port device team_slave_0 removed [ 392.410045][T14915] team0 (unregistering): Failed to send options change via netlink (err -105) [ 392.482137][T14915] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 392.524784][T14915] team0 (unregistering): Port device team_slave_1 removed [ 392.835115][T14943] IPVS: Error connecting to the multicast addr [ 393.328961][ T4660] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 393.351071][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2749'. [ 393.757599][ T4660] usb 9-1: Using ep0 maxpacket: 32 [ 394.612148][ T4660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.643768][ T4660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.692187][ T4660] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 394.724156][ T4660] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.772645][ T4660] usb 9-1: config 0 descriptor?? [ 394.832961][ T4660] hub 9-1:0.0: USB hub found [ 394.973423][T14999] overlayfs: failed to clone upperpath [ 395.034776][T15003] overlayfs: failed to clone upperpath [ 395.041676][ T4660] hub 9-1:0.0: 1 port detected [ 395.691755][ T4660] hub 9-1:0.0: activate --> -90 [ 396.065478][T15032] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2755'. [ 396.105311][T15032] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2755'. [ 396.335633][ T4563] usb 9-1: USB disconnect, device number 5 [ 396.341895][ T4660] usb 9-1-port1: config error [ 396.369115][T15040] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2761'. [ 396.459506][T15040] Dead loop on virtual device ipvlan1, fix it urgently! [ 397.184192][T15041] loop1: detected capacity change from 0 to 32768 [ 397.419471][T15041] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2762 (15041) [ 397.496274][T15041] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 397.548833][T15041] BTRFS info (device loop1): force clearing of disk cache [ 397.591638][T15041] BTRFS info (device loop1): enabling auto defrag [ 397.598230][T15041] BTRFS info (device loop1): enabling ssd optimizations [ 397.690337][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.715447][T15041] BTRFS info (device loop1): max_inline at 0 [ 397.761556][T15041] BTRFS info (device loop1): enabling disk space caching [ 397.768687][T15041] BTRFS info (device loop1): disk space caching is enabled [ 397.811720][T15041] BTRFS info (device loop1): has skinny extents [ 398.071730][ T4174] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 398.136507][T15041] BTRFS info (device loop1): clearing free space tree [ 398.155349][T15041] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 398.167385][T15041] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 398.216713][ T26] audit: type=1800 audit(1769786947.427:218): pid=15041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2762" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 398.441818][ T4174] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.474991][ T4174] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 398.689255][ T4174] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 398.719619][ T4174] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.751904][ T4174] usb 9-1: Product: syz [ 398.760016][ T4174] usb 9-1: Manufacturer: syz [ 398.771789][ T4174] usb 9-1: SerialNumber: syz [ 398.783364][T15128] batman_adv: batadv0: Adding interface: gretap1 [ 398.829330][T15128] batman_adv: batadv0: Interface activated: gretap1 [ 399.083507][T15079] udc-core: couldn't find an available UDC or it's busy [ 399.090543][T15079] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 399.125079][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.161598][ T4563] usb 9-1: USB disconnect, device number 6 [ 399.258253][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.439019][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.804401][T15167] netlink: 51 bytes leftover after parsing attributes in process `syz.8.2787'. [ 400.123171][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2790'. [ 400.801894][ T4563] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 401.191938][ T4563] usb 2-1: config 0 has no interfaces? [ 401.371774][ T4563] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 401.400096][ T4563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.431350][ T4563] usb 2-1: Product: syz [ 401.441583][ T4563] usb 2-1: Manufacturer: syz [ 401.447881][ T4563] usb 2-1: SerialNumber: syz [ 401.481127][ T4563] usb 2-1: config 0 descriptor?? [ 401.892358][T15198] all: renamed from lo [ 401.921141][ T4563] usb 2-1: USB disconnect, device number 5 [ 402.281376][ T26] audit: type=1804 audit(1769786951.477:219): pid=15259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2805" name="/newroot/24/file0/file1" dev="overlay" ino=142 res=1 errno=0 [ 403.097091][T15290] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2813'. [ 403.644322][T15299] bond0: (slave dummy0): Releasing backup interface [ 403.680320][T15299] device dummy0 left promiscuous mode [ 403.775477][T15299] bond0: (slave bond_slave_0): Releasing backup interface [ 403.867711][T15299] device bond_slave_0 left promiscuous mode [ 403.908921][T15299] bond0: (slave bond_slave_1): Releasing backup interface [ 403.946769][T15299] device bond_slave_1 left promiscuous mode [ 403.993702][T15299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.037664][T15299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.333118][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2826'. [ 406.406211][T15333] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.415085][T15333] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.424101][T15333] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.432895][T15333] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.597235][T15338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2828'. [ 406.650583][T15341] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 406.709238][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2826'. [ 406.957178][T15353] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 408.656886][T15383] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000002 [ 409.042944][T15394] batman_adv: batadv0: Adding interface: gretap1 [ 409.049349][T15394] batman_adv: batadv0: Interface activated: gretap1 [ 409.203208][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'. [ 409.842944][T15432] overlayfs: failed to clone lowerpath [ 410.976610][T15468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2856'. [ 411.080070][ T26] audit: type=1326 audit(1769786960.287:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15469 comm="syz.4.