last executing test programs: 27m51.723350417s ago: executing program 2 (id=68): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0xba01}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x6, 0x10400) socket$nl_netfilter(0x10, 0x3, 0xc) 27m35.954784884s ago: executing program 32 (id=68): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0xba01}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x6, 0x10400) socket$nl_netfilter(0x10, 0x3, 0xc) 25m5.59107244s ago: executing program 33 (id=207): arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x13c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xf0, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000080)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}a') write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) 19m12.592847053s ago: executing program 34 (id=1129): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea8576657555", 0x21}], 0x1, 0x0, 0x0, 0x40010}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 18m26.185657273s ago: executing program 35 (id=1288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500c405000070000000fd0008"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x8, 0xfa04, 0x108, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x2], 0x0, 0x0, 0x7a}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xfffffffc, 0x2b0, 'pptp\x00', 'syz1\x00', {0x47c}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@cpu={{0x28}, {0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) setns(r2, 0x24020000) r8 = syz_pidfd_open(0x0, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) unshare(0x480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fadvise64(r9, 0x36a9, 0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000003000)=""/4128, 0x32, 0x1020, 0x1}, 0x28) 11m15.105713774s ago: executing program 36 (id=2056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000050000000500000016800000", @ANYRES32, @ANYBLOB="27dfd26918", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32], 0x50) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000480)={{0x8, 0x2, 0xfffffc01, 0x3, 'syz1\x00', 0x2}, 0x1, [0x10001, 0xfffffffffffffffd, 0x3, 0x9, 0x4, 0x6, 0x0, 0x6, 0x5, 0x8, 0x6, 0x99, 0x7, 0x8000000000000000, 0x8000001000, 0x101, 0x5, 0x4, 0x8, 0x18, 0xfffffffffffffffe, 0xfffffffffffffff6, 0x5, 0x9, 0x1000000, 0x9, 0x3, 0x6, 0xfffffffbfffffbff, 0x8, 0x3, 0x7, 0x9, 0x200, 0x8, 0x1, 0x4, 0x27, 0x10000, 0xfffffffffffffffd, 0x8, 0x3, 0x800, 0x0, 0x9, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffff7f, 0x5, 0xfc, 0x2, 0x2, 0x3, 0xffffffff8b2fe5d4, 0x6, 0x7, 0x5, 0x9, 0x6, 0x9, 0x4, 0xffffffffffffff00, 0x2, 0x8, 0x4, 0xa, 0x1, 0x1, 0x40, 0x2, 0x4, 0x1, 0x10, 0x1, 0x3, 0x100000000, 0x3ff, 0x80000000, 0x2, 0x4, 0x61, 0x4c2a644e, 0x5564, 0x5, 0x7fff, 0x4531, 0x400, 0x5, 0x7fffffffffffffff, 0x13b, 0x401, 0x7, 0x8, 0x8001, 0x3, 0x100000001, 0x6, 0x6, 0xc35, 0xf31e, 0x0, 0xffffffffffffff5f, 0x8, 0x8, 0x306dc643, 0x9, 0xffffffffffffffff, 0x8000000000000001, 0x1, 0x3, 0x3, 0x1ff, 0x9, 0x6, 0x1ff, 0x2, 0x7, 0x2, 0x34, 0x1f, 0x2, 0x9, 0x5c4, 0x4, 0x789, 0x9]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 10m7.060979227s ago: executing program 5 (id=2271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000860000000000000060b4000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x112a, &(0x7f0000000d00)=ANY=[], 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xfffffbffa003e45f, 0x700000000000000) 10m4.82198275s ago: executing program 5 (id=2277): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_clone(0x12108800, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fbbfaae60080000000000001000000000000000000007efff10000400000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000000000008000", [0x8000000000008, 0xffffffff9673e35d]}}) 9m59.648894315s ago: executing program 5 (id=2294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m58.47505535s ago: executing program 5 (id=2300): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x333c00000000, 0x3, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x5]}) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 9m57.64284326s ago: executing program 5 (id=2306): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000240)=""/49, 0x31}], 0x1, 0x36, 0x5) 9m55.960761841s ago: executing program 5 (id=2315): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 9m55.330622045s ago: executing program 37 (id=2315): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 9m39.764945085s ago: executing program 8 (id=2360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x201, 0x80000000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x1}, {0x3, 0x5}, {0xffe0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dd}, 0x4000080) 9m38.483705259s ago: executing program 8 (id=2367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2f, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 9m37.795726204s ago: executing program 8 (id=2369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 9m32.927633207s ago: executing program 9 (id=2383): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000140)=0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000100000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m32.390713556s ago: executing program 9 (id=2384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@arm64={0x8, 0x6, 0x1a, '\x00', 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m31.728107167s ago: executing program 9 (id=2386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009", @ANYRES32, @ANYRES32=0x0], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'veth0_to_bridge\x00', &(0x7f0000000380)=@ethtool_stats={0x1d, 0x1, [0x7]}}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) setns(0xffffffffffffffff, 0x24020000) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) r6 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) unshare(0x480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fadvise64(r8, 0x36a9, 0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000003000)=""/4128, 0x32, 0x1020, 0x1}, 0x28) 9m27.315986124s ago: executing program 8 (id=2388): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$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") open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) read(r0, 0x0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) 9m27.15874069s ago: executing program 9 (id=2390): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000021c0)='./file1/file0\x00', &(0x7f0000002200)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 9m26.782577893s ago: executing program 9 (id=2394): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000400)=0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250100000008000200010000ef08000100", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) 9m26.239613344s ago: executing program 9 (id=2397): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/107, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x6) read$FUSE(r1, &(0x7f00000016c0)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) 9m26.237061284s ago: executing program 8 (id=2398): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x80044d0d, 0x0) 9m25.586441673s ago: executing program 38 (id=2397): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/107, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x6) read$FUSE(r1, &(0x7f00000016c0)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) 9m23.060938024s ago: executing program 8 (id=2407): ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 9m22.604121241s ago: executing program 39 (id=2407): ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 9m2.582464544s ago: executing program 2 (id=2399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r2, r1, 0x80000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r4 = dup2(r0, r3) close_range(r4, 0xffffffffffffffff, 0x0) 9m2.054750602s ago: executing program 2 (id=2462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000a40)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9m1.735632826s ago: executing program 2 (id=2465): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020600) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x402, 0x0) 8m59.864524598s ago: executing program 2 (id=2475): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1801, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0xaf2) 8m59.415450323s ago: executing program 2 (id=2478): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1f41, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x5, 0x60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe, 0xffff}}}, 0xfffffc67}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 8m56.822096596s ago: executing program 40 (id=2478): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1f41, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x5, 0x60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe, 0xffff}}}, 0xfffffc67}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 6m14.117271018s ago: executing program 0 (id=2734): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x8045) r2 = fcntl$dupfd(r1, 0x0, r0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2300c29, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x40, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x842, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000063c0)="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", 0x2000, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000000), 0x1, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, r6}}, {@uid_lt={'uid<', r6}}, {@appraise}, {@fowner_lt={'fowner<', r6}}, {@subj_user={'subj_user', 0x3d, '[^{#\x16'}}]}}) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@grpquota}, {@errors_continue}, {@discard}, {@usrquota}, {@nodiscard}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp864'}}]}, 0x20, 0x61fe, &(0x7f000000d780)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jn17nrtQGIg5O/kb2DjmBCSTXZtJ36hTTHhteGtBEKhL9iud20W/IbXLoFGsmmgRMKoqKJtuGgLCLW5qcgFF7QClAvUCqkStBf0BlGhchFVAQWkSrSCbDXnPM+zM7OzM7v2ePfMOZ+PZP+8M2fmeebMM2fnt+vvHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa3fr6uU83sixr/sn/2pZlL2j+e8vktvyy12z0DAEAAICr9av87+duSBccWsWNWrb555d/92uLi4uL2fs2/fnY5xcX0xWTWTa2Ocvy66KnfvT+Rus2wWPZRGOk5euRPsNv6nP9aJ/rx/pcP97n+s19rp/oc/2yHbDMluLnMfmd7cr/ua3YpdmN2Vh+3a4ut3qssXlkJP4sJ9fIb7M4djybz05mc9lM2/bFto18+2/c2hzrLVkca6RlrB3NFfKzR4/FOTTCPt7VNtbSfUY/eV02+fOfPXrsb88/e3O32nc3tN1fMc87djbn+clwSTHXRrY57ZM4z5GWee7o8pxsaptnI79d89+d83xulfPctDTNddX5nE9kI/m/v5fvp9HWH+ul/bQjXPaL27Isu7Q07c5tlo2VjWRb2y4ZWXp+JooV2byP5lJ6cTa6pnV66yrWabPO7mpfp52vifj83xpuN7rCHFqfpp98Yrzlef/l4pWs06j5qFd6rXSuwUG/VsqyBuO6+F7+oB/vugZ3hcf/6O0rr8Gua6fLGkyPu2UN7uy3BkfGN+VzTk9CI7/N0hrc3bb9pnykRl6fub33Gpw+f+rs9MLHPn73/KmjJ+ZOzJ3eu3v3zN59+w4cODB9fP7k3Ezx9xXu7fLbmo2k18DOsO/ia+BVHdu2LtXFL40vO/5e6etwosfrcFvHtoN+HY52PrjG+rwgl6/p4rXxnuZOn7g8kq3wGsufnzuv/nWYHnfL63C05XXY9XtKl9fh6Cpeh81tzt65uvcsoy1/us1h5e8FV7cGt7Wswc73I51rcNDvR8qyBifCuvjBnSt/L9gR5vv41Frfj2xatgbTww3HnuYl6f3+xIG8dFuXtzSvuG48u7Awd+6eR46eP39udxbKunhJy1rpXK9bWx5Ttmy9jqx5vR6af/njt3S5fFvYVxN3N/+aWPG5am5z7z29n6v8u1v3/dl26Z4slAFb7/3Z7bt5c3+OZ9kXvv2Jh7756Bdev+L+bPabn5y++vfiqS9tOf6OrXD8jX3/88V46a4e2zQ2Wrx+N6W9M9Z2PG5/qkbzY1cjH/u56dUdj8fCn/U+Ht/Y43i8vWPbQR+PxzofXDweN/r9tKOf3j9N6Hw+J8I6OTnT+3jc3Gb7nrWuydGex+PbQm2E/f/q0Cmkvqhl7ay0btNYo6Nj4XGNxhHa1+netu3HQm/WHOvJPeFNYZrl6tbpHbcV229quV20Xut0smPbQa/T9LOvldZpo99P365M5/M5EdbFjXt7r9PmNk/fe/XHzi3xny3HzvF+a3Bs03hzzmNpEebH+2xxS1yD92THsjPZyWw2v3Y8X0+NfKyp+1Z3rBwPf9b7WLm9xxq8o2PbQa/B9H1spbXXGF3+4Aeg8/mcCOviift6r8HmNm/YP9j3rneES9I2Le9dO3++ttLPvG7p2E3Xaq2Mhnl+e3/vn802tzl5YK19Zu/9dFe45Lou+6nz9bvSa2o2W5/9tD3M89kDK++n5nya23z+4CrX06Esyy5+5IH8573h9ysXL3z/a22/d+n2O52LH3ngpy88/k9rmT8Aw+/5omwtvte1/GZqNb//BwAAAIZC7PtHQk30/wAAAFAZse+P/ys80f8DAABAZcS+fzTUpAr9/x/332T7G56df/5ilpL5i0G8Pu2GB4vtYsZ1Jnw9ubikefkDX5n773+8uLrpjWRZ9ssH/6jr9tsfjPMqTIZ5PvXG9suX+drdqxr7yMMX07it+fUvhvuPj2e1y6BbBHcmy7Jv3PDZfJzJ91/O69MPHsnrQ5cef6y5zXMHi6/j7Z95SbH9X4Xw76HjR9tu/0zYDz8Odeat3fdHvN1XL796x/73Lo0Xb9fYeX3+sJ/4QHG/8XNyPvdYsX3czyvN/5ufefKrze0feWX3+V8c6T7/J8P9fiXU/3lZsX3rc9D8Ot7uU2H+cbx4u3u+/K2u83/q08X2Z99UbHck1Dj+HeHrXW96dr51fz3SONr2uLI3F9vF8We+/6f59fH+4v13zn/i8OW2/dG5Pp7+t+J+pju2j5fHcaJ/6Bi/eT+t6zOO/+SfHGnbz/3Gf+qhZ17WvN/O8e/q2O7sR+7Mx1+6v/ZPbPrrT32263hxPof+/mzb4zn0rvA6DuM/8YGwHsP1//tUcX+dn65w5F3tx5+4/Re3XWx7PNFbfl6M/9RrT+R188SWrde94IXXX3pFc99l2fc2F/fXb/wTf3Ombf5fuqnYH/H6mNHvHH8lcfxzH506fWbhwvxs2quP3pB/ds7bivnE+d4Qjq2dXx8+c/6Dc+cmZyZnsmyyuh+hd8W+HOpPi3Kp99aLy46gdz4cns9b/vIbW2//18/Ey//9PcXll99afN96Vdjuc+HybeH5W9v4yz1x603567vxdJjh4vLPC74aO3b914FVbRgef+f7grjez770g/l+aF6Xf9+Ir+urnP8PZ4v7+XrYr4vhk5l33rQ0Xuv28bMRLr+7eL1f9f4Lh7n4vP5deL7f/uPi/uO84uP9YXgf863t7ce7uD6+fnGk8/7zT/G4FI4n2aXi+rhV3N+Xn7up6/Ti55Bkl27Ov/6zdD83r+lhrmThYwvTJ+dPX3hk+vzcwvnphY99/PCpMxdOnz+cf5bn4Q/1u/3S8Wlrfnyandt3b5Yfrc4U5Rrb6PmfffjY7P6Z22fnjh+9cPz8w2fnzp04trBwbG524fajx4/PfbTf7edn79+95+De/XumTszP3n/g4MG9B6fmT59pTqOYVB/7Zj48dfrc4fwmC/ffe3D3fffdOzN16szs3P37Z2amLvS7ff69aap56z+cOjd38uj5+VNzUwvzH5+7f/fBffv29P00wFNnjy9MTp+7cHr6wsLcuenisUyezy9ufu/rd3uqaeE/iveznRrFB/Fl77xrX/p81qavfGLFuyo26fgA0WfDZ9F850VnD6zm69j3j4WaVKH/BwAAAHKx7x8PNdH/AwAAQGXEvn9zqIn+HwAAACoj9v0Toab/ElCT/r9y+f/tF1c1vvy//H/r/pL/r1n+/91ly/8Xxwv5/8G42vy9/H8g/y//L/8v/y//zwCULf8f+/4tWeb3/wAAAFBRse/fGmqi/wcAAIDKiH3/daEm+n8AAACojNj3vyDUpCb9v/y//L/8v/y//H/38eX/h5P8f2/y/33I/09n9cr/Xxrk/Dcg/7+l9Qv5f8qobPn/2Pe/MNSkJv0/AAAA1EHs+68PNdH/AwAAQGXEvv+GUBP9PwAAAFRG7Pu3hZrUpP+X/7+q/H/KXMn/t89f/r+d/H9YD/L/8v/rQP6/N/n/PuT/nf9/uPL/beT/KaOy5f9j3/+iUJOa9P8AAABQB7Hvf3Goif4fAAAAymf0ym4W+/6XhJos6/+vcAAAAABgw8W+/8asIwhek9//y/87/7/8v/y//H/38Vef/9+Uyf+Xh/x/b/L/fcj/y//L/8v/M1Bly//nfX82kb001KQm/T8AAADUQez7bwo10f8DAABAZcS+//+Fmuj/AQAAoDJi37891KQm/b/8f2Xy/79oferk/+X/e40v/+/8/1Um/9+b/H8f8v/y//L/8v8MVNny/7HvvznUpCb9PwAAANRB7PtvCTXR/wMAAEBlxL7//4ea6P8BAACgMmLfvyPUpCb9v/x/yfP/MTnq/P/y//L/pcz/T8j/l478f2/y/33I/8v/y//L/zNQZcv/x77/ZaEmNen/AQAAoA5i3//yUBP9PwAAAFRG7PtfEWqi/wcAAIDKiH3/ZKhJTfr/teT/G5fk/1dyjc//P76K8/+3kf+X/+81vvy/8/9Xmfx/b/L/fcj/y//L/8v/M1Bly//Hvv/WUJOa9P8AAABQB7Hv3xlqov8HAACAyoh9/22hJvp/AAAAqIzY9+8KNalJ/+/8/0OR/8/k/+X/5f/l/+X/V0f+vzf5/z7k/+X/5f/l/xmosuX/Y9//ylCTmvT/AAAAUAex77891ET/DwAAAJUR+/5XhZro/wEAAKAyYt9/R6hJTfp/+X/5f/l/+X/5/+7jy/8PJ/n/3uT/+5D/l/+X/5f/Z6DKlv+Pff+rQ01q0v8DAABAHcS+/85QE/0/AAAAVEbs++8KNdH/AwAAQGXEvn8q1KQm/b/8v/y//L/8v/x/9/Hl/4eT/H9v8v99yP/L/8v/y/8zUGXL/8e+/+5Qk5r0/wAAAFAHse+/J9RE/w8AAACVEfv+6VAT/T8AAABURuz7Z0JNatL/y//L/8v/y/+vKf//iqX7lf8vyP+Xi/x/b/L/fcj/y/9veP5/TP6fSilb/j/2/btDTWrS/wMAAEAdxL5/T6iJ/h8AAAAqI/b9e0NN9P8AAABQGbHvvzfUpCb9v/y//L/8v/y/8/93H1/+fzjJ//c2+Px/fIjy//L/8v/O/y//z3Jly//Hvv++UJOa9P8AAABQB7Hv3xdqov8HAACAyoh9//5QE/0/AAAAVEbs+w+EmtSk/5f/l/+X/5f/l//vPr78/3DasPx/xwuhPvl/5/+X/18i/7+x+f/m2pL/p2zKlv+Pff/BUJOa9P8AAABQB7Hvf02oif4fAAAAKiP2/b8WaqL/BwAAgMqIff+vh5rUpP+X/5f/l/+X/y97/n9c/l/+fw2c/783+f8+5P/l/4c4/+/8/5RR2fL/se+/P9SkJv0/AAAA1EHs+38j1ET/DwAAAJUR+/7Xhpro/wEAAKAyYt9/KNSkJv2//P865f/jhfL/8v/y/87/L/9/Tcn/9yb/34f8v/y//L/8PwNVtvx/7PtfF2pSk/4fAAAA6iD2/Q+Emuj/AQAAoDJi3//6UBP9PwAAAFRG7PvfEGpSk/5f/t/5/zc+/z/WNnf5/6Xbyf8XVpP/b81Zy//Xm/x/b/L/fcj/y//L/8v/M1Bly//Hvv+NoSY16f8BAACgDmLf/6ZQE/0/AAAAVEbs+98caqL/BwAAgMqIff9bQk1q0v/L/8v/b3z+3/n/5f8Lzv8v/z8I8v+9yf/3If8v/y//L//PQJUt/x/7/t8MNalJ/w8AAAB1EPv+B0NN9P8AAABQGbHvf2uoif4fAAAAKiP2/W8LNalJ/y//L/8v/y//L//ffXz5/+Ek/9/bkOX/f3V9uFz+vyD/X+75rzX/P9rx9TXJ//9opfz/4ubO28v/cy2ULf8f+/63h5rUpP8HAACAOoh9/ztCTfT/AAAAUBmx739nqIn+HwAAACoj9v2/FWpSk/5f/r85j6X0svy//H9+gfy//L/8/9CS/+9tyPL/zv/fQf6/3PN3/n/5f5YrW/4/9v3vCjWpSf8PAAAAdRD7/odCTfT/AAAAUBmx7393qIn+HwAAACoj9v3vCTWpSf8v/+/8//L/8v/y/93Hl/8fTvL/vcn/9yH/L/9ftvz/f8r/M9zKlv+Pff/DoSY16f8BAACgDmLf/95QE/0/AAAAVEbs+3871ET/DwAAAJUR+/73hZrUpP+X/x+W/P+k/P8a8//j4TL5f/l/+f96kf/vTf6/D/l/+f+y5f+d/58hV7b8f+z73x9qsvr+f2LVWwIAAAAbIvb9vxNqUpPf/wMAAEAdxL7/d0NN9P8AAABQGbHv/71Qk5r0//L/w5L/d/7/zPn/5f87Ho/8v/x/N+uX/49HHvn/0ub/txQTWMv48v/y//L/8v8MVtny/7Hv//1Qk5r0/wAAAFAHse//QKiJ/h8AAACGQrf/k90p9v2HQ030/wAAAFAZse8/EmpSk/5f/l/+X/6/pPn/v9j5Lz/47juO7Jb/r0z+vxFGkv+/ttb1/P/NF7/z/5c3/+/8/2u20fn5YZ+//L/8P8uVLf8f+/6joSZLjd/bnOAfAAAAhlvs+/8g1KQmv/8HAACAOoh9/7FQE/0/AAAAVEbs+2dDTWrS/8v/y//L/5c0/z/E5/+P+2OY8v9Tm4fo/P/xoCv/39W65v/fu5QTl/9fa/5/vOulnfn/hvx/G/n/Nc//O1mWyf/L/7OBypb/j33/XKhJTfp/AAAAqIPQ948cL+rSFfp/AAAAqIzY958INdH/AwAAQGXEvv+DoSY16f/l/+X/5f/l/53/v/v4pc3/O/9/T/L/vZUn/9+d8//L/w/z/OX/5f9Zrmz5/9j3z4ea1KT/BwAAgDqIff+HQk30/wAAAFAZse//cKiJ/h8AAAAqI/b9J0NNatL/y//L/8v/y//L/3cfX/5/OMn/9yb/34f8v/y//L/8PwNVtvx/7PtPhZrUpP8HAAD+j737eLKsPO84fhv3FDPFxjsvvLD3/hNYmJ2r7D/ACzZe2FUuL8ASyolBOaKcA8pCAQWQEEooJ1BCQllIQjkHlJFUo2LmeZ6Z7j59bvfM7e73vu/ns/ADDeNzkaZAP5ovBxhB7v4r4hb7HwAAALqRu//KuMX+BwAAgG7k7v//uGWQ/a//1/932///q/5/t+fr//X/PdP/z9P/L6H/1//r//X/rFRr/X/u/vvFLYPsfwAAABhB7v77xy32PwAAAHQjd/9VcYv9DwAAAN3I3f+AuGWQ/b+t/99YjNn/Z8ar/++p//f+/12fr//X//fscPv/a+77M5/+X/+v/w/6f/2//p/tWuv/c/c/MG4ZZP8DAADACHL3Pyhusf8BAACgG7n7Hxy32P8AAADQjdz9D4lbBtn/3v/v/f/6f/2//n/6+fr/9eT9//NG6v+vuvOSK+65+R9v2c/z9f/6f/2//p/Vaq3/z93/0LhlkP0PAAAAI8jd/7C4xf4HAACAbuTuf3jcYv8DAADAGjox+dXc/Y+IWwbZ//p//b/+P/r/4/p//b/+vwf6/3kj9f/n83z9v/5f/6//Z7Va6/9z9z8ybhlk/wMAAMAIcvc/Km6x/wEAAKBdU/8g9ozc/VfHLfY/AAAAdCN3/8m4ZZD9r/8/+P7/rxP9/Kb+v73+3/v/9f/6/y7o/+fp/5fQ/+v/9f/6f1aqtf4/d/81ccsg+x8AAABGkLv/0XGL/Q8AAADdyN3/mLjF/gcAAIBu5O5/bNwyyP7X/3v/v/5f/6//n36+/n896f/n6f+X0P9faD9/TP+v/9f/c6599v/3zvxpeyX9f+7+x8Utg+x/AAAAGEHu/sfHLfY/AAAAdCN3/xPiFvsfAAAAupG7/4lxyyD7X/+v/9f/6//Pu//f+VPvNP3/NP3/4dD/z2um/9/YnPyy/n/t+3/v/9f/6//ZorX3/+fuf1LcMsj+BwAAgBHk7n9y3DKz//f9N/MBAACAI5W7/ylxi+//AwAAwNrL6ix3/1PjlkH2v/5f/6//1/97///08+f6/1vO+Xz6/7bo/+c10//vQv+v/1/nz6//1/+zU2v9f+7+p8Utg+x/AAAAGEHu/mvjFvsfAAAAupG7/+lxi/0PAAAA3cjd/4y4ZZD9P93/n/3t+v+90f9v/fz6/+mfH6vq//P/o/5/tv+/zPv/x6T/n6f/X0L/r//X/+/W/59Y9uP1/0xprf/P3f/MuGWQ/Q8AAAAjyN3/rLjF/gcAAIBu5O5/dtxi/wMAAEA3cvc/J24ZZP97/7/+X/+/fv2/9/+fcZTv/18cev+/qf/fI/3/PP3/Evp//b/+f/79/zP/FgD9P1Na6/9z9z83bhlk/wMAAMAIcvc/L26x/wEAAGA9nPvPDmz/B0pD7v7nxy32PwAAAHQjd/8L4pZ+9v/suzr1//p//b/+X/8//fy2+n/v/98r/f88/f8S+v+D6Oc3O+v/r9vtx7fQ/1990P3/DP0/U7b0/7ee/fpR9f+5+18Yt/Sz/wEAAGB4uftfFLfY/wAAANCN3P0vjlvsfwAAAOhG7v6XxC2D7P8D7/9n/u0D+n/9v/5f/6//1/+vmv5/nv5/Cf2/9/97/7/+n5Xa0v+f46j6/9z9L41bBtn/AAAAMILc/S+LW+x/AAAA6Ebu/uviFvsfAAAAupG7/+VxyyD73/v/9f/6f/2//n/6+fr/9XRB/f1F+v+i/9f/6//1//p/VqC1/j93/yvilkH2PwAAAIwgd/8r4xb7HwAAALqRu/9VcYv9DwAAAN3I3f/quGWQ/a//P9j+P7+u/9f/L/T/+n/9/6EY9v3/G1N/Jdppl/7/9v89+R9bv7Kt/68/z+r/9f8z9P/6f/3/mP5+5rc10f+fOvu/LnP3vyZuGWT/AwAAwAhy9782brH/AQAAoBu5+18Xt9j/AAAA0I3c/dfHLfvc/3PNQ8v0/97/r//X/+v/p5+v/19Pw/b/e+T9/0vo//X/+n/9PyvVRP9/zq/n7n993OL7/wAAANCN3P1viFvsfwAAAOhG7v43xi32PwAAAHQjd/+b4pZB9r/+X/+v/9f/6/+nn6//X0/6/3n6/yXWqf+//gL6/83pLx91P3+hjvrzH1T/f2yPf/z6f1rUWv+fu/+GuGWQ/Q8AAAAjyN3/5rjF/gcAAIBu5O5/S9xi/wMAAEA3cve/NW4ZZP/r//X/+n/9v/5/+vn6//Wk/5+n/18sFjfOfICp/v/UxW32/97/39zn9/5//T87tdb/5+5/W9wyyP4HAACAEeTuvzFusf8BAACgG7n7b4pb7H8AAADoRu7+t8ctg+x//b/+X/+v/9f/Tz9f/7+e9P/z9P9LrNP7//X/zX1+/b/+n51a6/9z978jbhlk/wMAAMAIcvffHLfY/wAAANCN3P3vjFvsfwAAAOhG7v5b4pZB9r/+X/+v/9f/6/+nn6//X08H1/8v9P/6f/3/Evp//b/+n+1a6/9z978rbhlk/wMAAMAIcve/O26x/wEAAKAbufvfE7fY/wAAANCN3P3vjVsG2f/6f/2//l//r/+ffr7+fz15//88/f8S+n/9v/5f/89KTff/Vx9Z/5+7/31xyyD7HwAAAEaQu//WuMX+BwAAgG7k7n9/3GL/AwAAQDdy938gbhlk/+v/9f9b+//FQv+v/9f/n3EI/f/xhf5/5fT/8/T/S+j/++z/L1p01P+f2PXH6/9pUWvv/8/d/8G4ZZD9DwAAACPI3f+huMX+BwAAgG7k7v9w3GL/AwAAQDdy938kbhlk/+v/9f/e/6//1/9PP9/7/9eT/n+e/n8J/X+f/b/3/+v/OTKt9f+5+z8atwyy/wEAAGAEufs/FrfY/wAAANCN3P0fj1vsfwAAAOhG7v5PxC2D7H/9v/5f/6//1/9PP1//v570//P0/0vo//X/+n/9PyvVWv+fu/+Tccsg+x8AAABGkLv/trjF/gcAAIBu5O6/PW6x/wEAAKAbufs/FbcMsv/1//p//f969v/H9f/6f/3/pFb6/0sv/fc79P/6f/2//l//r/8fXWv9f+7+T8ctg+x/AAAAGEHu/s/ELfY/AAAAdCN3/2fjFvsfAAAAupG7/3NxyyD7f2f/f2xxplA9Y6r/j0ZN/38O/f/Wz6//n/754f3/+n/9/8Frpf/3/v/z+/z6f/3/On/+ffX//7zzx+v/6VFr/X/u/jvilkH2PwAAAIwgd//n4xb7HwAAALqRu/8LcYv9DwAAAN3I3X9n3DLI/vf+f/2//l//r/+ffr7+fz3p/+fp/5fQ/+v/vf//yv/+O/0/q9Na/5+7/4txyyD7HwAAAEaQu/9LcYv9DwAAAN3I3f/luGXX/f9vxw7hYwEAAAArlLv/K3HLIN//1//r//X/+n/9//Tz9f/rSf8/T/9ftv+hnTFO/3986otH3c9fqKP+/N30/97/zwq11v/n7v9q3DLI/gcAAIAR5O7/Wtxi/wMAAEA3cvd/PW6x/wEAAKAbufu/EbcMsv/1//r//vv//9L/b3u+/l//3zP9f/4VfZr+f4lx+v9JR93Pr/vn1//r/9mptf4/d/9dccsg+x8AAABGkLv/m3GL/Q8AAADdyN3/rbjF/gcAAIBu5O7/dtwyyP7X/4/V/28sRuz/vf9f/6//H4n+f57+fwn9v/5f/6//Z6Va6/9z99+9sTnk/gcAAIB19Z//8n937fX3vfv0/z2++E7cctni1B6/jQ0AAAA07r7dv7G5WHz39K/5/j8AAAD0KHf/9+KWQfa//n+s/r+T9/9v5n9t+n/9v/5/+XNHo/+fp/9fQv+v/9f/6/9Zqdb6/9z9349bzhl+m/v+owQAAABakrv/B3HLIN//BwAAgBHk7v9h3LJj//vXAQIAAMC6yt3/o7hlkO//6/8b7/8XB9T/x++3pv2/9//r/0/T/+v/p+j/511g/39qQ/+v/5+h/9f/6//ZrrX+P3f/j+OWQfY/AAAAdGrL31HI3f+TuMX+BwAAgG7k7v9p3GL/AwAAQDdy9/8sbhlk/+v/D73/z1T9AN//f6J+qdP3/+v/99r/X3t88vn6f/1/z/T/87z/fwn9fy/9/8X6f/0/bWit/8/d//O4ZZD9DwAAACPI3f+LuMX+BwAAgG7k7v9l3GL/AwAAQDdy9/8qbhlk/+v/G3///3n1/3t4/7/+f4z+f5fn99P//8MlJ2+7/H9uukH/z1mH2f/nzwX9v/5f/39GQ/2/9//r/2nE6vv/zS1f3G//n7v/13HLIPsfAAAARpC7/564xf4HAACAbuTu/03cYv8DAABAN3L3/zZuGWT/6//1/630//mf9RH0/yfPu/8/sVgsjqT/z6Z49P7f+//1/zt5//88/f8S+n/9v/5f/89Krb7/3/rF/fb/uft/F7cMsv8BAABgBLn7fx+35P7f2PffugcAAAAak7v/D3GL7/8DAABAN3L3/zFuGWT/6//1/630/8n7/8/+uL7e/395xalj9v//VL+k/z9Y+v95+v8l9P/6f/2//p+Vaq3/z93/p7hlkP0PAAAAI8jdf2/cYv8DAABAN3L3/zlusf8BAACgG7n7/xK3DLL/9f+99v9ZxOv/9f+t9P/e/+/9/4dD/z9P/7+E/l//r//X/7NSrfX/ufv/FgAA//+ZX2tO") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101000, 