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421959ceb9 code=0x7fc00000 [ 411.106964][T15468] device bond0 entered promiscuous mode [ 411.122570][T15468] device bond_slave_0 entered promiscuous mode [ 411.155233][T15468] device bond_slave_1 entered promiscuous mode [ 411.191703][ T26] audit: type=1326 audit(1769786960.317:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15469 comm="syz.4.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f421959ceb9 code=0x7fc00000 [ 411.295470][ T26] audit: type=1326 audit(1769786960.337:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15469 comm="syz.4.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421959ceb9 code=0x7fc00000 [ 411.346246][T15468] device bond0 left promiscuous mode [ 411.352058][T15468] device bond_slave_0 left promiscuous mode [ 411.371679][T15468] device bond_slave_1 left promiscuous mode [ 411.464445][T15474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2856'. [ 411.642894][T15474] device bond0 entered promiscuous mode [ 411.649555][T15474] device bond_slave_0 entered promiscuous mode [ 411.695286][T15474] device bond_slave_1 entered promiscuous mode [ 411.746125][T15474] device bond0 left promiscuous mode [ 411.752384][T15474] device bond_slave_0 left promiscuous mode [ 411.788748][T15474] device bond_slave_1 left promiscuous mode [ 412.289872][T15506] device gretap0 entered promiscuous mode [ 412.620211][T15519] loop1: detected capacity change from 0 to 128 [ 412.641456][T15515] overlayfs: failed to clone lowerpath [ 412.897412][T15519] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 412.973620][T15519] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 413.322862][T15545] overlayfs: failed to clone upperpath [ 413.491845][ T7433] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 413.600764][T15560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2883'. [ 413.682936][T15558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2883'. [ 413.761597][ T7433] usb 2-1: Using ep0 maxpacket: 8 [ 413.911775][ T7433] usb 2-1: unable to get BOS descriptor or descriptor too short [ 414.002361][ T7433] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 414.027125][ T7433] usb 2-1: can't read configurations, error -71 [ 414.155021][T15584] tipc: Started in network mode [ 414.176295][T15584] tipc: Node identity 4, cluster identity 4711 [ 414.192471][T15584] tipc: Node number set to 4 [ 414.707979][T15604] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 415.089539][T15625] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2903'. [ 417.965183][T15719] blk_update_request: I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.015942][T15719] blk_update_request: I/O error, dev loop8, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.100789][T15719] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 418.120991][T15719] blk_update_request: I/O error, dev loop8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.150369][T15719] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 418.201063][T15719] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 418.231989][T15719] UDF-fs: Scanning with blocksize 512 failed [ 418.259108][T15719] blk_update_request: I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.312638][T15719] blk_update_request: I/O error, dev loop8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.348950][T15719] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 418.371738][ T4658] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 418.385710][T15719] blk_update_request: I/O error, dev loop8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.416209][T15719] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 418.449753][T15719] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 418.474537][T15719] UDF-fs: Scanning with blocksize 1024 failed [ 418.498652][T15719] blk_update_request: I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.536673][T15719] blk_update_request: I/O error, dev loop8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.562058][T15719] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 418.583086][T15719] blk_update_request: I/O error, dev loop8, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.611727][T15719] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 418.773663][T15719] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 418.853380][T15719] UDF-fs: Scanning with blocksize 2048 failed [ 419.026986][T15719] blk_update_request: I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 419.307091][T15719] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 419.454638][T15719] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 419.495485][T15719] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 419.542536][T15719] UDF-fs: Scanning with blocksize 4096 failed [ 419.550237][T15719] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 419.601808][ T4658] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 419.643085][ T4658] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 419.697916][T15760] loop1: detected capacity change from 0 to 2048 [ 419.782704][T15760] loop1: p3 < > p4 < > [ 419.787155][T15760] loop1: partition table partially beyond EOD, truncated [ 419.831957][ T4658] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.841062][ T4658] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.849909][T15760] loop1: p3 start 4284289 is beyond EOD, truncated [ 419.892674][ T4658] usb 9-1: Product: syz [ 419.897474][ T4658] usb 9-1: Manufacturer: syz [ 419.921572][ T4658] usb 9-1: SerialNumber: syz [ 419.938954][ T4658] usb 9-1: config 0 descriptor?? [ 420.847494][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 420.881714][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.897740][ T4658] usb 9-1: USB disconnect, device number 7 [ 420.986343][T15783] netlink: 'syz.4.2944': attribute type 10 has an invalid length. [ 421.064771][T15783] device dummy0 entered promiscuous mode [ 421.086869][ T4793] udevd[4793]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 421.118153][T15783] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 421.182918][ T4793] udevd[4793]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 421.203741][T15799] device vlan2 entered promiscuous mode [ 421.209364][T15799] device bridge0 entered promiscuous mode [ 421.344906][T15799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 421.392237][T15799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 421.405246][T15799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.426499][T15799] device bridge_slave_0 left promiscuous mode [ 421.438954][T15799] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.462648][T15799] device bridge_slave_1 left promiscuous mode [ 421.469308][T15799] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.491956][T15799] bond0: (slave bond_slave_0): Releasing backup interface [ 421.518847][T15799] bond0: (slave bond_slave_1): Releasing backup interface [ 421.593493][T15799] team0: Port device team_slave_0 removed [ 421.617786][T15799] team0: Port device team_slave_1 removed [ 421.632735][T15799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.640460][T15799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.647941][ T4228] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 421.661033][T15799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.671380][T15799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.690417][T15799] batman_adv: batadv0: Interface deactivated: gretap1 [ 421.697612][T15799] batman_adv: batadv0: Removing interface: gretap1 [ 422.042160][ T4228] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 422.065489][ T4228] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 422.086138][ T4228] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.100156][ T4228] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.142048][T15805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 422.390975][ T4228] usb 9-1: USB disconnect, device number 8 [ 422.843638][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2965'. [ 423.247376][T15854] netlink: 'syz.1.2959': attribute type 6 has an invalid length. [ 423.574889][T15898] loop8: detected capacity change from 0 to 1024 [ 423.732070][T15898] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,jqfmt=vfsold,i_version,,errors=continue. Quota mode: none. [ 424.243570][T15922] smc: net device ip6tnl0 applied user defined pnetid SYZ1 [ 424.448749][T15928] loop8: detected capacity change from 0 to 64 [ 425.103807][T15940] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2981'. [ 426.258192][T15981] loop1: detected capacity change from 0 to 1024 [ 426.348463][T15981] EXT4-fs (loop1): Ignoring removed orlov option [ 426.363084][T15981] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 426.418338][T15981] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 426.665195][T15981] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.2994: Invalid block bitmap block 0 in block_group 0 [ 426.752994][T15981] EXT4-fs error (device loop1): ext4_discard_preallocations:5142: comm syz.1.2994: Error -117 reading block bitmap for 0 [ 426.792766][T13256] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 426.838918][T13256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 426.911801][T13256] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz-executor: mark_inode_dirty error [ 427.426284][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.573141][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.654914][T16016] netlink: 'syz.2.3006': attribute type 10 has an invalid length. [ 427.681823][T16016] batman_adv: batadv0: Interface deactivated: dummy0 [ 427.715041][T16016] batman_adv: batadv0: Removing interface: dummy0 [ 427.759907][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.960490][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.469257][ T144] tipc: Left network mode [ 428.646294][T16025] chnl_net:caif_netlink_parms(): no params data found [ 428.905392][T16025] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.932426][T16025] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.942135][T16025] device bridge_slave_0 entered promiscuous mode [ 428.970622][T16025] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.982997][T16025] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.001882][T16025] device bridge_slave_1 entered promiscuous mode [ 429.049023][T16025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.149740][T16074] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 429.171816][T16025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.247256][T16025] team0: Port device team_slave_0 added [ 429.303087][T16025] team0: Port device team_slave_1 added [ 429.382599][T16025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.410881][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.477493][T16025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.498567][T16025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.505959][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.534248][T16025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.550270][T16091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.716596][T16025] device