0x0) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.opaque\x00') 6m4.104990312s ago: executing program 0 (id=2742): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x121000, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r6, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) listen(r7, 0x3) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route(r0, 0x0, 0x40000) sendmsg$nl_route(r1, 0x0, 0x440b0) 6m2.798102761s ago: executing program 0 (id=2744): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = accept$unix(r1, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x8472, 0x10100, 0xfffffffe, 0x170, 0x0, r1}, &(0x7f00000002c0)=0x0, 0x0, &(0x7f0000000000)) r4 = getpid() setpgid(0xffffffffffffffff, r4) syz_io_uring_submit(r3, 0x0, 0x0, &(0x7f0000000000)) io_setup(0x8, 0x0) unshare(0x22020600) io_pgetevents(0x0, 0x2, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xa, 0x0, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x4000800) unshare(0x2000080) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x381c00, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r7, 0x50) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0xce23, 0x5, @empty, 0x4}, 0x1c) listen(r8, 0x50) close_range(r6, 0xffffffffffffffff, 0x0) 5m58.529425035s ago: executing program 0 (id=2750): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$video4linux(0x0, 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x300a, 0x0, 0x0, 0x7}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x98) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003980), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000004280)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x880) migrate_pages(r0, 0x1000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capget(0x0, &(0x7f0000000040)={0x101, 0x2, 0x3, 0x6, 0x0, 0x367}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) 5m50.881733404s ago: executing program 0 (id=2758): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {0x0, 0x4, r1, 0x10, 0x1, @in={0x2, 0x4e20, @local}}}, 0xa0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000850) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 5m48.407426918s ago: executing program 0 (id=2762): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) mkdir(0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x8, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r3, 0x108000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000005c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x0, 0x25, 0xfffe, 0xfc, 0x2, 0x3, 0xd, 0x8, 0xd5, 0xc, 0x600, 0x4, 0x26, 0x5, 0x4, [0x1, 0x2]}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40102, 0x0) 5m45.231844829s ago: executing program 41 (id=2762): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) mkdir(0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x8, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r3, 0x108000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000005c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x0, 0x25, 0xfffe, 0xfc, 0x2, 0x3, 0xd, 0x8, 0xd5, 0xc, 0x600, 0x4, 0x26, 0x5, 0x4, [0x1, 0x2]}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40102, 0x0) 1m44.901610365s ago: executing program 6 (id=3082): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe2$9p(&(0x7f00000001c0), 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m41.849348036s ago: executing program 6 (id=3086): writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$ndb(0x0, 0x0, 0xc0000) ioctl$NBD_DISCONNECT(r0, 0xab08) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m39.121952812s ago: executing program 6 (id=3087): writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$ndb(0x0, 0x0, 0xc0000) ioctl$NBD_DISCONNECT(r0, 0xab08) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m34.94430856s ago: executing program 6 (id=3090): writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$ndb(0x0, 0x0, 0xc0000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.160117356s ago: executing program 6 (id=3099): syz_open_dev$dri(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/time_for_children\x00') fchown(r2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x5e) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 1m10.711470704s ago: executing program 6 (id=3121): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x1d, @remote, 0x4e21, 0x4, 'wlc\x00', 0xa, 0x2, 0x2020067}, 0x2c) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x4e14, 0x912a, 0x5f, 0x0, 0xffffffffffffff1d) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null]}, 0x48) bind$netrom(r1, 0x0, 0x0) 55.470391032s ago: executing program 42 (id=3121): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x1d, @remote, 0x4e21, 0x4, 'wlc\x00', 0xa, 0x2, 0x2020067}, 0x2c) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x4e14, 0x912a, 0x5f, 0x0, 0xffffffffffffff1d) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null]}, 0x48) bind$netrom(r1, 0x0, 0x0) 38.070989492s ago: executing program 3 (id=3170): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x20, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x2, &(0x7f0000000180)=[@ip_retopts={{0x10, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x4}]}}}], 0x10}, 0x800) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000aa9400"/30], 0x50) 34.538445393s ago: executing program 3 (id=3171): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 34.127314562s ago: executing program 3 (id=3174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000200)={0x2, 0x6, 0x9, 0x7fffffff, 0x7, 0x8}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 33.880641243s ago: executing program 3 (id=3176): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 33.620604977s ago: executing program 3 (id=3178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84880) r3 = socket$inet6(0x10, 0x3, 0x0) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 32.460275341s ago: executing program 3 (id=3179): r0 = socket(0x1e, 0x4, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40000000) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 20.079568322s ago: executing program 7 (id=3207): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, '$', 0x3a, '!-$M--', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x46, 0x50, 0x43]}, 0x33) socket$netlink(0x10, 0x3, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x40000, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0xf}}, {{0xa, 0x200, 0x0, @empty}}}, 0x104) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) close(0xffffffffffffffff) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x4b, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffc}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}}}, 0x104) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000500000008000b400000000054000480500001800800010066776400440002800800014000000011080001400000000b0800"], 0xf0}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) 15.66198858s ago: executing program 43 (id=3179): r0 = socket(0x1e, 0x4, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40000000) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 12.235492413s ago: executing program 7 (id=3216): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) fcntl$lock(r2, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 8.959245922s ago: executing program 7 (id=3219): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) r3 = syz_io_uring_setup(0xf82, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000480)={0xb2, 0x3, 0x5}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup(r3) read(r0, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000240)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, 0x0) 3.622811154s ago: executing program 7 (id=3229): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x1, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.280890462s ago: executing program 7 (id=3231): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x68040200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) 3.046029941s ago: executing program 4 (id=3234): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000003c0)={0x6f, "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"}) 2.776160125s ago: executing program 1 (id=3235): sendmsg(0xffffffffffffffff, 0x0, 0x0) socket(0x18, 0x2, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) creat(0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, 0x0) close_range(r5, r6, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/address_bits', 0x1, 0x68) write$UHID_INPUT2(r7, 0x0, 0x6) 2.775830126s ago: executing program 4 (id=3236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0) 2.345597048s ago: executing program 1 (id=3237): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mount$9p_fd(0x0, 0x0, 0x0, 0x2400c5c, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 2.337134069s ago: executing program 4 (id=3238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x7, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 2.03193448s ago: executing program 1 (id=3239): setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_io_uring_setup(0xf05, &(0x7f0000000500)={0x0, 0x2, 0x40, 0x80000003, 0x42f7}, &(0x7f0000000100), &(0x7f0000000180), 0x0) r1 = syz_io_uring_setup(0x328, 0x0, 0x0, 0x0, &(0x7f0000000040)) io_uring_enter(r1, 0x742f, 0x800077ae, 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000a80)={0x0, 0x80000}) syz_open_dev$sg(0x0, 0x0, 0x40000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x7, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x200000000000006, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 872.904024ms ago: executing program 1 (id=3240): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xf1) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 795.466357ms ago: executing program 4 (id=3241): setreuid(0x0, 0xee00) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setrlimit(0x40000000000008, &(0x7f0000000100)={0x3, 0x9}) shmctl$SHM_LOCK(0x0, 0xb) 686.290855ms ago: executing program 4 (id=3242): pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 489.139128ms ago: executing program 1 (id=3243): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000000c0), 0x6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) 236.834971ms ago: executing program 1 (id=3244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0xb, 0x1}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x32) 121.41152ms ago: executing program 7 (id=3245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026408f0900000800b7"], 0x2c}}, 0x0) 0s ago: executing program 4 (id=3246): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): .453711][T14895] loop2: unable to read partition table [ 1224.493358][T14895] loop2: partition table beyond EOD, truncated [ 1224.565450][T16292] Dev loop2: unable to read RDB block 7 [ 1224.681503][T16292] loop2: unable to read partition table [ 1224.744541][T16292] loop2: partition table beyond EOD, truncated [ 1224.900417][T16292] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1225.100299][ T5136] Dev loop2: unable to read RDB block 7 [ 1225.129885][ T5136] loop2: unable to read partition table [ 1225.166815][ T5136] loop2: partition table beyond EOD, truncated [ 1225.670816][T16253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1225.795141][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2267'. [ 1225.810817][ T6119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1225.899758][T16302] loop5: detected capacity change from 0 to 40427 [ 1225.908161][T16302] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1225.916074][T16302] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1225.953946][T16302] F2FS-fs (loop5): invalid crc value [ 1225.976125][T16307] erspan0: entered promiscuous mode [ 1225.996096][T16307] macvtap1: entered promiscuous mode [ 1226.016302][T16302] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1226.061588][T16307] macvtap1: entered allmulticast mode [ 1226.086423][T16307] erspan0: entered allmulticast mode [ 1226.160649][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2267'. [ 1226.180165][T16302] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1226.189223][T16302] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1226.366771][T16308] erspan0: left allmulticast mode [ 1226.406074][T16308] erspan0: left promiscuous mode [ 1227.517388][ T28] audit: type=1800 audit(2000001161.311:185): pid=16325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2271" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 1227.732275][T16327] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2276'. [ 1227.765212][T16327] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2276'. [ 1227.899755][T13722] kworker/u4:11: attempt to access beyond end of device [ 1227.899755][T13722] loop5: rw=1, sector=77824, nr_sectors = 2056 limit=40427 [ 1227.920589][T16331] loop8: detected capacity change from 0 to 512 [ 1227.951443][T16331] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1227.972547][T13722] kworker/u4:11: attempt to access beyond end of device [ 1227.972547][T13722] loop5: rw=1, sector=79880, nr_sectors = 2040 limit=40427 [ 1228.003152][T16331] EXT4-fs error (device loop8): ext4_orphan_get:1430: comm syz.8.2279: bad orphan inode 131083 [ 1228.042087][T16331] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1228.113603][T13722] kworker/u4:11: attempt to access beyond end of device [ 1228.113603][T13722] loop5: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 1228.197375][T13722] kworker/u4:11: attempt to access beyond end of device [ 1228.197375][T13722] loop5: rw=1, sector=57344, nr_sectors = 1424 limit=40427 [ 1228.294960][T16342] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2283'. [ 1228.653079][T16346] No such timeout policy "syz1" [ 1229.406729][T15233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.174044][T16357] loop8: detected capacity change from 0 to 40427 [ 1231.186514][T16357] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1231.194524][T16357] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1231.208909][T16357] F2FS-fs (loop8): invalid crc value [ 1231.219940][T16357] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1231.271110][T16365] loop5: detected capacity change from 0 to 256 [ 1231.292657][T16357] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1231.300069][T16357] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1231.383204][T16373] loop2: detected capacity change from 0 to 7 [ 1231.409040][T16365] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1231.456776][T16373] loop2: [ 1231.459933][T16373] loop2: partition table partially beyond EOD, truncated [ 1231.479481][T16365] FAT-fs (loop5): Filesystem has been set read-only [ 1231.580948][T16365] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1231.608255][T16365] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1232.511863][ T28] audit: type=1800 audit(2000001166.441:186): pid=16376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2286" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 1233.083553][T13718] kworker/u4:7: attempt to access beyond end of device [ 1233.083553][T13718] loop8: rw=1, sector=77824, nr_sectors = 2304 limit=40427 [ 1233.122577][T13718] kworker/u4:7: attempt to access beyond end of device [ 1233.122577][T13718] loop8: rw=1, sector=80128, nr_sectors = 1792 limit=40427 [ 1233.205588][T13718] kworker/u4:7: attempt to access beyond end of device [ 1233.205588][T13718] loop8: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 1233.262178][T13718] kworker/u4:7: attempt to access beyond end of device [ 1233.262178][T13718] loop8: rw=1, sector=57344, nr_sectors = 768 limit=40427 [ 1233.945446][T16397] tipc: Started in network mode [ 1233.958164][T16397] tipc: Node identity fffffff8, cluster identity 4711 [ 1233.973410][T16397] tipc: Node number set to 4294967288 [ 1234.078366][T16401] loop6: detected capacity change from 0 to 512 [ 1234.087038][T16403] loop5: detected capacity change from 0 to 512 [ 1234.107338][T16403] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1234.122819][T16401] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1234.189287][T16403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1234.200335][T16401] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.2299: bad orphan inode 131083 [ 1234.202088][T16403] System zones: 1-12 [ 1234.240202][T16403] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1234.263807][T16401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1234.271403][T16403] EXT4-fs (loop5): 1 truncate cleaned up [ 1234.288310][T16403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.367165][ T28] audit: type=1800 audit(2000001169.121:187): pid=16403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2300" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1234.492127][T16403] loop5: detected capacity change from 512 to 0 [ 1234.517647][T16417] syz.5.2300: attempt to access beyond end of device [ 1234.517647][T16417] loop5: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1234.549513][T16417] syz.5.2300: attempt to access beyond end of device [ 1234.549513][T16417] loop5: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 