hsr_slave_0 entered promiscuous mode [ 429.748759][T16025] device hsr_slave_1 entered promiscuous mode [ 429.760255][T16025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.791599][T16025] Cannot create hsr debugfs directory [ 429.972181][ T144] device hsr_slave_0 left promiscuous mode [ 429.984577][ T144] device hsr_slave_1 left promiscuous mode [ 430.056983][ T144] device veth1_macvtap left promiscuous mode [ 430.073693][ T144] device veth0_macvtap left promiscuous mode [ 430.080086][ T144] device veth1_vlan left promiscuous mode [ 430.112228][T16103] loop8: detected capacity change from 0 to 1024 [ 430.121806][ T4568] Bluetooth: hci4: command 0x0409 tx timeout [ 430.131661][ T144] device veth0_vlan left promiscuous mode [ 430.209394][T16103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.305587][ T144] bond0 (unregistering): Released all slaves [ 431.487598][T16122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.502638][T16122] device bond2 entered promiscuous mode [ 431.512263][T16122] bond0: (slave bond2): Enslaving as an active interface with an up link [ 431.520962][T16123] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3036'. [ 431.591892][T16123] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 431.614871][T16123] device dummy0 left promiscuous mode [ 431.670498][T16123] bond0 (unregistering): (slave bond2): Releasing backup interface [ 431.701248][T16123] device bond2 left promiscuous mode [ 431.725264][T16123] bond0 (unregistering): Released all slaves [ 432.110660][T16144] netlink: 'syz.3.3043': attribute type 10 has an invalid length. [ 432.135134][T16144] bond0: (slave dummy0): Releasing backup interface [ 432.186043][T16144] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 432.201865][ T4658] Bluetooth: hci4: command 0x041b tx timeout [ 432.226523][T16144] team0: Failed to send options change via netlink (err -105) [ 432.245445][T16144] team0: Port device dummy0 added [ 432.259253][T16142] sch_tbf: burst 15 is lower than device veth0 mtu (1514) ! [ 433.119515][T16186] overlayfs: failed to clone upperpath [ 433.455358][T16025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 433.600418][T16025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 433.617115][T16199] lo: Caught tx_queue_len zero misconfig [ 433.626444][T16199] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 433.646952][T16025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 433.678411][T16025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 433.695678][T16201] veth0: Caught tx_queue_len zero misconfig [ 433.999157][T16025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.047445][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.078453][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.119835][T16025] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.173795][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.194611][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.230471][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.237656][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.278341][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.292586][ T4660] Bluetooth: hci4: command 0x040f tx timeout [ 434.331981][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.360848][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.368012][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.451877][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.489591][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.522069][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.550637][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.605832][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.642663][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.687570][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.736286][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.798091][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.813766][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.862549][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.890394][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.934779][T16025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 435.003014][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 435.486020][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 435.498573][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.543936][T16025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.331691][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.362284][ T4660] Bluetooth: hci4: command 0x0419 tx timeout [ 436.391090][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.467936][T16296] bridge0: port 3(vlan2) entered blocking state [ 436.522260][T16296] bridge0: port 3(vlan2) entered disabled state [ 436.529937][T16296] device vlan2 entered promiscuous mode [ 436.648321][T16296] device bond0 entered promiscuous mode [ 436.701920][T16296] device bond_slave_0 entered promiscuous mode [ 436.754019][T16296] device bond_slave_1 entered promiscuous mode [ 436.812615][T16296] bridge0: port 3(vlan2) entered blocking state [ 436.820314][T16296] bridge0: port 3(vlan2) entered forwarding state [ 436.916842][T16025] device veth0_vlan entered promiscuous mode [ 436.957643][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 436.981018][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.995389][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.010850][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.051110][T16025] device veth1_vlan entered promiscuous mode [ 437.173978][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 437.192383][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 437.210608][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 437.237216][T16318] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3082'. [ 437.262048][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 437.297690][T16025] device veth0_macvtap entered promiscuous mode [ 437.347663][T16297] loop8: detected capacity change from 0 to 32768 [ 437.368427][T16025] device veth1_macvtap entered promiscuous mode [ 437.388233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 437.409356][T16297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.3078 (16297) [ 437.430194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 437.500447][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.520342][T16297] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 437.534578][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.566822][T16297] BTRFS info (device loop8): metadata ratio 2 [ 437.573228][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.598493][T16297] BTRFS info (device loop8): force zlib compression, level 3 [ 437.626407][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.639397][T16297] BTRFS info (device loop8): enabling auto defrag [ 437.670613][T16297] BTRFS info (device loop8): max_inline at 0 [ 437.674246][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.702049][T16297] BTRFS info (device loop8): using free space tree [ 437.723858][T16297] BTRFS info (device loop8): has skinny extents [ 437.755386][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.811613][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.851841][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.892109][T16025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.901732][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 437.945062][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 438.031278][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.141756][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.191695][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.241632][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.291937][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.318705][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.339248][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.370282][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.400828][T16025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.450004][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 438.479062][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 438.514873][T16025] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.554283][T16025] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.592883][T16025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.633896][T16025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.772479][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.820926][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.862742][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 439.904404][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.931191][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.946629][T16402] overlayfs: missing 'workdir' [ 439.956508][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 440.109106][T16411] loop7: detected capacity change from 0 to 256 [ 440.125997][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.132373][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.150722][T16406] 9pnet: Insufficient options for proto=fd [ 441.378324][T16460] tipc: Enabling of bearer rejected, failed to enable media [ 441.595153][ T4854] device hsr_slave_0 left promiscuous mode [ 441.672422][ T4854] device hsr_slave_1 left promiscuous mode [ 441.682274][ T4854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.689825][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.743108][ T4854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.750746][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.853097][ T4854] device bridge_slave_1 left promiscuous mode [ 441.862212][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.906113][ T4854] device bridge_slave_0 left promiscuous mode [ 441.940051][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.995589][ T4854] device veth1_macvtap left promiscuous mode [ 442.022231][ T4854] device veth0_macvtap left promiscuous mode [ 442.059114][ T4854] device veth1_vlan left promiscuous mode [ 442.089560][ T4854] device veth0_vlan left promiscuous mode [ 442.815548][T16450] overlayfs: failed to clone upperpath [ 443.136814][T16509] loop7: detected capacity change from 0 to 8192 [ 443.266843][ T4854] team0 (unregistering): Port device team_slave_1 removed [ 443.283612][T16509] loop7: p1 p2[DM] p4 [ 443.295596][T16509] loop7: p1 size 196608 extends beyond EOD, truncated [ 443.326289][ T4854] team0 (unregistering): Port device team_slave_0 removed [ 443.342032][T16509] loop7: p2 start 4292936063 is beyond EOD, truncated [ 443.373408][T16509] loop7: p4 size 50331648 extends beyond EOD, truncated [ 443.395129][ T4854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.444636][ T4854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.695128][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 443.727977][ T4793] udevd[4793]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 443.740915][ T4854] bond0 (unregistering): Released all slaves [ 443.823641][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3133'. [ 444.136711][T16541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.182455][T16541] bond0: (slave bond1): Enslaving as an active interface with an up link [ 444.219941][T16547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 444.291701][T16546] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3137'. [ 