1234.575128][T16417] syz.5.2300: attempt to access beyond end of device [ 1234.575128][T16417] loop5: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 1234.605568][T16417] syz.5.2300: attempt to access beyond end of device [ 1234.605568][T16417] loop5: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 1234.629915][T16417] EXT4-fs error (device loop5): ext4_get_inode_loc:4634: inode #15: block 8: comm syz.5.2300: unable to read itable block [ 1234.672142][T16417] syz.5.2300: attempt to access beyond end of device [ 1234.672142][T16417] loop5: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1234.697915][T16417] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 1234.710732][T16417] EXT4-fs (loop5): I/O error while writing superblock [ 1234.734822][T11004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.789677][ T7263] syz-executor: attempt to access beyond end of device [ 1234.789677][ T7263] loop5: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 1234.855346][ T7263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.867478][ T7263] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 1234.901636][ T7263] EXT4-fs (loop5): I/O error while writing superblock [ 1235.220259][ T6119] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1235.267018][ T6119] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.397424][ T6119] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1235.422283][ T6119] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.502660][ T6119] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1235.523363][ T6119] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.590641][ T5806] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1235.623779][ T6119] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1235.650627][ T6119] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.801315][ T5806] usb 7-1: Using ep0 maxpacket: 8 [ 1235.827482][ T5806] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1235.859494][ T5806] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1235.894217][ T5806] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1235.924231][ T5806] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.961535][ T5806] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1236.000606][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.098834][ T6119] tipc: Left network mode [ 1236.270754][ T5806] usb 7-1: GET_CAPABILITIES returned 0 [ 1236.276707][ T5806] usbtmc 7-1:16.0: can't read capabilities [ 1236.527691][T15216] usb 7-1: USB disconnect, device number 14 [ 1236.568903][T16438] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1236.597309][ T6119] bond2: (slave ip6gretap1): Releasing active interface [ 1237.332427][T16458] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2319'. [ 1237.722440][T16463] No such timeout policy "syz1" [ 1239.401699][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.408224][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.832229][T13848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1239.846163][T13848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1239.854693][T16475] loop8: detected capacity change from 0 to 2048 [ 1239.893023][T13848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1239.913494][T13848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1239.943470][T13848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1239.967586][T16475] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1239.969393][T13848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1240.034521][T16475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1240.194889][ T28] audit: type=1800 audit(2000001174.931:188): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2323" name="file1" dev="loop8" ino=1346 res=0 errno=0 [ 1240.357176][T16476] lo speed is unknown, defaulting to 1000 [ 1240.502973][ T28] audit: type=1800 audit(2000001175.271:189): pid=16483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2323" name="file1" dev="loop8" ino=1346 res=0 errno=0 [ 1241.036785][T16492] lo speed is unknown, defaulting to 1000 [ 1241.118025][ T6119] hsr_slave_0: left promiscuous mode [ 1241.128952][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.142219][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.182270][ T6119] vlan2: left allmulticast mode [ 1241.187400][ T6119] geneve0: left allmulticast mode [ 1241.208269][ T6119] bridge0: port 2(vlan2) entered disabled state [ 1241.229186][T16502] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2329'. [ 1241.390680][ T7635] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1241.611012][ T7635] usb 7-1: config 0 has no interfaces? [ 1241.636923][ T7635] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1241.687101][T16510] No such timeout policy "syz1" [ 1242.181114][T10176] Bluetooth: hci3: command tx timeout [ 1243.121616][T16523] io-wq is not configured for unbound workers [ 1243.256623][ T6119] bond2 (unregistering): Released all slaves [ 1243.383190][ T6119] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1243.402000][ T6119] bridge1 (unregistering): left promiscuous mode [ 1243.408411][ T6119] bridge1 (unregistering): left allmulticast mode [ 1243.742247][ T7635] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.750343][ T7635] usb 7-1: Product: syz [ 1243.755143][ T7635] usb 7-1: Manufacturer: syz [ 1243.759833][ T7635] usb 7-1: SerialNumber: syz [ 1243.769360][ T7635] usb 7-1: config 0 descriptor?? [ 1243.942162][ T6119] bond1 (unregistering): Released all slaves [ 1243.982718][ T6119] pim6reg (unregistering): left allmulticast mode [ 1244.217420][T10176] Bluetooth: hci3: command tx timeout [ 1245.081396][ T6119] team0 (unregistering): Port device team_slave_1 removed [ 1245.179150][ T6119] team0 (unregistering): Port device team_slave_0 removed [ 1245.273386][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.375837][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.173732][ T6119] bond0 (unregistering): Released all slaves [ 1246.281432][T10176] Bluetooth: hci3: command tx timeout [ 1246.471262][T16476] chnl_net:caif_netlink_parms(): no params data found [ 1246.730067][T16534] loop8: detected capacity change from 0 to 2048 [ 1246.885315][T16534] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.939544][T16534] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.071276][ T28] audit: type=1800 audit(2000001181.821:190): pid=16546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2334" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1247.133554][T16476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.155955][T16476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.205481][T16476] bridge_slave_0: entered allmulticast mode [ 1247.214494][T16476] bridge_slave_0: entered promiscuous mode [ 1247.249927][T16476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.304592][T16476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.328428][T16476] bridge_slave_1: entered allmulticast mode [ 1247.351094][T16476] bridge_slave_1: entered promiscuous mode [ 1247.362365][T15233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.496117][T16476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.594360][T16476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.751505][T16476] team0: Port device team_slave_0 added [ 1247.782347][T16476] team0: Port device team_slave_1 added [ 1247.859341][T16476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.873217][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.918429][T16476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.936792][T16476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.944440][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.985448][T16476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.069562][T16476] hsr_slave_0: entered promiscuous mode [ 1248.099911][T16476] hsr_slave_1: entered promiscuous mode [ 1248.127684][T16476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1248.145630][ T7635] usb 7-1: USB disconnect, device number 15 [ 1248.151916][T16476] Cannot create hsr debugfs directory [ 1248.375607][T10176] Bluetooth: hci3: command tx timeout [ 1248.408905][ T28] audit: type=1326 audit(2000001183.161:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.0.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e39c819 code=0x7ffc0000 [ 1248.503142][ T28] audit: type=1326 audit(2000001183.161:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.0.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e39c819 code=0x7ffc0000 [ 1248.544414][ T28] audit: type=1326 audit(2000001183.161:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.0.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e39c819 code=0x7ffc0000 [ 1248.606327][ T28] audit: type=1326 audit(2000001183.191:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.0.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe14e39c819 code=0x7ffc0000 [ 1248.646335][ T28] audit: type=1326 audit(2000001183.191:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.0.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e39c819 code=0x7ffc0000 [ 1248.740739][ T28] audit: type=1326 audit(2000001183.191:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.0.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e39c819 code=0x7ffc0000 [ 1248.829480][ T28] audit: type=1326 audit(2000001183.191:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.0.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e39c819 code=0x7ffc0000 [ 1248.857774][ T6119] IPVS: stop unused estimator thread 0... [ 1248.924729][ T28] audit: type=1326 audit(2000001183.201:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.0.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e39c819 code=0x7ffc0000 [ 1249.023239][ T28] audit: type=1326 audit(2000001183.211:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.0.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14e39c819 code=0x7ffc0000 [ 1249.238655][T16476] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1249.285394][T16476] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1249.357773][T16476] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1249.399873][T16476] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1249.702911][T16476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.776230][T16476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.843266][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.850593][ T6119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.938971][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.946342][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.766615][T16476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.879815][T16632] mkiss: ax0: crc mode is auto. [ 1251.589968][T16629] loop8: detected capacity change from 0 to 32768 [ 1251.660856][T16629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2352 (16629) [ 1251.741506][T16629] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1251.785712][T16629] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1251.819978][T16629] BTRFS info (device loop8): setting nodatasum [ 1251.843833][T16629] BTRFS info (device loop8): force zlib compression, level 3 [ 1251.878125][T16629] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1251.898784][T16629] BTRFS info (device loop8): use lzo compression, level 0 [ 1251.917184][T16629] BTRFS info (device loop8): turning on flush-on-commit [ 1251.953610][T16476] veth0_vlan: entered promiscuous mode [ 1251.972141][T16629] BTRFS info (device loop8): enabling auto defrag [ 1251.994496][T16629] BTRFS info (device loop8): max_inline at 4096 [ 1252.019239][T16629] BTRFS info (device loop8): using free space tree [ 1252.038295][T16476] veth1_vlan: entered promiscuous mode [ 1252.141092][T16629] BTRFS info (device loop8): enabling ssd optimizations [ 1252.156904][T16662] netlink: 'syz.6.2358': attribute type 1 has an invalid length. [ 1252.220346][T16476] veth0_macvtap: entered promiscuous mode [ 1252.254295][T16476] veth1_macvtap: entered promiscuous mode [ 1252.346632][T16476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.394046][T16476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.428297][T16476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.469536][T16476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.495478][T16476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.526013][T16476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.575569][T16476] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.604252][T16476] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.628466][T16476] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.650823][T16476] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.034516][T15233] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1253.056897][T13722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.087725][T13722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.210751][T13733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.233079][T13733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.962836][T16711] loop6: detected capacity change from 0 to 2048 [ 1254.136504][T16711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1254.160893][T16717] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1254.502288][T16711] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 98 with error 28 [ 1254.571701][T16711] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1254.571701][T16711] [ 1254.660559][T16711] EXT4-fs (loop6): Total free blocks count 0 [ 1254.666907][T16711] EXT4-fs (loop6): Free/Dirty block details [ 1254.711937][T16711] EXT4-fs (loop6): free_blocks=2415919104 [ 1254.731704][T16711] EXT4-fs (loop6): dirty_blocks=112 [ 1254.754493][T16711] EXT4-fs (loop6): Block reservation details [ 1254.797791][T16711] EXT4-fs (loop6): i_reserved_data_blocks=7 [ 1254.962413][T11004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.209563][T16728] syzkaller0: entered promiscuous mode [ 1255.236401][T16728] syzkaller0: entered allmulticast mode [ 1257.642394][T16763] siw: device registration error -23 [ 1258.447000][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1259.110264][T16768] loop2: detected capacity change from 0 to 7 [ 1259.124514][T16768] Dev loop2: unable to read RDB block 7 [ 1259.130205][T16768] loop2: AHDI p1 p2 p3 [ 1259.156876][T16768] loop2: partition table partially beyond EOD, truncated [ 1259.164810][T16768] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1259.174577][T16768] loop2: p3 start 335544320 is beyond EOD, truncated [ 1259.550443][T16760] loop6: detected capacity change from 0 to 40427 [ 1259.598574][T16760] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 1259.609440][T16760] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1259.631983][T16760] F2FS-fs (loop6): invalid crc value [ 1259.924739][T16760] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1259.933225][T16760] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1260.140843][T16760] bio_check_eod: 1 callbacks suppressed [ 1260.140861][T16760] syz.6.2377: attempt to access beyond end of device [ 1260.140861][T16760] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1260.359534][T11004] syz-executor: attempt to access beyond end of device [ 1260.359534][T11004] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1260.398095][T11004] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1260.783582][T16791] netlink: 268 bytes leftover after parsing attributes in process `syz.9.2386'. [ 1261.200851][ T787] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1261.535211][ T787] usb 7-1: Using ep0 maxpacket: 16 [ 1261.621612][ T787] usb 7-1: config 0 has no interfaces? [ 1261.629585][ T787] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1261.650453][ T787] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1261.700737][ T787] usb 7-1: Manufacturer: syz [ 1261.747025][ T787] usb 7-1: config 0 descriptor?? [ 1262.025577][T15216] usb 7-1: USB disconnect, device number 16 [ 1264.877058][T16793] lo speed is unknown, defaulting to 1000 [ 1265.317590][T16808] loop8: detected capacity change from 0 to 2048 [ 1265.489713][T16808] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1265.568406][T16808] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1265.719429][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1265.719456][ T28] audit: type=1800 audit(2000001200.471:228): pid=16808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2388" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1265.801482][T16808] loop8: detected capacity change from 2048 to 64 [ 1265.859446][T16808] syz.8.2388: attempt to access beyond end of device [ 1265.859446][T16808] loop8: rw=524288, sector=640, nr_sectors = 4 limit=64 [ 1265.906966][T16808] syz.8.2388: attempt to access beyond end of device [ 1265.906966][T16808] loop8: rw=0, sector=640, nr_sectors = 4 limit=64 [ 1265.978292][T16808] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5939: Out of memory [ 1266.018226][T16808] EXT4-fs error (device loop8): ext4_dirty_inode:6143: inode #15: comm syz.8.2388: mark_inode_dirty error [ 1266.070805][ T28] audit: type=1800 audit(2000001200.821:229): pid=16808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2388" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1266.174058][T15233] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5939: Out of memory [ 1266.256108][T15233] EXT4-fs error (device loop8): ext4_dirty_inode:6143: inode #2: comm syz-executor: mark_inode_dirty error [ 1266.349190][T13728] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.375830][T15233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.460589][T16814] kmmpd-loop8: attempt to access beyond end of device [ 1266.460589][T16814] loop8: rw=14337, sector=320, nr_sectors = 4 limit=64 [ 1266.508334][T16814] Buffer I/O error on dev loop8, logical block 80, lost sync page write [ 1266.635349][T13728] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.869305][T13728] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.039051][T13728] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.757459][T13848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1267.803483][T13848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1267.836570][T13848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1267.872351][T13848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1267.882969][T13848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1267.890856][T13848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1268.299001][T16855] lo speed is unknown, defaulting to 1000 [ 1269.751221][T15513] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1269.952822][T15513] usb 7-1: Using ep0 maxpacket: 16 [ 1269.961210][T15513] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.971690][T13848] Bluetooth: hci2: command tx timeout [ 1269.980658][T15513] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1269.994204][T15513] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1270.003705][T15513] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.021413][T15513] usb 7-1: config 0 descriptor?? [ 1270.029902][T15513] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1270.290425][T16855] chnl_net:caif_netlink_parms(): no params data found [ 1270.508842][T10320] usb 7-1: USB disconnect, device number 17 [ 1270.692777][T10176] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1270.708608][T10176] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1270.730080][T10176] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1270.754198][T10176] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1270.765605][T10176] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1270.778465][T10176] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1270.963119][T13728] hsr_slave_0: left promiscuous mode [ 1270.986313][T13728] hsr_slave_1: left promiscuous mode [ 1270.993427][T13728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.001142][T13728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.009429][T13728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.017245][T13728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.031473][T13728] bridge_slave_1: left allmulticast mode [ 1271.042580][T13728] bridge_slave_1: left promiscuous mode [ 1271.048471][T13728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.071900][T13728] bridge_slave_0: left allmulticast mode [ 1271.091083][T13728] bridge_slave_0: left promiscuous mode [ 1271.097517][T13728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.203420][T13728] veth1_macvtap: left promiscuous mode [ 1271.209228][T13728] veth0_macvtap: left promiscuous mode [ 1271.226680][T13728] veth1_vlan: left promiscuous mode [ 1271.232548][T13728] veth0_vlan: left promiscuous mode [ 1272.050703][T13848] Bluetooth: hci2: command tx timeout [ 1272.906558][T13728] team0 (unregistering): Port device team_slave_1 removed [ 1272.938316][T13848] Bluetooth: hci3: command tx timeout [ 1273.017916][T13728] team0 (unregistering): Port device team_slave_0 removed [ 1273.122162][T13728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1273.225889][T13728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1274.035079][T13728] bond0 (unregistering): Released all slaves [ 1274.130873][T13848] Bluetooth: hci2: command tx timeout [ 1274.208880][T16855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.220780][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.228768][T16855] bridge_slave_0: entered allmulticast mode [ 1274.237461][T16855] bridge_slave_0: entered promiscuous mode [ 1274.259213][T16908] lo speed is unknown, defaulting to 1000 [ 1274.267330][T16855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.276091][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.288948][T16855] bridge_slave_1: entered allmulticast mode [ 1274.297414][T16855] bridge_slave_1: entered promiscuous mode [ 1274.494242][T16855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.527809][T16855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.739927][T16855] team0: Port device team_slave_0 added [ 1274.762863][T16855] team0: Port device team_slave_1 added [ 1274.836089][T16855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.843360][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.870327][T16855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.884214][T16855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.892216][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.945973][T16855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.025608][T13848] Bluetooth: hci3: command tx timeout [ 1275.184699][T16855] hsr_slave_0: entered promiscuous mode [ 1275.192434][T16855] hsr_slave_1: entered promiscuous mode [ 1275.215002][T16855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1275.225337][T16855] Cannot create hsr debugfs directory [ 1275.310025][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 1275.547042][T16908] chnl_net:caif_netlink_parms(): no params data found [ 1275.704256][T13728] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.787053][T16965] tipc: Enabling of bearer rejected, failed to enable media [ 1276.006915][T13728] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.205359][T13848] Bluetooth: hci2: command tx timeout [ 1276.254096][T13728] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.420272][T13728] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.463776][T16908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.476686][T16908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.484866][T16908] bridge_slave_0: entered allmulticast mode [ 1276.493508][T16908] bridge_slave_0: entered promiscuous mode [ 1276.540749][T15513] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1276.558963][T16908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.575695][T16908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.586039][T16908] bridge_slave_1: entered allmulticast mode [ 1276.594804][T16908] bridge_slave_1: entered promiscuous mode [ 1276.734840][T15513] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1276.764397][T15513] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.790228][T15513] usb 7-1: config 0 has no interface number 0 [ 1276.806222][T15513] usb 7-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1276.840818][T15513] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1276.860184][T15513] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1276.907114][T15513] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.937983][T15513] usb 7-1: Product: syz [ 1276.957848][T15513] usb 7-1: Manufacturer: syz [ 1276.971144][T15513] usb 7-1: SerialNumber: syz [ 1276.994292][T15513] usb 7-1: config 0 descriptor?? [ 1277.026286][T15513] CoreChips: probe of 7-1:0.41 failed with error -22 [ 1277.080829][T13848] Bluetooth: hci3: command tx timeout [ 1277.210076][T16908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.277422][T16908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.688157][T17023] loop6: detected capacity change from 0 to 512 [ 1277.718588][T17023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1277.729507][T17023] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1277.759763][T17023] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1277.775411][T17023] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1277.796701][T17023] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1277.816860][T17023] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000] [ 1277.825981][T17023] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1277.833210][T17023] EXT4-fs error (device loop6): ext4_ext_check_inode:530: inode #4: comm syz.6.2425: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1277.869495][T17023] EXT4-fs error (device loop6): ext4_quota_enable:7147: comm syz.6.2425: Bad quota inode: 4, type: 1 [ 1277.881292][T17023] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1277.899800][T17023] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1277.941468][T17023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1277.976243][T16908] team0: Port device team_slave_0 added [ 1277.987919][T16908] team0: Port device team_slave_1 added [ 1278.037066][T13728] tipc: Left network mode [ 1278.083366][T16908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.098215][T16908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.160814][T16908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.269664][T16908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.276905][T16908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.304131][T16908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.407227][T16908] hsr_slave_0: entered promiscuous mode [ 1278.415474][T16908] hsr_slave_1: entered promiscuous mode [ 1278.424899][T16908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1278.433825][T16908] Cannot create hsr debugfs directory [ 1279.160754][T13848] Bluetooth: hci3: command tx timeout [ 1279.452162][T17045] usb 7-1: USB disconnect, device number 18 [ 1279.477036][T11004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.589064][T13728] hsr_slave_0: left promiscuous mode [ 1279.596401][T13728] hsr_slave_1: left promiscuous mode [ 1279.616990][T13728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1279.643727][T13728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.682540][T13728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.690278][T13728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.707583][T13728] bridge_slave_1: left allmulticast mode [ 1279.718515][T13728] bridge_slave_1: left promiscuous mode [ 1279.731130][T13728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.748078][T13728] bridge_slave_0: left allmulticast mode [ 1279.755347][T13728] bridge_slave_0: left promiscuous mode [ 1279.767331][T13728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.839639][T13728] veth1_macvtap: left promiscuous mode [ 1279.847289][T13728] veth0_macvtap: left promiscuous mode [ 1279.859895][T13728] veth1_vlan: left promiscuous mode [ 1279.871280][T13728] veth0_vlan: left promiscuous mode [ 1281.286160][T13728] team0 (unregistering): Port device team_slave_1 removed [ 1281.399803][T13728] team0 (unregistering): Port device team_slave_0 removed [ 1281.503781][T13728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.604915][T13728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.407802][T13728] bond0 (unregistering): Released all slaves [ 1282.586508][T17055] tipc: Enabling of bearer rejected, failed to enable media [ 1282.786640][T17071] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2432'. [ 1285.322739][T17115] netlink: 'syz.0.2441': attribute type 10 has an invalid length. [ 1286.210366][T16908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1286.261738][T16908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1286.402514][T16908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1286.762750][T16908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1287.112378][T16855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1287.123739][T16855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1287.140782][T16855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1287.152580][T16855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1287.213022][T17150] binder: 17149:17150 ioctl c0306201 2000000003c0 returned -14 [ 1287.369407][T16908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.429702][T16908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.474023][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.481556][ T6075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.496941][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.504609][ T6075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.534574][T16855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.635701][T16855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.691025][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.698272][ T6075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.724309][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.731774][ T6075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.327179][T16908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.404211][T16855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.448662][T16908] veth0_vlan: entered promiscuous mode [ 1288.506747][T16908] veth1_vlan: entered promiscuous mode [ 1288.537793][T16855] veth0_vlan: entered promiscuous mode [ 1288.559728][T16855] veth1_vlan: entered promiscuous mode [ 1288.618330][T16908] veth0_macvtap: entered promiscuous mode [ 1288.642032][T16908] veth1_macvtap: entered promiscuous mode [ 1288.670209][T16908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1288.711862][T16908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1288.745654][T16908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.755826][T16908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.767029][T16908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.777772][T16908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.810037][T16855] veth0_macvtap: entered promiscuous mode [ 1288.859606][T16855] veth1_macvtap: entered promiscuous mode [ 1288.959069][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.982565][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.997489][T16855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.027130][T16855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.053512][T16855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.082259][T16855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.116749][T16855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.132117][T16855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.144917][T16855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.157440][T16855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.177916][T13733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.203507][T13733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.418187][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.434484][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.531766][ T6075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.539686][ T6075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.635764][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.665305][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.766577][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2458'. [ 1289.876722][ T5755] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1290.026726][T17197] input: syz0 as /devices/virtual/input/input15 [ 1290.110859][ T5755] usb 7-1: Using ep0 maxpacket: 16 [ 1290.128700][ T5755] usb 7-1: config 0 has no interfaces? [ 1290.144833][ T5755] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1290.168444][ T5755] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.213913][ T5755] usb 7-1: config 0 descriptor?? [ 1290.477202][T17045] usb 7-1: USB disconnect, device number 19 [ 1292.923200][T17259] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1293.177317][T17269] siw: device registration error -23 [ 1294.017909][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.492919][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.173693][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.324443][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.424767][T10176] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1297.439491][T10176] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1297.451037][T10176] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1297.472263][T10176] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1297.482440][T10176] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1297.500233][T10176] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1297.718477][T17302] lo speed is unknown, defaulting to 1000 [ 1299.280922][ T28] audit: type=1800 audit(2000001234.031:230): pid=17328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2492" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1299.523593][T17302] chnl_net:caif_netlink_parms(): no params data found [ 1299.560998][T13848] Bluetooth: hci2: command tx timeout [ 1300.689257][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.699875][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.924579][T17302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.961134][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.989011][T17302] bridge_slave_0: entered allmulticast mode [ 1301.019285][T17302] bridge_slave_0: entered promiscuous mode [ 1301.224002][T17302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.246759][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.263839][T17302] bridge_slave_1: entered allmulticast mode [ 1301.279255][T17302] bridge_slave_1: entered promiscuous mode [ 1301.628166][T17302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.640783][T13848] Bluetooth: hci2: command tx timeout [ 1301.677789][T17302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.101687][T17302] team0: Port device team_slave_0 added [ 1302.314522][T17302] team0: Port device team_slave_1 added [ 1302.474748][T17302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.505894][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.897588][T17302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.318261][T17302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.371661][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.448931][T17302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.561820][ T42] hsr_slave_0: left promiscuous mode [ 1303.591375][ T42] hsr_slave_1: left promiscuous mode [ 1303.615383][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.629857][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.661695][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.678283][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.701609][ T42] bridge_slave_1: left allmulticast mode [ 1303.711708][ T42] bridge_slave_1: left promiscuous mode [ 1303.722156][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.730754][T13848] Bluetooth: hci2: command tx timeout [ 1303.752808][ T42] bridge_slave_0: left allmulticast mode [ 1303.770615][ T42] bridge_slave_0: left promiscuous mode [ 1303.781567][T17425] loop6: detected capacity change from 0 to 8192 [ 1303.796329][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.989570][ T42] veth1_macvtap: left promiscuous mode [ 1304.003598][ T42] veth0_macvtap: left promiscuous mode [ 1304.019869][ T42] veth1_vlan: left promiscuous mode [ 1304.031052][ T42] veth0_vlan: left promiscuous mode [ 1305.792609][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1305.803090][T13848] Bluetooth: hci2: command tx timeout [ 1305.905613][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1306.009484][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.115770][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1306.950173][ T42] bond0 (unregistering): Released all slaves [ 1307.359922][T17302] hsr_slave_0: entered promiscuous mode [ 1307.515046][T17302] hsr_slave_1: entered promiscuous mode [ 1307.823401][T17302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1308.016107][T17302] Cannot create hsr debugfs directory [ 1309.088844][T17461] syzkaller0: entered promiscuous mode [ 1309.110603][T17461] syzkaller0: entered allmulticast mode [ 1309.978710][T17489] siw: device registration error -23 [ 1312.435101][T17512] vivid-003: disconnect [ 1312.440065][T17511] vivid-003: reconnect [ 1314.046692][T17302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1314.081126][T17302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1314.104391][T17302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1314.144346][T17302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1314.442921][T17544] bridge0: entered promiscuous mode [ 1314.464043][T17544] bridge0: left promiscuous mode [ 1314.648242][T17302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.743063][T17302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.792177][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.799438][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.861881][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.869218][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.093700][T17302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1315.832123][T17302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.963683][T17302] veth0_vlan: entered promiscuous mode [ 1317.019236][T17302] veth1_vlan: entered promiscuous mode [ 1317.175387][T17302] veth0_macvtap: entered promiscuous mode [ 1317.219649][T17302] veth1_macvtap: entered promiscuous mode [ 1317.279127][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.305882][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.328985][T17302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1317.346530][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.368718][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.410842][T17302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1317.428315][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 1317.521454][T17302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.549353][T17302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.575488][T17302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.588184][T17302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.901362][T13733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.938799][T13733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.959252][T17606] netlink: 'syz.0.2539': attribute type 12 has an invalid length. [ 1319.068842][T13718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.089605][T13718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.920917][T17047] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1321.316248][T17047] usb 4-1: Using ep0 maxpacket: 16 [ 1321.357086][T17638] loop4: detected capacity change from 0 to 256 [ 1321.392990][T17047] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.458857][T17638] syz_tun: entered allmulticast mode [ 1321.465972][T17047] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1321.535346][T17047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.561732][T17047] usb 4-1: Product: syz [ 1321.574814][T17047] usb 4-1: Manufacturer: syz [ 1321.579799][T17641] veth1_to_team: entered allmulticast mode [ 1321.589981][T17047] usb 4-1: SerialNumber: syz [ 1321.622025][T17047] usb 4-1: config 0 descriptor?? [ 1321.735453][T17635] syz_tun: left allmulticast mode [ 1321.921370][T17645] syzkaller0: entered promiscuous mode [ 1321.927110][T17645] syzkaller0: entered allmulticast mode [ 1322.126724][T10324] usb 4-1: USB disconnect, device number 2 [ 1322.828408][T17664] syzkaller0: entered promiscuous mode [ 1322.848889][T17664] syzkaller0: entered allmulticast mode [ 1323.130672][T10324] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1323.450880][T10324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.478786][T10324] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1323.525430][T10324] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1323.561706][T10324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.575994][T10324] usb 4-1: config 0 descriptor?? [ 1323.789192][T17667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.852684][T17667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.976514][T17667] team0: Device gtp0 is of different type [ 1324.348666][ T5755] usb 4-1: USB disconnect, device number 3 [ 1325.905471][T17704] nfs: Unknown parameter 'smackfsroot' [ 1327.340788][ T7968] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1327.551061][ T7968] usb 4-1: Using ep0 maxpacket: 16 [ 1327.567298][ T7968] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1327.591287][ T7968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.641624][ T7968] usb 4-1: config 0 has no interface number 0 [ 1327.648774][ T7968] usb 4-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1327.710852][ T7968] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1327.753457][ T7968] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1327.795682][ T7968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.811004][ T7968] usb 4-1: Product: syz [ 1327.819945][ T7968] usb 4-1: Manufacturer: syz [ 1327.850653][ T7968] usb 4-1: SerialNumber: syz [ 1327.862257][ T7968] usb 4-1: config 0 descriptor?? [ 1327.878225][ T7968] sr9700: probe of 4-1:0.41 failed with error -22 [ 1327.905619][T17724] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2561'. [ 1328.169360][T10324] usb 4-1: USB disconnect, device number 4 [ 1328.710959][T10324] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1328.901301][T10324] usb 4-1: Using ep0 maxpacket: 8 [ 1329.005240][T10324] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1329.121460][T10324] usb 4-1: config 0 has no interface number 0 [ 1329.128448][T10324] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1329.238303][T10324] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1329.300909][T10324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.372080][T10324] usb 4-1: config 0 descriptor?? [ 1329.601325][T10324] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1330.532489][T17755] syzkaller0: entered promiscuous mode [ 1330.538237][T17755] syzkaller0: entered allmulticast mode [ 1330.767055][ T7968] usb 4-1: USB disconnect, device number 5 [ 1331.180617][T10320] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1331.386617][T10320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.419018][T10320] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1331.459265][T10320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.564362][T10320] usb 5-1: config 0 descriptor?? [ 1331.596712][T10320] pwc: Askey VC010 type 2 USB webcam detected. [ 1333.302573][T10320] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1333.312068][T10320] pwc: recv_control_msg error -32 req 02 val 2700 [ 1333.330266][T10320] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1333.361473][T10320] pwc: recv_control_msg error -32 req 04 val 1000 [ 1333.518985][T10320] pwc: recv_control_msg error -32 req 04 val 1300 [ 1333.527254][T10320] pwc: recv_control_msg error -32 req 04 val 1400 [ 1333.576551][T10320] pwc: recv_control_msg error -32 req 02 val 2000 [ 1333.610581][T10320] pwc: recv_control_msg error -32 req 02 val 2100 [ 1333.759442][T10320] pwc: recv_control_msg error -32 req 04 val 1500 [ 1333.954976][T10320] pwc: recv_control_msg error -32 req 02 val 2500 [ 1334.417690][T10320] pwc: recv_control_msg error -32 req 02 val 2400 [ 1334.509235][T10320] pwc: recv_control_msg error -32 req 02 val 2600 [ 1334.673522][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2579'. [ 1334.775195][T10320] pwc: recv_control_msg error -71 req 02 val 2800 [ 1334.793163][T10320] pwc: recv_control_msg error -71 req 04 val 1100 [ 1334.811414][T10320] pwc: recv_control_msg error -71 req 04 val 1200 [ 1334.856510][T10320] pwc: Registered as video103. [ 1334.881332][T10320] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 1334.930383][T10320] usb 5-1: USB disconnect, device number 5 [ 1336.199727][T17850] siw: device registration error -23 [ 1337.670019][T17857] syzkaller0: entered promiscuous mode [ 1337.676039][T17857] syzkaller0: entered allmulticast mode [ 1337.850687][T17861] x_tables: duplicate entry at hook 3 [ 1337.882766][T17861] netlink: 'syz.3.2584': attribute type 16 has an invalid length. [ 1337.899852][T17861] netlink: 'syz.3.2584': attribute type 17 has an invalid length. [ 1340.445532][T17861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1342.419726][T17932] tipc: Resetting bearer [ 1345.430282][T17948] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2589'. [ 1346.320536][ T5755] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1346.593890][ T5755] usb 5-1: Using ep0 maxpacket: 16 [ 1346.614373][ T5755] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.648577][ T5755] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1346.701792][ T5755] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1346.728456][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.846691][T17967] loop6: detected capacity change from 0 to 1024 [ 1347.854539][T17967] EXT4-fs: Ignoring removed bh option [ 1348.004045][T17967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.171200][ T28] audit: type=1800 audit(2000001282.891:231): pid=17967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2600" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1348.571444][ T5755] usb 5-1: Product: syz [ 1348.575826][ T5755] usb 5-1: Manufacturer: syz [ 1348.585127][ T5755] usb 5-1: SerialNumber: syz [ 1348.591930][T17973] tipc: Enabling of bearer rejected, failed to enable media [ 1348.704076][ T5755] usb 5-1: can't set config #1, error -71 [ 1348.716059][ T5755] usb 5-1: USB disconnect, device number 6 [ 1348.913532][T11004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.922977][T17988] x_tables: duplicate entry at hook 3 [ 1349.973845][T17988] netlink: 'syz.6.2602': attribute type 16 has an invalid length. [ 1350.111679][T17988] netlink: 'syz.6.2602': attribute type 17 has an invalid length. [ 1352.846205][T18010] Option ' ' to dns_resolver key: bad/missing value [ 1353.281822][T17988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1353.602980][T18022] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1357.144340][T18035] netlink: 268 bytes leftover after parsing attributes in process `syz.6.2610'. [ 1357.528296][T18042] No such timeout policy "syz1" [ 1359.347142][T18060] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2615'. [ 1362.246506][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.253039][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.453122][T18077] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1362.640988][T18091] syzkaller0: entered promiscuous mode [ 1362.655404][T18091] syzkaller0: entered allmulticast mode [ 1363.290349][T18106] loop3: detected capacity change from 0 to 40427 [ 1363.312310][T18106] F2FS-fs (loop3): invalid crc value [ 1363.334516][T18106] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1363.418553][T18106] F2FS-fs (loop3): Start checkpoint disabled! [ 1363.437108][T18106] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1364.174115][ T6119] kworker/u4:25: attempt to access beyond end of device [ 1364.174115][ T6119] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1364.188608][ T6119] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1364.433148][ T6119] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1364.591358][ T6119] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1365.267069][T18132] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2620'. [ 1370.101736][T18165] syzkaller0: entered promiscuous mode [ 1370.107396][T18165] syzkaller0: entered allmulticast mode [ 1375.115110][T18201] loop4: detected capacity change from 0 to 1024 [ 1377.663809][T18214] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1378.246084][ T42] hfsplus: b-tree write err: -5, ino 25 [ 1378.281308][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1378.287145][ T42] hfsplus: b-tree write err: -5, ino 2 [ 1378.311636][ T42] hfsplus: b-tree write err: -5, ino 26 [ 1381.382106][T18241] sctp: [Deprecated]: syz.4.2648 (pid 18241) Use of int in maxseg socket option. [ 1381.382106][T18241] Use struct sctp_assoc_value instead [ 1381.692444][T18241] loop4: detected capacity change from 0 to 256 [ 1384.847916][T18253] siw: device registration error -23 [ 1385.012861][T18261] syz_tun: entered allmulticast mode [ 1385.131321][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1385.251285][T18261] syz_tun (unregistering): left allmulticast mode [ 1386.970703][T18267] syzkaller0: entered promiscuous mode [ 1386.976286][T18267] syzkaller0: entered allmulticast mode [ 1387.094803][T18272] syzkaller0: entered promiscuous mode [ 1387.100363][T18272] syzkaller0: entered allmulticast mode [ 1387.556656][T18289] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2655'. [ 1394.900734][T18318] tipc: Started in network mode [ 1394.905705][T18318] tipc: Node identity 566f8a6d84e2, cluster identity 4711 [ 1394.920933][T10176] Bluetooth: hci3: command 0x0406 tx timeout [ 1394.946122][T18318] tipc: Enabled bearer , priority 0 [ 1394.963465][T18319] syzkaller0: entered promiscuous mode [ 1394.969115][T18319] syzkaller0: entered allmulticast mode [ 1395.012995][T18323] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2654'. [ 1395.092405][T18323] tipc: Resetting bearer [ 1395.240768][T18323] tipc: Disabling bearer [ 1397.100499][T17047] tipc: Node number set to 3532491373 [ 1397.911041][T18351] random: crng reseeded on system resumption [ 1398.897466][T18355] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 1399.847589][T18364] syzkaller0: entered promiscuous mode [ 1399.856970][T18364] syzkaller0: entered allmulticast mode [ 1401.703093][T18392] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2668'. [ 1402.050448][T18397] TC_ACT_REPEAT abuse ? [ 1404.250345][T18408] loop4: detected capacity change from 0 to 1024 [ 1407.483148][T13728] hfsplus: bad catalog file entry [ 1407.489563][T13728] hfsplus: b-tree write err: -5, ino 3 [ 1407.741837][T18426] loop6: detected capacity change from 0 to 2048 [ 1407.855753][T18426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1407.879560][T18428] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1408.896862][T11004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.975638][T18471] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2680'. [ 1412.427167][T18475] No such timeout policy "syz1" [ 1414.094564][T18474] loop6: detected capacity change from 0 to 512 [ 1414.135693][T18474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1414.144684][T18474] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1414.199751][T18474] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1414.252663][T18474] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4059: comm syz.6.2681: Allocating blocks 41-42 which overlap fs metadata [ 1414.272627][T18474] Quota error (device loop6): write_blk: dquota write failed [ 1414.280182][T18474] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1414.289637][T18474] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4059: comm syz.6.2681: Allocating blocks 41-42 which overlap fs metadata [ 1414.304291][T18474] Quota error (device loop6): write_blk: dquota write failed [ 1414.314251][T18474] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1414.324855][T18474] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2681: Failed to acquire dquot type 1 [ 1414.337667][T18474] EXT4-fs error (device loop6): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1414.353032][T18474] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.2681: corrupted inode contents [ 1414.388906][T18474] EXT4-fs error (device loop6): ext4_dirty_inode:6143: inode #12: comm syz.6.2681: mark_inode_dirty error [ 1414.410813][T18474] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.2681: corrupted inode contents [ 1414.424280][T18474] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.2681: mark_inode_dirty error [ 1414.438506][T18474] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.2681: corrupted inode contents [ 1414.453072][T18474] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1414.462148][T18474] EXT4-fs error (device loop6): ext4_do_update_inode:5255: inode #12: comm syz.6.2681: corrupted inode contents [ 1414.476746][T18474] EXT4-fs error (device loop6): ext4_truncate:4301: inode #12: comm syz.6.2681: mark_inode_dirty error [ 1414.488936][T18474] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1414.500808][T18474] EXT4-fs (loop6): 1 truncate cleaned up [ 1414.507993][T18474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.790014][T18484] loop3: detected capacity change from 0 to 512 [ 1414.832181][T11004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.836792][T18484] EXT4-fs: Ignoring removed nobh option [ 1414.861156][T18484] EXT4-fs: Ignoring removed bh option [ 1415.001750][T18484] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1415.078501][T18484] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2682: invalid indirect mapped block 256 (level 1) [ 1415.241010][T18484] EXT4-fs (loop3): Remounting filesystem read-only [ 1415.248074][T18484] EXT4-fs (loop3): 1 truncate cleaned up [ 1415.272303][T18484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1415.433894][T18499] syz.3.2682: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1415.449388][T18499] CPU: 0 PID: 18499 Comm: syz.3.2682 Not tainted syzkaller #0 [ 1415.456918][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1415.467289][T18499] Call Trace: [ 1415.470606][T18499] [ 1415.473597][T18499] dump_stack_lvl+0x18c/0x250 [ 1415.478315][T18499] ? show_regs_print_info+0x20/0x20 [ 1415.483974][T18499] ? load_image+0x420/0x420 [ 1415.488533][T18499] ? __rcu_read_unlock+0x7c/0xd0 [ 1415.493606][T18499] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1415.500070][T18499] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1415.506615][T18499] warn_alloc+0x246/0x340 [ 1415.510985][T18499] ? stack_trace_save+0xaa/0x100 [ 1415.515973][T18499] ? zone_watermark_ok_safe+0x230/0x230 [ 1415.521658][T18499] ? kasan_set_track+0x5f/0x70 [ 1415.526515][T18499] ? kasan_set_track+0x4e/0x70 [ 1415.531345][T18499] ? __kasan_kmalloc+0x8f/0xa0 [ 1415.536182][T18499] ? xsk_init_queue+0xad/0x100 [ 1415.541028][T18499] ? xsk_setsockopt+0x42e/0x760 [ 1415.545945][T18499] ? do_sock_setsockopt+0x175/0x1a0 [ 1415.551316][T18499] ? __x64_sys_setsockopt+0x182/0x200 [ 1415.556823][T18499] __vmalloc_node_range+0x126/0x1330 [ 1415.562201][T18499] ? free_vm_area+0x50/0x50 [ 1415.566957][T18499] vmalloc_user+0x74/0x80 [ 1415.571420][T18499] ? xskq_create+0xbf/0x170 [ 1415.576081][T18499] xskq_create+0xbf/0x170 [ 1415.580578][T18499] xsk_init_queue+0xad/0x100 [ 1415.585536][T18499] xsk_setsockopt+0x42e/0x760 [ 1415.590349][T18499] ? xsk_poll+0x680/0x680 [ 1415.594878][T18499] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1415.601240][T18499] ? lockdep_hardirqs_on+0x98/0x150 [ 1415.606490][T18499] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1415.612183][T18499] ? security_socket_setsockopt+0x7e/0xa0 [ 1415.617994][T18499] ? xsk_poll+0x680/0x680 [ 1415.622569][T18499] do_sock_setsockopt+0x175/0x1a0 [ 1415.627670][T18499] __x64_sys_setsockopt+0x182/0x200 [ 1415.633393][T18499] do_syscall_64+0x55/0xa0 [ 1415.638050][T18499] ? clear_bhb_loop+0x40/0x90 [ 1415.642882][T18499] ? clear_bhb_loop+0x40/0x90 [ 1415.647797][T18499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1415.653910][T18499] RIP: 0033:0x7f8dcdf9c819 [ 1415.658684][T18499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.678553][T18499] RSP: 002b:00007f8dcee46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1415.687427][T18499] RAX: ffffffffffffffda RBX: 00007f8dce216090 RCX: 00007f8dcdf9c819 [ 1415.695632][T18499] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1415.704169][T18499] RBP: 00007f8dce032c91 R08: 0000000000000004 R09: 0000000000000000 [ 1415.712207][T18499] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.720486][T18499] R13: 00007f8dce216128 R14: 00007f8dce216090 R15: 00007ffcf06eb788 [ 1415.728562][T18499] [ 