444.558583][T16546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.725604][T16546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.839956][T16546] bond0 (unregistering): (slave bond1): Releasing backup interface [ 444.973555][T16546] bond0 (unregistering): Released all slaves [ 445.493561][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3158'. [ 445.550516][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 445.767958][T16619] loop7: detected capacity change from 0 to 8 [ 445.789241][T16610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.833411][T16610] device bond1 entered promiscuous mode [ 445.840164][T16610] bond0: (slave bond1): Enslaving as an active interface with an up link [ 445.894440][T16619] SQUASHFS error: zlib decompression failed, data probably corrupt [ 445.909186][T16620] fuse: Bad value for 'fd' [ 445.921246][T16619] SQUASHFS error: Failed to read block 0x9b: -5 [ 445.953570][T16619] SQUASHFS error: Unable to read metadata cache entry [99] [ 445.962316][T16616] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3167'. [ 445.977917][T16619] SQUASHFS error: Unable to read inode 0x127 [ 446.094711][ T26] audit: type=1326 audit(1769786995.287:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16617 comm="syz.7.3160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8640eb2eb9 code=0x0 [ 446.161883][T16616] bridge0: port 3(vlan2) entered disabled state [ 446.320281][T16616] device vlan2 left promiscuous mode [ 446.332767][T16631] loop7: detected capacity change from 0 to 2048 [ 446.345146][T16637] fuse: Bad value for 'fd' [ 446.361831][T16616] device bond0 left promiscuous mode [ 446.443025][T16631] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 446.552262][T16616] device bond_slave_0 left promiscuous mode [ 446.625394][T16616] device bond_slave_1 left promiscuous mode [ 446.732694][T16616] device bond1 left promiscuous mode [ 446.738223][T16616] bridge0: port 3(vlan2) entered disabled state [ 446.919051][T16616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.142141][T16616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.270372][T16616] bond0 (unregistering): (slave bond1): Releasing backup interface [ 447.399637][T16616] bond0 (unregistering): Released all slaves [ 448.592107][T16711] netlink: 'syz.4.3180': attribute type 1 has an invalid length. [ 448.633906][T16711] netlink: 63747 bytes leftover after parsing attributes in process `syz.4.3180'. [ 448.821361][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3183'. [ 448.943520][T16720] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 449.689572][T16748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3192'. [ 449.761131][T16757] netlink: 'syz.2.3192': attribute type 2 has an invalid length. [ 450.275331][T16765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 450.303293][T16765] bond0: (slave bond3): Enslaving as an active interface with an up link [ 450.334874][T16772] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3197'. [ 450.475771][T16772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.500990][T16772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.536871][T16772] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 450.572918][T16772] bond0 (unregistering): (slave bond3): Releasing backup interface [ 450.608400][T16772] bond0 (unregistering): Released all slaves [ 450.992474][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3203'. [ 451.919549][T16775] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.927182][T16775] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.491084][T16775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.550387][T16775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.776437][T16775] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.790045][T16775] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.799592][T16775] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.808911][T16775] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.972019][T16797] netlink: 'syz.2.3204': attribute type 1 has an invalid length. [ 454.484615][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 454.505965][T16847] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 454.878050][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3227'. [ 454.910808][T16875] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 454.940642][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3229'. [ 454.968261][T16878] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 454.987341][T16879] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3228'. [ 455.392113][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3236'. [ 455.425697][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 455.700344][T16914] netlink: 'syz.4.3240': attribute type 2 has an invalid length. [ 456.928606][T16944] loop7: detected capacity change from 0 to 40427 [ 457.044376][T16944] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 457.052252][T16944] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 457.064092][T16944] F2FS-fs (loop7): invalid crc value [ 457.117773][T16944] F2FS-fs (loop7): Found nat_bits in checkpoint [ 457.167641][T16944] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 457.175069][T16944] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 457.985185][T16985] team0: Caught tx_queue_len zero misconfig [ 458.380019][T17005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.443112][T17005] bond0: (slave bond1): Enslaving as an active interface with an up link [ 458.499218][T17013] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3246'. [ 458.593254][T17013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.643313][T17013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.687866][T17013] bond0 (unregistering): (slave bond1): Releasing backup interface [ 458.750564][T17013] bond0 (unregistering): Released all slaves [ 459.698082][T17065] overlayfs: failed to clone upperpath [ 459.894340][T17077] netlink: 'syz.4.3280': attribute type 1 has an invalid length. [ 460.050376][T17077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.143976][T17082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.194138][T17082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.281301][T17082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.363955][T17082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.429699][T17082] bond0: (slave geneve3): making interface the new active one [ 460.501096][T17082] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 460.594818][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 460.605706][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 461.716994][T17143] netlink: 'syz.7.3296': attribute type 4 has an invalid length. [ 461.785552][T17147] netlink: 'syz.7.3296': attribute type 4 has an invalid length. [ 461.901597][T17149] netlink: 'syz.4.3298': attribute type 4 has an invalid length. [ 462.606621][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3307'. [ 462.654466][T17180] netlink: 'syz.7.3308': attribute type 32 has an invalid length. [ 462.679110][T17178] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 462.744845][T17186] qfq: no options [ 462.841983][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3310'. [ 463.399237][T17144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3295'. [ 463.420115][T17144] device lo entered promiscuous mode [ 463.899130][T17231] fuse: Bad value for 'fd' [ 463.972790][T17235] cgroup: Setting release_agent not allowed [ 464.561400][T17264] bond0 (unregistering): Released all slaves [ 464.887704][T17266] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3327'. [ 465.760799][T17326] fuse: Bad value for 'fd' [ 466.193750][T17349] bond0 (unregistering): Released all slaves [ 466.280030][T17352] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3350'. [ 467.863547][ T4660] kernel write not supported for file bpf-prog (pid: 4660 comm: kworker/0:19) [ 469.232686][T17463] tipc: Enabling of bearer rejected, failed to enable media [ 469.264389][ T26] audit: type=1326 audit(1769787018.477:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.8.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c1d19eb9 code=0x7ffc0000 [ 469.322017][T17465] [ 469.324407][T17465] ============================================ [ 469.330577][T17465] WARNING: possible recursive locking detected [ 469.336757][T17465] syzkaller #0 Not tainted [ 469.341200][T17465] -------------------------------------------- [ 469.347369][T17465] syz.8.3380/17465 is trying to acquire lock: [ 469.353456][T17465] ffff8880492b6218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x1ffc/0x2fd0 [ 469.365506][T17465] [ 469.365506][T17465] but task is already holding lock: [ 469.372897][T17465] ffff88814c79d258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x1120/0x2fd0 [ 469.384947][T17465] [ 469.384947][T17465] other info that might help us debug this: [ 469.393035][T17465] Possible unsafe locking scenario: [ 469.393035][T17465] [ 469.400509][T17465] CPU0 [ 469.403810][T17465] ---- [ 469.407114][T17465] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 469.414082][T17465] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 469.421051][T17465] [ 469.421051][T17465] *** DEADLOCK *** [ 469.421051][T17465] [ 469.429211][T17465] May be due to missing lock nesting notation [ 469.429211][T17465] [ 469.437558][T17465] 10 locks held by syz.8.3380/17465: [ 469.442881][T17465] #0: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 469.452512][T17465] #1: ffff88814c79d258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x1120/0x2fd0 [ 469.465096][T17465] #2: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 469.474733][T17465] #3: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 469.484372][T17465] #4: ffff8880492b6148 (dev->qdisc_running_key ?: &qdisc_running_key){+..-}-{0:0}, at: ip6_finish_output2+0x108c/0x1510 [ 469.497052][T17465] #5: ffff88804fdaac20 (k-slock-AF_INET6){+.-.}-{2:2}, at: icmp6_send+0xbe3/0x1990 [ 469.506514][T17465] #6: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 469.515883][T17465] #7: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 469.525252][T17465] #8: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 469.534875][T17465] #9: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 469.544507][T17465] [ 469.544507][T17465] stack backtrace: [ 469.550438][T17465] CPU: 1 PID: 17465 Comm: syz.8.3380 Not tainted syzkaller #0 [ 469.557929][T17465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.568032][T17465] Call Trace: [ 469.571338][T17465] [ 469.574292][T17465] dump_stack_lvl+0x188/0x250 [ 469.579013][T17465] ? show_regs_print_info+0x20/0x20 [ 469.584246][T17465] ? load_image+0x400/0x400 [ 469.588790][T17465] __lock_acquire+0x1236/0x7d10 [ 469.593685][T17465] ? verify_lock_unused+0x140/0x140 [ 469.598941][T17465] ? verify_lock_unused+0x140/0x140 [ 469.604183][T17465] ? __lock_acquire+0x12e8/0x7d10 [ 469.609250][T17465] lock_acquire+0x19e/0x400 [ 469.613798][T17465] ? __dev_queue_xmit+0x1ffc/0x2fd0 [ 469.619127][T17465] ? __kasan_kmalloc+0xcc/0xf0 [ 469.623939][T17465] ? __kasan_kmalloc+0xb5/0xf0 [ 469.626346][ T26] audit: type=1326 audit(1769787018.477:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.8.