1415.735319][T18499] Mem-Info: [ 1415.739579][T18499] active_anon:74358 inactive_anon:0 isolated_anon:0 [ 1415.739579][T18499] active_file:5248 inactive_file:53932 isolated_file:0 [ 1415.739579][T18499] unevictable:20058 dirty:208 writeback:0 [ 1415.739579][T18499] slab_reclaimable:10357 slab_unreclaimable:100497 [ 1415.739579][T18499] mapped:24533 shmem:67077 pagetables:831 [ 1415.739579][T18499] sec_pagetables:0 bounce:0 [ 1415.739579][T18499] kernel_misc_reclaimable:0 [ 1415.739579][T18499] free:1246481 free_pcp:10366 free_cma:0 [ 1415.787283][T18499] Node 0 active_anon:297432kB inactive_anon:0kB active_file:20992kB inactive_file:215528kB unevictable:78696kB isolated(anon):0kB isolated(file):0kB mapped:98132kB dirty:832kB writeback:0kB shmem:266772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11736kB pagetables:3324kB sec_pagetables:0kB all_unreclaimable? no [ 1415.823270][T18499] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1417.204639][T18499] Node 0 DMA free:15296kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.236541][T18499] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1417.244113][T18499] Node 0 DMA32 free:1009620kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:363184kB inactive_anon:0kB active_file:20992kB inactive_file:214712kB unevictable:78696kB writepending:832kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:20024kB local_pcp:1872kB free_cma:0kB [ 1417.278268][T18499] lowmem_reserve[]: 0 0 0 0 0 [ 1417.296264][T18499] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.335312][T18499] lowmem_reserve[]: 0 0 0 0 0 [ 1417.346985][T18499] Node 1 Normal free:3897256kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19560kB local_pcp:11620kB free_cma:0kB [ 1417.382327][T18499] lowmem_reserve[]: 0 0 0 0 0 [ 1417.396097][T18499] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB [ 1417.437503][T18499] Node 0 DMA32: 31*4kB (UE) 59*8kB (UE) 114*16kB (UE) 647*32kB (UME) 130*64kB (UE) 88*128kB (UE) 27*256kB (UME) 59*512kB (UME) 40*1024kB (UM) 30*2048kB (UM) 202*4096kB (UM) = 1009620kB [ 1417.462207][T18499] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1417.504200][T18499] Node 1 Normal: 242*4kB (UE) 56*8kB (UE) 38*16kB (UE) 82*32kB (UE) 30*64kB (UME) 2*128kB (ME) 3*256kB (UME) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3897256kB [ 1417.530171][T18499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.540114][T18499] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1417.550140][T18499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.560189][T18499] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1417.570282][T18499] 161750 total pagecache pages [ 1417.575401][T18499] 2 pages in swap cache [ 1417.580076][T18499] Free swap = 124280kB [ 1417.584680][T18499] Total swap = 124996kB [ 1417.589171][T18499] 2097051 pages RAM [ 1417.593427][T18499] 0 pages HighMem/MovableOnly [ 1417.598286][T18499] 416927 pages reserved [ 1417.603755][T18499] 0 pages cma reserved [ 1419.502868][T16908] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.921210][T18510] netlink: 'syz.3.2686': attribute type 1 has an invalid length. [ 1420.105845][T18510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1420.151474][T18516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2688'. [ 1420.161023][T18516] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1420.221416][T18513] bond1: (slave ip6gretap1): making interface the new active one [ 1420.309743][T18513] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1420.514724][T18524] loop6: detected capacity change from 0 to 1024 [ 1422.120302][T10176] Bluetooth: hci2: command 0x0406 tx timeout [ 1423.505986][T18579] hfsplus: bad catalog file entry [ 1423.580743][T18579] hfsplus: b-tree write err: -5, ino 3 [ 1423.606349][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.613859][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.854134][T18606] loop6: detected capacity change from 0 to 512 [ 1426.553423][T18606] Quota error (device loop6): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 1426.564223][T18606] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1426.580909][T18606] EXT4-fs (loop6): mount failed [ 1426.632182][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2687'. [ 1426.685078][T18605] dummy0: entered promiscuous mode [ 1426.922047][T18605] macvtap1: entered promiscuous mode [ 1427.346498][T18605] macvtap1: entered allmulticast mode [ 1427.363385][T18605] dummy0: entered allmulticast mode [ 1427.406448][T18607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2687'. [ 1427.469566][T18607] dummy0: left allmulticast mode [ 1427.478643][T18607] dummy0: left promiscuous mode [ 1428.820887][T18631] batadv0: entered promiscuous mode [ 1428.827985][T18631] vlan3: entered promiscuous mode [ 1429.960920][T18639] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 1432.562568][T18651] netlink: 268 bytes leftover after parsing attributes in process `syz.6.2704'. [ 1432.903158][T18655] No such timeout policy "syz1" [ 1433.779099][T18658] netlink: 'syz.6.2705': attribute type 1 has an invalid length. [ 1434.094136][T18658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1434.167781][T18663] bond1: (slave ip6gretap1): making interface the new active one [ 1434.208085][T18663] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1437.013649][T18694] loop6: detected capacity change from 0 to 4096 [ 1437.342231][T18704] xt_recent: Unsupported userspace flags (000000de) [ 1439.000458][T13848] Bluetooth: hci2: command 0x0406 tx timeout [ 1442.236692][T18726] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1442.246268][T18726] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1442.255967][T18726] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1442.400304][T18722] lo speed is unknown, defaulting to 1000 [ 1442.625328][T18723] ptrace attach of "./syz-executor exec"[18730] was attempted by "./syz-executor exec"[18723] [ 1442.911559][T18732] loop4: detected capacity change from 0 to 32768 [ 1442.951978][T18732] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1442.960317][T18732] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1443.003706][T18732] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1443.020699][T15513] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1443.028382][T15513] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1443.091674][T15513] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 63ms [ 1443.120978][T15513] gfs2: fsid=syz:syz.0: jid=0: Done [ 1443.135943][T18732] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1443.402493][T18732] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1444.318190][T18745] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1444.327215][T18745] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1445.333850][T17302] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 1445.333850][T17302] inode = 11 2339 [ 1445.333850][T17302] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 1445.353003][T17302] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 1445.481448][T17302] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:17302 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 1445.533050][T17302] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1445.551124][T17302] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1445.586243][T17302] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 1445.630953][T17302] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 1445.661916][T17302] gfs2: fsid=syz:syz.0: File system withdrawn [ 1445.668095][T17302] CPU: 1 PID: 17302 Comm: syz-executor Not tainted syzkaller #0 [ 1445.675914][T17302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1445.686030][T17302] Call Trace: [ 1445.689349][T17302] [ 1445.692431][T17302] dump_stack_lvl+0x18c/0x250 [ 1445.697386][T17302] ? kobject_uevent_env+0x363/0x8b0 [ 1445.702917][T17302] ? show_regs_print_info+0x20/0x20 [ 1445.708192][T17302] ? load_image+0x420/0x420 [ 1445.712756][T17302] ? kobject_uevent_env+0x363/0x8b0 [ 1445.718035][T17302] gfs2_withdraw+0xb24/0x13d0 [ 1445.722834][T17302] ? gfs2_lm+0x240/0x240 [ 1445.727267][T17302] ? gfs2_consist_inode_i+0xf5/0x110 [ 1445.732742][T17302] gfs2_inode_refresh+0xc50/0x1160 [ 1445.737935][T17302] ? gfs2_inode_metasync+0xf0/0xf0 [ 1445.743116][T17302] ? gfs2_glock_nq+0xd4f/0x1420 [ 1445.748234][T17302] gfs2_instantiate+0x162/0x220 [ 1445.753157][T17302] gfs2_glock_wait+0x1d4/0x2a0 [ 1445.758347][T17302] do_sync+0x4c6/0xe50 [ 1445.762480][T17302] ? gfs2_quota_sync+0x411/0x5a0 [ 1445.767568][T17302] ? bh_get+0x760/0x760 [ 1445.771776][T17302] ? __lock_acquire+0x7d40/0x7d40 [ 1445.776943][T17302] ? do_raw_spin_lock+0x11f/0x2c0 [ 1445.782034][T17302] ? gfs2_quota_sync+0x411/0x5a0 [ 1445.787045][T17302] ? do_raw_spin_unlock+0x121/0x230 [ 1445.792322][T17302] gfs2_quota_sync+0x411/0x5a0 [ 1445.797245][T17302] gfs2_sync_fs+0x4c/0xb0 [ 1445.801635][T17302] sync_filesystem+0xea/0x220 [ 1445.806460][T17302] generic_shutdown_super+0x6f/0x2b0 [ 1445.811904][T17302] kill_block_super+0x44/0x90 [ 1445.816810][T17302] deactivate_locked_super+0x97/0x100 [ 1445.822417][T17302] cleanup_mnt+0x43b/0x4d0 [ 1445.827072][T17302] task_work_run+0x1d4/0x260 [ 1445.831727][T17302] ? task_work_cancel+0x220/0x220 [ 1445.836823][T17302] ? exit_to_user_mode_loop+0x3b/0x110 [ 1445.842432][T17302] exit_to_user_mode_loop+0xe6/0x110 [ 1445.847781][T17302] exit_to_user_mode_prepare+0xee/0x180 [ 1445.853479][T17302] syscall_exit_to_user_mode+0x1a/0x50 [ 1445.859008][T17302] do_syscall_64+0x61/0xa0 [ 1445.863472][T17302] ? clear_bhb_loop+0x40/0x90 [ 1445.868216][T17302] ? clear_bhb_loop+0x40/0x90 [ 1445.872952][T17302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1445.878896][T17302] RIP: 0033:0x7ff8bb59da57 [ 1445.883462][T17302] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1445.903394][T17302] RSP: 002b:00007ffd2f414d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1445.911888][T17302] RAX: 0000000000000000 RBX: 00007ff8bb632048 RCX: 00007ff8bb59da57 [ 1445.919920][T17302] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2f414e20 [ 1445.927962][T17302] RBP: 00007ffd2f414e20 R08: 00007ffd2f415e20 R09: 00000000ffffffff [ 1445.935997][T17302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2f415eb0 [ 1445.944111][T17302] R13: 00007ff8bb632048 R14: 00000000001607e7 R15: 00007ffd2f415ef0 [ 1445.952159][T17302] [ 1446.107294][T18752] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2713'. [ 1446.493238][T18756] No such timeout policy "syz1" [ 1451.427142][T18784] ax25_connect(): syz.4.2725 uses autobind, please contact jreuter@yaina.de [ 1458.191639][T18811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2732'. [ 1460.107348][T18826] loop4: detected capacity change from 0 to 1024 [ 1460.298881][T18826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1460.311909][T18826] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1460.707248][T18832] loop3: detected capacity change from 0 to 512 [ 1460.768956][T17302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1460.784155][T18832] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1460.819131][T18832] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.2735: corrupted in-inode xattr: e_value size too large [ 1460.862281][T18832] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2735: couldn't read orphan inode 15 (err -117) [ 1460.978928][T18832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1462.402373][T18840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.410161][T18840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.424989][T13848] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1463.285539][T18841] syz.6.2733 (18841): drop_caches: 2 [ 1463.547953][T16908] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.585929][T18838] syz.6.2733 (18838): drop_caches: 2 [ 1464.553656][T18874] loop6: detected capacity change from 0 to 32768 [ 1464.735873][T18874] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2739 (18874) [ 1464.803493][T18874] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1464.813934][T18874] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1464.823671][T18874] BTRFS info (device loop6): using free space tree [ 1465.563508][T18874] BTRFS info (device loop6): enabling ssd optimizations [ 1465.571221][T18874] BTRFS info (device loop6): auto enabling async discard [ 1466.440837][T10176] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1466.452866][T10176] Bluetooth: hci2: Injecting HCI hardware error event [ 1466.464942][T16857] Bluetooth: hci2: hardware error 0x00 [ 1469.743425][T18909] loop4: detected capacity change from 0 to 2048 [ 1469.798192][T11004] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1469.846975][T18909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1469.916443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1471.695939][T16857] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1472.272633][T18937] netlink: 'syz.4.2747': attribute type 10 has an invalid length. [ 1473.302253][T18937] team0: Device dummy0 failed to register rx_handler [ 1473.625792][T18934] netlink: 'syz.4.2747': attribute type 10 has an invalid length. [ 1474.116340][T18953] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1474.407898][T18953] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1476.490772][T18967] loop4: detected capacity change from 0 to 4096 [ 1478.595137][T18974] ntfs3: loop4: failed to convert "256c" to koi8-ru [ 1478.836801][T18974] ntfs3: loop4: failed to convert "256c" to koi8-ru [ 1482.959924][T19026] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2759'. [ 1483.322349][T19035] No such timeout policy "syz1" [ 1485.007583][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.014173][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.464876][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2760'. [ 1486.627751][T15927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1486.871445][T15927] usb 4-1: Using ep0 maxpacket: 16 [ 1486.919879][T15927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1486.982209][T15927] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1487.020779][T15927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.045254][T15927] usb 4-1: Product: syz [ 1487.069410][T15927] usb 4-1: Manufacturer: syz [ 1487.079844][T15927] usb 4-1: SerialNumber: syz [ 1487.121520][T15927] usb 4-1: config 0 descriptor?? [ 1487.150789][T15927] hub 4-1:0.0: bad descriptor, ignoring hub [ 1487.179800][T15927] hub: probe of 4-1:0.0 failed with error -5 [ 1487.211411][T15927] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 1488.978909][T19065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1490.985159][ T5942] team0: Port device netdevsim0 removed [ 1491.961106][ T5873] usb 4-1: USB disconnect, device number 6 [ 1495.365752][T13848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1495.389055][T13848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1495.399142][T13848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1495.410935][T13848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1495.418969][T13848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1495.429175][T13848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1496.965795][T19095] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1498.381818][T13848] Bluetooth: hci0: command tx timeout [ 1498.480482][T19082] lo speed is unknown, defaulting to 1000 [ 1498.819366][T19103] loop3: detected capacity change from 0 to 2048 [ 1498.916148][ T5942] tipc: Disabling bearer [ 1498.940953][ T5942] tipc: Disabling bearer [ 1499.040630][ T5942] tipc: Left network mode [ 1499.105706][T19103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1500.166727][T19109] netlink: 'syz.6.2767': attribute type 10 has an invalid length. [ 1500.200843][T19109] team0: Port device dummy0 added [ 1500.214999][T19108] netlink: 'syz.6.2767': attribute type 10 has an invalid length. [ 1500.246369][T19108] team0: Port device dummy0 removed [ 1500.257248][T19108] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1500.333874][T19082] chnl_net:caif_netlink_parms(): no params data found [ 1500.441144][T13848] Bluetooth: hci0: command tx timeout [ 1500.559989][T19122] siw: device registration error -23 [ 1500.665924][T19121] loop6: detected capacity change from 0 to 4096 [ 1502.522010][T13848] Bluetooth: hci0: command tx timeout [ 1502.906352][T19133] ntfs3: loop6: failed to convert "256c" to koi8-ru [ 1503.064185][T19082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.180595][T19082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.188139][T19082] bridge_slave_0: entered allmulticast mode [ 1503.195807][T19082] bridge_slave_0: entered promiscuous mode [ 1503.205840][T19082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.214307][T19082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.230819][T19082] bridge_slave_1: entered allmulticast mode [ 1503.769481][T19133] ntfs3: loop6: failed to convert "256c" to koi8-ru [ 1503.930156][T19082] bridge_slave_1: entered promiscuous mode [ 1504.600652][T13848] Bluetooth: hci0: command tx timeout [ 1504.682193][T19082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.724873][T19082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.807479][ T5942] erspan0 (unregistering): left allmulticast mode [ 1504.832235][ T5942] erspan0 (unregistering): left promiscuous mode [ 1504.838843][ T5942] bridge0: port 2(erspan0) entered disabled state [ 1506.255292][T19082] team0: Port device team_slave_0 added [ 1506.728547][T19082] team0: Port device team_slave_1 added [ 1506.890834][ T5942] bond0: (slave wlan1): Releasing backup interface [ 1507.136743][T19174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.155779][T19082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.211963][T19082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1507.260740][T19082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.252084][T19082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.290511][T19082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.101394][T19082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.700124][ T5942] hsr_slave_0: left promiscuous mode [ 1511.775356][ T5942] hsr_slave_1: left promiscuous mode [ 1511.839047][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.865148][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.884549][ T5942] bridge_slave_0: left allmulticast mode [ 1511.890534][ T5942] bridge_slave_0: left promiscuous mode [ 1511.896512][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.152015][ T5942] bond2 (unregistering): (slave bridge2): Releasing active interface [ 1512.337630][ T5942] bridge2 (unregistering): left promiscuous mode [ 1514.364751][ T5942] bridge2 (unregistering): left allmulticast mode [ 1514.904538][T19212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1515.836892][ T5942] bond2 (unregistering): Released all slaves [ 1515.899295][ T5942] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1518.062875][T19227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.187555][ T5942] bond1 (unregistering): Released all slaves [ 1528.452421][T19258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1528.721797][T19265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1531.504052][T19274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1532.168558][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 1532.600511][T19279] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2821'. [ 1532.806368][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 1533.317199][T19285] No such timeout policy "syz1" [ 1535.479002][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.683682][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.762209][T19298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.983024][ T5942] bond0 (unregistering): Released all slaves [ 1538.839180][T19082] hsr_slave_0: entered promiscuous mode [ 1538.900849][T19082] hsr_slave_1: entered promiscuous mode [ 1539.300738][T19311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1539.795614][T19313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1540.208666][T19321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1541.150950][T19329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1541.391496][T19328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1542.349197][T19336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1542.786309][ T5942] IPVS: stop unused estimator thread 0... [ 1544.180223][T19348] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2836'. [ 1544.530100][T19353] No such timeout policy "syz1" [ 1545.226669][T19345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1546.396154][T19366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1546.453749][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.470471][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.500874][T19082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1546.604407][T19082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1546.637118][T19082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1546.644594][T19369] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2840'. [ 1546.843323][T19082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1546.947163][T19373] No such timeout policy "syz1" [ 1550.498026][T19385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1551.933407][T19401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.139243][T16857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1552.183712][T16857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1552.207041][T16857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1552.230817][T16857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1552.261529][T16857] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1552.273126][T16857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1552.718298][T19415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1553.341554][T19420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1553.952613][T19424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1554.360770][T13848] Bluetooth: hci4: command tx timeout [ 1554.524500][T19404] chnl_net:caif_netlink_parms(): no params data found [ 1554.587927][T19439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1554.909576][T19444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1555.411474][T19446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1555.713328][T19404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.747505][T19404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.786437][T19404] bridge_slave_0: entered allmulticast mode [ 1555.811319][T19404] bridge_slave_0: entered promiscuous mode [ 1555.842097][T19404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.866206][T19404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.891291][T19404] bridge_slave_1: entered allmulticast mode [ 1555.907599][T19404] bridge_slave_1: entered promiscuous mode [ 1556.119961][T19404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.227297][T19404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1556.324205][T19458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1558.003034][T13848] Bluetooth: hci4: command tx timeout [ 1558.252816][T19404] team0: Port device team_slave_0 added [ 1558.301566][T19404] team0: Port device team_slave_1 added [ 1558.387349][ T6080] hsr_slave_0: left promiscuous mode [ 1558.402436][ T6080] hsr_slave_1: left promiscuous mode [ 1558.476989][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.497653][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.543774][ T6080] bridge_slave_1: left allmulticast mode [ 1558.560629][ T6080] bridge_slave_1: left promiscuous mode [ 1558.567773][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.623839][ T6080] bridge_slave_0: left allmulticast mode [ 1558.630155][ T6080] bridge_slave_0: left promiscuous mode [ 1558.666087][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.607501][ T6080] team0 (unregistering): Port device team_slave_1 removed [ 1559.718029][ T6080] team0 (unregistering): Port device team_slave_0 removed [ 1559.858136][T19484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1559.875937][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1560.018649][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1560.041931][T13848] Bluetooth: hci4: command tx timeout [ 1560.139085][T19486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1560.592234][ T6080] bond0 (unregistering): Released all slaves [ 1560.744524][T19404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.751915][T19404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.788094][T19404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.830049][T19404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.892866][T19404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.990199][T19404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.367378][T19404] hsr_slave_0: entered promiscuous mode [ 1561.382975][T19404] hsr_slave_1: entered promiscuous mode [ 1561.966173][T19493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1562.120570][T13848] Bluetooth: hci4: command tx timeout [ 1562.396634][T19500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1563.187975][T19509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1563.478984][T19514] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2868'. [ 1563.787425][T19517] No such timeout policy "syz1" [ 1567.002639][T19525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1567.866815][T19404] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1567.912521][T19404] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1567.951021][T19404] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1568.007166][T19404] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1568.176946][T19538] No such timeout policy "syz1" [ 1568.537152][T19542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.592782][T19404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.811978][T19404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.875893][T18572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.883221][T18572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.988024][T18572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.995424][T18572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.084295][T19404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1572.469255][T19570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1573.230115][T19404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.558461][T19404] veth0_vlan: entered promiscuous mode [ 1575.303359][T19404] veth1_vlan: entered promiscuous mode [ 1575.562135][T19404] veth0_macvtap: entered promiscuous mode [ 1575.586491][T19404] veth1_macvtap: entered promiscuous mode [ 1575.646008][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.682769][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.725214][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.769685][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.809471][T19404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.268645][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.332236][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.348499][T19404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.375705][T19404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.387711][T19404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.417789][T19404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.464778][T19404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.485880][T19404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.504776][T19404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.873558][T18572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.080680][T18572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.731681][ T6080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.739703][ T6080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.138575][T19636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1588.788718][T19676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1588.892520][T19684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1589.249698][T19693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1589.559419][T19695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.472744][T19726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1593.576782][T19743] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2913'. [ 1594.360170][T19747] No such timeout policy "syz1" [ 1597.923398][T19758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1598.185207][T19749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1600.342359][T19776] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2922'. [ 1601.071176][T19781] No such timeout policy "syz1" [ 1604.450584][T19794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1606.275708][T19809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1607.941225][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.971113][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.189292][T19822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1613.353068][T19860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1613.613421][T19849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1622.993186][T19929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1630.504490][T19955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1638.717697][T20013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.556701][T20048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1644.275671][T20073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1653.231084][T20139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1656.545885][T20167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1658.089738][T20189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1669.328126][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.360490][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.555364][T16857] Bluetooth: hci4: command 0x0406 tx timeout [ 1730.767502][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.774113][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1755.595328][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'. [ 1756.403061][T20937] ipvlan2: entered promiscuous mode [ 1756.417770][T20937] ipvlan2: entered allmulticast mode [ 1756.435273][T20937] gretap0: entered allmulticast mode [ 1756.519098][T20937] team0: Device ipvlan2 failed to register rx_handler [ 1761.705710][T21009] fuse: Bad value for 'fd' [ 1761.843666][T21013] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20001 [ 1762.378340][ T28] audit: type=1326 audit(2000001696.139:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21012 comm="syz.6.3121" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1b119c819 code=0x0 [ 1765.550639][T21078] 9pnet_virtio: no channels available for device syz [ 1770.614402][T21100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3135'. [ 1777.256056][T13848] Bluetooth: hci3: unexpected event 0x20 length: 6 < 7 [ 1777.948908][T16857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1777.962241][T16857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1777.975781][T16857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1777.985377][T16857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1778.000491][T16857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1778.013795][T16857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1778.896341][T21156] chnl_net:caif_netlink_parms(): no params data found [ 1779.128370][T21170] bridge_slave_0: left allmulticast mode [ 1779.147122][T21170] bridge_slave_0: left promiscuous mode [ 1779.160781][T21170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.252440][T21170] bridge_slave_1: left allmulticast mode [ 1779.328761][T21170] bridge_slave_1: left promiscuous mode [ 1779.360491][T21170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.433361][T21183] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3149'. [ 1779.451059][T21170] bond0: (slave bond_slave_0): Releasing backup interface [ 1779.556822][T21170] bond0: (slave bond_slave_1): Releasing backup interface [ 1779.810358][T21170] team0: Port device team_slave_0 removed [ 1779.953275][T21170] team0: Port device team_slave_1 removed [ 1779.999714][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1780.032607][T21170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1780.092388][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1780.120570][T13848] Bluetooth: hci0: command tx timeout [ 1780.131867][T21170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1780.244991][T21170] bond1: (slave ip6gretap1): Releasing active interface [ 1780.470442][T21178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3148'. [ 1780.741902][T21184] team0: Mode changed to "loadbalance" [ 1780.762795][T21188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3148'. [ 1781.872633][T13718] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.200373][T13848] Bluetooth: hci0: command tx timeout [ 1782.489841][T13718] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.670668][T21156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.678968][T21156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.714426][T21156] bridge_slave_0: entered allmulticast mode [ 1782.837239][T21156] bridge_slave_0: entered promiscuous mode [ 1783.033914][T21156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.033989][T21156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.034136][T21156] bridge_slave_1: entered allmulticast mode [ 1783.035168][T21156] bridge_slave_1: entered promiscuous mode [ 1783.068071][T13718] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.457878][T13718] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.498325][T21156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1783.502882][T21156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1783.655171][T21156] team0: Port device team_slave_0 added [ 1783.669500][T21156] team0: Port device team_slave_1 added [ 1783.817948][T21156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.817964][T21156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1783.817983][T21156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.819518][T21156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.819530][T21156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1783.819549][T21156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.280341][T13848] Bluetooth: hci0: command tx timeout [ 1784.314606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1784.416396][T21156] hsr_slave_0: entered promiscuous mode [ 1784.417188][T21156] hsr_slave_1: entered promiscuous mode [ 1784.417695][T21156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1784.417825][T21156] Cannot create hsr debugfs directory [ 1784.628280][ C1] vkms_vblank_simulate: vblank timer overrun [ 1784.833521][T13718] tipc: Left network mode [ 1785.203770][T13718] bond1: (slave ip6gretap1): Releasing active interface [ 1786.290829][T21249] netlink: 'syz.3.3156': attribute type 39 has an invalid length. [ 1786.360325][T13848] Bluetooth: hci0: command tx timeout [ 1788.115056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1788.875614][T21281] block nbd1: shutting down sockets [ 1789.440397][ T5755] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1789.449519][T21295] Bluetooth: MGMT ver 1.22 [ 1789.720264][ T5755] usb 2-1: Using ep0 maxpacket: 8 [ 1789.728458][ T5755] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1789.745804][ T5755] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1789.762254][ T5755] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1789.776836][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3163'. [ 1789.836577][ T5755] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1789.891036][ T5755] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1789.951938][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.224716][ T5755] usb 2-1: GET_CAPABILITIES returned 0 [ 1790.241499][ T5755] usbtmc 2-1:16.0: can't read capabilities [ 1790.502890][ T5755] usb 2-1: USB disconnect, device number 11 [ 1790.749373][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3165'. [ 1790.921418][T13718] hsr_slave_0: left promiscuous mode [ 1790.949866][T13718] hsr_slave_1: left promiscuous mode [ 1791.124975][T13718] veth1_macvtap: left promiscuous mode [ 1791.140885][T13718] veth0_macvtap: left promiscuous mode [ 1791.149394][T13718] veth1_vlan: left promiscuous mode [ 1791.181033][T13718] veth0_vlan: left promiscuous mode [ 1792.204921][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.211965][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.431941][T13718] bond1 (unregistering): Released all slaves [ 1792.878064][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3169'. [ 1796.147056][T13718] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1796.335391][T13718] bond0 (unregistering): Released all slaves [ 1797.891186][T21156] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1797.922110][T21156] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1797.991150][T21156] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1798.067153][T21156] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1798.538733][T21156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1798.611983][T13718] IPVS: stop unused estimator thread 0... [ 1798.668256][T21156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.798623][T18566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.806157][T18566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.868649][T18566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.876204][T18566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.806519][T21156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.163986][T21437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3184'. [ 1802.304555][T21156] veth0_vlan: entered promiscuous mode [ 1802.334260][T21156] veth1_vlan: entered promiscuous mode [ 1802.401942][T21156] veth0_macvtap: entered promiscuous mode [ 1802.435288][T21156] veth1_macvtap: entered promiscuous mode [ 