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c1d19eb9 code=0x7ffc0000 [ 469.628745][T17465] ? read_lock_is_recursive+0x10/0x10 [ 469.656487][T17465] ? rcu_read_lock_bh_held+0x76/0xf0 [ 469.661815][T17465] ? rcu_read_lock_held+0x40/0x40 [ 469.666873][T17465] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 469.672903][T17465] _raw_spin_lock+0x2a/0x40 [ 469.677451][T17465] ? __dev_queue_xmit+0x1ffc/0x2fd0 [ 469.682684][T17465] __dev_queue_xmit+0x1ffc/0x2fd0 [ 469.687753][T17465] ? _local_bh_enable+0xa0/0xa0 [ 469.692647][T17465] ? dev_queue_xmit+0x20/0x20 [ 469.697543][T17465] ? neigh_connected_output+0x38d/0x3e0 [ 469.703140][T17465] ip6_finish_output2+0x108c/0x1510 [ 469.708384][T17465] ? nf_hook+0x360/0x360 [ 469.712752][T17465] ? ip6_finish_output+0x64c/0x7d0 [ 469.717911][T17465] ip6_send_skb+0x1b9/0x360 [ 469.722552][T17465] icmp6_send+0x133e/0x1990 [ 469.727109][T17465] ? icmpv6_push_pending_frames+0x450/0x450 [ 469.733030][T17465] ? ip_route_output_key_hash_rcu+0x5ee/0x24d0 [ 469.739232][T17465] ? __local_bh_enable_ip+0x136/0x1c0 [ 469.744648][T17465] ? ip_route_output_key_hash+0x258/0x300 [ 469.750426][T17465] ? ip_route_input_rcu+0x31d0/0x31d0 [ 469.755836][T17465] ? make_kuid+0x1db/0x680 [ 469.760287][T17465] ? __put_user_ns+0x50/0x50 [ 469.764912][T17465] ? dst_cache_per_cpu_get+0x1bc/0x320 [ 469.770424][T17465] ip6_link_failure+0x35/0x490 [ 469.771847][ T26] audit: type=1326 audit(1769787018.517:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.8.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77c1d19eb9 code=0x7ffc0000 [ 469.775223][T17465] ? ip6_negative_advice+0x2f0/0x2f0 [ 469.775251][T17465] sit_tunnel_xmit+0xad0/0x2350 [ 469.775281][T17465] ? ipip6_tunnel_uninit+0x170/0x170 [ 469.813025][T17465] dev_hard_start_xmit+0x2a5/0x7e0 [ 469.818183][T17465] sch_direct_xmit+0x25a/0x4b0 [ 469.822989][T17465] ? mrp_pdu_append_vecattr_event+0x1590/0x1590 [ 469.829279][T17465] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 469.835292][T17465] __dev_queue_xmit+0x1904/0x2fd0 [ 469.840361][T17465] ? _local_bh_enable+0xa0/0xa0 [ 469.845247][T17465] ? dev_queue_xmit+0x20/0x20 [ 469.849984][T17465] ? neigh_connected_output+0x38d/0x3e0 [ 469.855577][T17465] ip6_finish_output2+0x108c/0x1510 [ 469.860825][T17465] ? nf_hook+0x360/0x360 [ 469.865093][T17465] ? ip6_mtu+0x2fb/0x3d0 [ 469.869358][T17465] ? ip6_finish_output+0x64c/0x7d0 [ 469.874503][T17465] ip6tunnel_xmit+0x1a6/0x3d0 [ 469.879218][T17465] ip6_tnl_xmit+0x1d06/0x23e0 [ 469.883943][T17465] ? ip6_tnl_xmit_ctl+0x600/0x600 [ 469.889008][T17465] ? gre_build_header+0x25b/0x8c0 [ 469.889994][ T26] audit: type=1326 audit(1769787018.517:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.8.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c1d19eb9 code=0x7ffc0000 [ 469.894057][T17465] __gre6_xmit+0x960/0xc70 [ 469.894082][T17465] ip6gre_tunnel_xmit+0x7a6/0x1070 [ 469.894104][T17465] ? ip6gre_tunnel_uninit+0x1c0/0x1c0 [ 469.894127][T17465] ? validate_xmit_xfrm+0xb2/0x1010 [ 469.894156][T17465] ? rcu_lock_release+0x9/0x20 [ 469.941349][T17465] ? __lock_acquire+0x7d10/0x7d10 [ 469.946433][T17465] dev_hard_start_xmit+0x2a5/0x7e0 [ 469.951596][T17465] sch_direct_xmit+0x25a/0x4b0 [ 469.956393][T17465] ? mrp_pdu_append_vecattr_event+0x1590/0x1590 [ 469.962673][T17465] __dev_queue_xmit+0x179f/0x2fd0 [ 469.967744][T17465] ? dev_queue_xmit+0x20/0x20 [ 469.972445][T17465] ? packet_parse_headers+0x833/0xa90 [ 469.977857][T17465] ? __phys_addr_symbol+0x2b/0x70 [ 469.982920][T17465] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 469.988547][T17465] ? bpf_lsm_capable+0x5/0x10 [ 469.991735][ T26] audit: type=1326 audit(1769787018.517:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.8.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c1d19eb9 code=0x7ffc0000 [ 469.993249][T17465] ? security_capable+0x85/0xb0 [ 470.020423][T17465] packet_sendmsg+0x3dba/0x5060 [ 470.025319][T17465] ? __might_sleep+0xf0/0xf0 [ 470.030003][T17465] ? aa_sk_perm+0x7dc/0x910 [ 470.034538][T17465] ? packet_getsockopt+0x9a0/0x9a0 [ 470.039685][T17465] ? aa_sock_msg_perm+0x94/0x150 [ 470.044663][T17465] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 470.050008][T17465] ? security_socket_sendmsg+0x7c/0xa0 [ 470.055513][T17465] __sys_sendto+0x46d/0x620 [ 470.060049][T17465] ? __ia32_sys_getpeername+0x80/0x80 [ 470.065468][T17465] ? __lock_acquire+0x7d10/0x7d10 [ 470.070686][T17465] ? lock_chain_count+0x20/0x20 [ 470.075582][T17465] ? __secure_computing+0x10d/0x2f0 [ 470.080825][T17465] __x64_sys_sendto+0xda/0xf0 [ 470.085543][T17465] do_syscall_64+0x4c/0xa0 [ 470.088472][ T26] audit: type=1326 audit(1769787018.517:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.8.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77c1d19eb9 code=0x7ffc0000 [ 470.089994][T17465] ? clear_bhb_loop+0x30/0x80 [ 470.117115][T17465] ? clear_bhb_loop+0x30/0x80 [ 470.121826][T17465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 470.127757][T17465] RIP: 0033:0x7f77c1d19eb9 [ 470.132197][T17465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.151959][T17465] RSP: 002b:00007f77bff75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 470.160415][T17465] RAX: ffffffffffffffda RBX: 00007f77c1f94fa0 RCX: 00007f77c1d19eb9 [ 470.168418][T17465] RDX: 000000000000000e RSI: 0000200000000180 RDI: 0000000000000003 [ 470.176444][T17465] RBP: 00007f77c1d87c1f R08: 0000200000000140 R09: 0000000000000014 [ 470.184445][T17465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.188180][ T26] audit: type=1326 audit(1769787018.517:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.8.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c1d19eb9 code=0x7ffc0000 [ 470.192443][T17465] R13: 00007f77c1f95038 R14: 00007f77c1f94fa0 R15: 00007ffc088c6ec8 [ 470.192470][T17465] [ 470.295997][ T26] audit: type=1326 audit(1769787018.517:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.8.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c1d19eb9 code=0x7ffc0000 [ 470.387789][ T26] audit: type=1326 audit(1769787018.517:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.8.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77c1d19eb9 code=0x7ffc0000 [ 470.483446][ T26] audit: type=1326 audit(1769787018.517:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.8.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c1d19eb9 code=0x7ffc0000