1802.493097][T21156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1802.525637][T21156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.541202][T21156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1802.555328][T21156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.587998][T21156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1802.617901][T21156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1802.639241][T21156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.660099][T21156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1802.676009][T21156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.688591][T21156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1802.711379][T21156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.731803][T21156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.751627][T21156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.800269][T21156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.126625][ T6080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.182787][ T6080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.354913][T13718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.393849][T13718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.580605][T21476] 9pnet_virtio: no channels available for device syz [ 1806.521121][T21482] IPv6: NLM_F_CREATE should be specified when creating new route [ 1806.866249][T21485] syz_tun: entered allmulticast mode [ 1810.502547][T21541] lo speed is unknown, defaulting to 1000 [ 1810.508886][T21541] lo speed is unknown, defaulting to 1000 [ 1810.518204][T21541] lo speed is unknown, defaulting to 1000 [ 1810.568491][T21541] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1811.450800][T21541] lo speed is unknown, defaulting to 1000 [ 1811.458074][T21541] lo speed is unknown, defaulting to 1000 [ 1811.469967][T21541] lo speed is unknown, defaulting to 1000 [ 1811.477405][T21541] lo speed is unknown, defaulting to 1000 [ 1812.478580][T21562] binfmt_misc: register: failed to install interpreter file ./file0 [ 1812.637780][T21568] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3207'. [ 1813.462966][T21579] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1813.471871][T21579] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1813.481691][T21579] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1813.490651][T21579] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1820.270503][T21607] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20001 [ 1822.413232][ T28] audit: type=1326 audit(2000001754.489:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.4.3215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8bb59c819 code=0x0 [ 1823.304182][T16857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1823.318048][T16857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1823.328298][T16857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1823.396354][T16857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1823.404619][T16857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1823.412541][T16857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1823.600053][T21631] lo speed is unknown, defaulting to 1000 [ 1824.308680][T21631] chnl_net:caif_netlink_parms(): no params data found [ 1824.729958][T21631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.957648][T21631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.570322][T13848] Bluetooth: hci1: command tx timeout [ 1826.120830][T21631] bridge_slave_0: entered allmulticast mode [ 1827.199802][T21631] bridge_slave_0: entered promiscuous mode [ 1827.236789][T21631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.274789][T21631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1827.295862][T21631] bridge_slave_1: entered allmulticast mode [ 1827.370519][T21631] bridge_slave_1: entered promiscuous mode [ 1827.550448][T21631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1827.601864][T21631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1827.640459][T13848] Bluetooth: hci1: command tx timeout [ 1828.003356][T21631] team0: Port device team_slave_0 added [ 1828.256035][T21631] team0: Port device team_slave_1 added [ 1828.391356][T21631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1828.398594][T21631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1828.477834][T21631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1828.531182][T21631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1828.538699][T21631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1828.670509][T21631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1829.061236][T21631] hsr_slave_0: entered promiscuous mode [ 1829.081037][T21631] hsr_slave_1: entered promiscuous mode [ 1829.107118][T21631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1829.135989][T21631] Cannot create hsr debugfs directory [ 1829.760507][T13848] Bluetooth: hci1: command tx timeout [ 1831.810816][T13848] Bluetooth: hci1: command tx timeout [ 1832.413070][ T5942] ------------[ cut here ]------------ [ 1832.419082][T21765] ------------[ cut here ]------------ [ 1832.421895][ T5942] WARNING: CPU: 1 PID: 5942 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1832.428225][T21765] WARNING: CPU: 0 PID: 21765 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1832.428274][T21765] Modules linked in: [ 1832.428301][T21765] CPU: 0 PID: 21765 Comm: syz.7.3245 Not tainted syzkaller #0 [ 1832.428325][T21765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1832.428340][T21765] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1832.428372][T21765] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c [ 1832.428391][T21765] RSP: 0018:ffffc90003256e00 EFLAGS: 00010287 [ 1832.428413][T21765] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: 0000000000080000 [ 1832.428431][T21765] RDX: ffffc9000d059000 RSI: 000000000000d654 RDI: 000000000000d655 [ 1832.428448][T21765] RBP: dffffc0000000000 R08: ffffffff911c55c7 R09: 1ffffffff2238ab8 [ 1832.428467][T21765] R10: dffffc0000000000 R11: fffffbfff2238ab9 R12: 0000000000000001 [ 1832.428485][T21765] R13: ffff88803214a5d9 R14: ffff88802dbeac70 R15: ffff88802dbeace8 [ 1832.428503][T21765] FS: 00007fbf101f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1832.439739][ T5942] Modules linked in: [ 1832.439764][ T5942] CPU: 1 PID: 5942 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1832.451264][T21765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1832.451290][T21765] CR2: 00007fcdcb5cc068 CR3: 0000000076813000 CR4: 00000000003506f0 [ 1832.451313][T21765] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1832.451331][T21765] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1832.451348][T21765] Call Trace: [ 1832.451359][T21765] [ 1832.451388][T21765] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1832.451429][T21765] ieee80211_csa_finalize+0x5a6/0xf20 [ 1832.455451][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1832.463021][T21765] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1832.463064][T21765] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 1832.463101][T21765] ieee80211_channel_switch+0xad5/0xe70 [ 1832.463154][T21765] ? ieee80211_csa_finalize+0xf20/0xf20 [ 1832.473440][ T5942] Workqueue: events_unbound cfg80211_wiphy_work [ 1832.481323][T21765] ? mutex_lock_nested+0x20/0x20 [ 1832.501263][ T5942] [ 1832.506715][T21765] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1832.514878][ T5942] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1832.514918][ T5942] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c [ 1832.514940][ T5942] RSP: 0018:ffffc90005597200 EFLAGS: 00010287 [ 1832.514966][ T5942] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: 0000000000100000 [ 1832.514985][ T5942] RDX: ffffc90017638000 RSI: 00000000000067e6 RDI: 00000000000067e7 [ 1832.515002][ T5942] RBP: dffffc0000000000 R08: ffffffff911c55c7 R09: 1ffffffff2238ab8 [ 1832.515021][ T5942] R10: dffffc0000000000 R11: fffffbfff2238ab9 R12: 0000000000000001 [ 1832.515039][ T5942] R13: ffff88802fb325d9 R14: ffff888036f82c70 R15: ffff888036f82ce8 [ 1832.515059][ T5942] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1832.515078][ T5942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1832.524220][T21765] rdev_channel_switch+0xeb/0x240 [ 1832.524262][T21765] nl80211_channel_switch+0xae8/0x1120 [ 1832.524297][T21765] ? wake_up_q+0xca/0x100 [ 1832.524338][T21765] ? __mutex_trylock_common+0x159/0x260 [ 1832.524363][T21765] ? mutex_unlock+0x10/0x10 [ 1832.524386][T21765] ? nl80211_set_coalesce+0x1340/0x1340 [ 1832.524464][T21765] ? __nla_parse+0x40/0x50 [ 1832.534272][ T5942] CR2: 00007ff8bc3456b8 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 1832.541958][T21765] ? nl80211_pre_doit+0x4f1/0x930 [ 1832.549825][ T5942] Call Trace: [ 1832.559091][T21765] genl_family_rcv_msg_doit+0x211/0x310 [ 1832.559142][T21765] ? end_current_label_crit_section+0x170/0x170 [ 1832.559182][T21765] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1832.559220][T21765] ? bpf_lsm_capable+0x9/0x10 [ 1832.559254][T21765] ? security_capable+0x89/0xb0 [ 1832.559294][T21765] genl_rcv_msg+0x619/0x7a0 [ 1832.563492][ T5942] [ 1832.571200][T21765] ? genl_bind+0x360/0x360 [ 1832.577612][ T5942] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1832.585981][T21765] ? nl80211_exit+0x30/0x30 [ 1832.586013][T21765] ? nl80211_set_coalesce+0x1340/0x1340 [ 1832.586043][T21765] ? nl80211_pre_doit+0x930/0x930 [ 1832.586074][T21765] ? ref_tracker_free+0x690/0x840 [ 1832.586114][T21765] netlink_rcv_skb+0x241/0x4d0 [ 1832.594233][ T5942] ieee80211_csa_finalize+0x5a6/0xf20 [ 1832.603194][T21765] ? genl_bind+0x360/0x360 [ 1832.605830][ T5942] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1832.608779][T21765] ? netlink_ack+0x1180/0x1180 [ 1832.615373][ T5942] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 1832.615441][ T5942] ieee80211_channel_switch+0xad5/0xe70 [ 1832.620973][T21765] ? __lock_acquire+0x7d40/0x7d40 [ 1832.632531][ T5942] ? ieee80211_csa_finalize+0xf20/0xf20 [ 1832.637758][T21765] ? down_read+0x1ac/0x2e0 [ 1832.644471][ T5942] ? rcu_is_watching+0x15/0xb0 [ 1832.650230][T21765] genl_rcv+0x28/0x40 [ 1832.656501][ T5942] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1832.662380][T21765] netlink_unicast+0x751/0x8d0 [ 1832.662431][T21765] netlink_sendmsg+0x8d0/0xbf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1832.662477][T21765] ? netlink_getsockopt+0x590/0x590 [ 1832.662516][T21765] ? aa_sock_msg_perm+0x94/0x150 [ 1832.667480][ T5942] ieee80211_ibss_process_chanswitch+0x9d6/0xd70 [ 1832.669817][T21765] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1832.675888][ T5942] ? trace_drv_return_int+0x1c0/0x1c0 [ 1832.683055][T21765] ? security_socket_sendmsg+0x80/0xa0 [ 1832.683087][T21765] ? netlink_getsockopt+0x590/0x590 [ 1832.683134][T21765] ____sys_sendmsg+0x5ba/0x960 [ 1832.703330][ T5942] ? cfg80211_find_elem_match+0x1bc/0x1f0 [ 1832.709318][T21765] ? __asan_memset+0x22/0x40 [ 1832.717417][ T5942] ? mutex_lock_nested+0x20/0x20 [ 1832.717512][ T5942] ieee80211_ibss_rx_queued_mgmt+0x1045/0x2c80 [ 1832.725520][T21765] ? __sys_sendmsg_sock+0x30/0x30 [ 1832.734977][ T5942] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 1832.741945][T21765] ? __import_iovec+0x5f2/0x850 [ 1832.749966][ T5942] ? mark_lock+0x94/0x320 [ 1832.759176][T21765] ? import_iovec+0x73/0xa0 [ 1832.759214][T21765] ___sys_sendmsg+0x2a6/0x360 [ 1832.759248][T21765] ? __sys_sendmsg+0x2a0/0x2a0 [ 1832.759334][T21765] __se_sys_sendmsg+0x1c2/0x2b0 [ 1832.759363][T21765] ? __x64_sys_sendmsg+0x80/0x80 [ 1832.759410][T21765] ? lockdep_hardirqs_on+0x98/0x150 [ 1832.759445][T21765] do_syscall_64+0x55/0xa0 [ 1832.759466][T21765] ? clear_bhb_loop+0x40/0x90 [ 1832.759496][T21765] ? clear_bhb_loop+0x40/0x90 [ 1832.759529][T21765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1832.759557][T21765] RIP: 0033:0x7fbf11f9c819 [ 1832.766664][ T5942] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1832.771532][T21765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1832.777186][ T5942] ? lock_chain_count+0x20/0x20 [ 1832.781881][T21765] RSP: 002b:00007fbf101f6028 EFLAGS: 00000246 [ 1832.787408][ T5942] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1832.792451][T21765] ORIG_RAX: 000000000000002e [ 1832.798311][ T5942] ? kcov_remote_start+0x4cb/0x7e0 [ 1832.802975][T21765] RAX: ffffffffffffffda RBX: 00007fbf12215fa0 RCX: 00007fbf11f9c819 [ 1832.811273][ T5942] ? lockdep_hardirqs_on+0x98/0x150 [ 1832.816366][T21765] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1832.819680][ T5942] ? kcov_remote_start+0x8f/0x7e0 [ 1832.825277][T21765] RBP: 00007fbf12032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1832.825297][T21765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1832.825313][T21765] R13: 00007fbf12216038 R14: 00007fbf12215fa0 R15: 00007ffff9c3aef8 [ 1832.831618][ T5942] ieee80211_iface_work+0x717/0xc70 [ 1832.831655][ T5942] ? _raw_spin_unlock_irq+0x23/0x50 [ 1832.838025][T21765] [ 1832.838041][T21765] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1832.838053][T21765] CPU: 0 PID: 21765 Comm: syz.7.3245 Not tainted syzkaller #0 [ 1832.838073][T21765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1832.838086][T21765] Call Trace: [ 1832.838094][T21765] [ 1832.838103][T21765] dump_stack_lvl+0x18c/0x250 [ 1832.838154][T21765] ? show_regs_print_info+0x20/0x20 [ 1832.838187][T21765] ? load_image+0x420/0x420 [ 1832.838232][T21765] panic+0x2dc/0x730 [ 1832.838372][T21765] ? bpf_jit_dump+0xd0/0xd0 [ 1832.838504][T21765] __warn+0x2e0/0x470 [ 1832.838571][T21765] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1832.838656][T21765] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1832.838725][T21765] report_bug+0x2be/0x4f0 [ 1832.838783][T21765] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1832.838858][T21765] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1832.838934][T21765] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1832.839002][T21765] handle_bug+0xcf/0x120 [ 1832.839058][T21765] exc_invalid_op+0x1a/0x50 [ 1832.839126][T21765] asm_exc_invalid_op+0x1a/0x20 [ 1832.839193][T21765] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1832.839301][T21765] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c [ 1832.839462][T21765] RSP: 0018:ffffc90003256e00 EFLAGS: 00010287 [ 1832.839516][T21765] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: 0000000000080000 [ 1832.839552][T21765] RDX: ffffc9000d059000 RSI: 000000000000d654 RDI: 000000000000d655 [ 1832.839594][T21765] RBP: dffffc0000000000 R08: ffffffff911c55c7 R09: 1ffffffff2238ab8 [ 1832.839638][T21765] R10: dffffc0000000000 R11: fffffbfff2238ab9 R12: 0000000000000001 [ 1832.839681][T21765] R13: ffff88803214a5d9 R14: ffff88802dbeac70 R15: ffff88802dbeace8 [ 1832.839760][T21765] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 1832.839929][T21765] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1832.840017][T21765] ieee80211_csa_finalize+0x5a6/0xf20 [ 1832.840184][T21765] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1832.840264][T21765] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 1832.840373][T21765] ieee80211_channel_switch+0xad5/0xe70 [ 1832.840485][T21765] ? ieee80211_csa_finalize+0xf20/0xf20 [ 1832.840583][T21765] ? mutex_lock_nested+0x20/0x20 [ 1832.840650][T21765] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1832.840739][T21765] rdev_channel_switch+0xeb/0x240 [ 1832.840822][T21765] nl80211_channel_switch+0xae8/0x1120 [ 1832.840901][T21765] ? wake_up_q+0xca/0x100 [ 1832.841007][T21765] ? __mutex_trylock_common+0x159/0x260 [ 1832.841062][T21765] ? mutex_unlock+0x10/0x10 [ 1832.841119][T21765] ? nl80211_set_coalesce+0x1340/0x1340 [ 1832.841362][T21765] ? __nla_parse+0x40/0x50 [ 1832.841470][T21765] ? nl80211_pre_doit+0x4f1/0x930 [ 1832.841559][T21765] genl_family_rcv_msg_doit+0x211/0x310 [ 1832.841625][T21765] ? end_current_label_crit_section+0x170/0x170 [ 1832.841724][T21765] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1832.841813][T21765] ? bpf_lsm_capable+0x9/0x10 [ 1832.841892][T21765] ? security_capable+0x89/0xb0 [ 1832.841991][T21765] genl_rcv_msg+0x619/0x7a0 [ 1832.842074][T21765] ? genl_bind+0x360/0x360 [ 1832.842121][T21765] ? nl80211_exit+0x30/0x30 [ 1832.842177][T21765] ? nl80211_set_coalesce+0x1340/0x1340 [ 1832.842255][T21765] ? nl80211_pre_doit+0x930/0x930 [ 1832.842330][T21765] ? ref_tracker_free+0x690/0x840 [ 1832.842428][T21765] netlink_rcv_skb+0x241/0x4d0 [ 1832.842532][T21765] ? genl_bind+0x360/0x360 [ 1832.842597][T21765] ? netlink_ack+0x1180/0x1180 [ 1832.842717][T21765] ? __lock_acquire+0x7d40/0x7d40 [ 1832.842814][T21765] ? down_read+0x1ac/0x2e0 [ 1832.842881][T21765] genl_rcv+0x28/0x40 [ 1832.842924][T21765] netlink_unicast+0x751/0x8d0 [ 1832.842964][T21765] netlink_sendmsg+0x8d0/0xbf0 [ 1832.843006][T21765] ? netlink_getsockopt+0x590/0x590 [ 1832.843040][T21765] ? aa_sock_msg_perm+0x94/0x150 [ 1832.843064][ T5942] cfg80211_wiphy_work+0x225/0x260 [ 1832.843150][ T5942] ? process_scheduled_works+0x96f/0x15d0 [ 1832.843256][ T5942] process_scheduled_works+0xa5d/0x15d0 [ 1832.843432][ T5942] ? worker_attach_to_pool+0x380/0x380 [ 1832.843523][ T5942] ? assign_work+0x3d2/0x5d0 [ 1832.843620][ T5942] worker_thread+0xa55/0xfc0 [ 1832.843696][ T5942] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1832.843770][ T5942] ? _raw_spin_unlock+0x40/0x40 [ 1832.843902][ T5942] kthread+0x2fa/0x390 [ 1832.843955][ T5942] ? pr_cont_work+0x560/0x560 [ 1832.844031][ T5942] ? kthread_blkcg+0xd0/0xd0 [ 1832.844086][ T5942] ret_from_fork+0x48/0x80 [ 1832.844172][ T5942] ? kthread_blkcg+0xd0/0xd0 [ 1832.844228][ T5942] ret_from_fork_asm+0x11/0x20 [ 1832.844344][ T5942] [ 1832.844370][ T5942] irq event stamp: 17223413 [ 1832.844393][ T5942] hardirqs last enabled at (17223415): [] vprintk_store+0xa33/0xda0 [ 1832.844478][ T5942] hardirqs last disabled at (17223416): [] vprintk_store+0x190/0xda0 [ 1832.844572][ T5942] softirqs last enabled at (17223380): [] __irq_exit_rcu+0xd3/0x190 [ 1832.844667][ T5942] softirqs last disabled at (17223351): [] __irq_exit_rcu+0xd3/0x190 [ 1832.844741][ T5942] ---[ end trace 0000000000000000 ]--- [ 1832.954968][T21768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1833.202994][ T5942] ------------[ cut here ]------------ [ 1833.203027][ T5942] WARNING: CPU: 1 PID: 5942 at net/mac80211/chan.c:1423 ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1833.203138][ T5942] Modules linked in: [ 1833.203172][ T5942] CPU: 1 PID: 5942 Comm: kworker/u4:10 Tainted: G W syzkaller #0 [ 1833.203228][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1833.203262][ T5942] Workqueue: events_unbound cfg80211_wiphy_work [ 1833.203338][ T5942] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1833.203414][ T5942] Code: df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 0f 0b <0f> 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c 24 30 [ 1833.203466][ T5942] RSP: 0018:ffffc90005597200 EFLAGS: 00010287 [ 1833.203511][ T5942] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: 0000000000100000 [ 1833.203547][ T5942] RDX: ffffc90017638000 RSI: 00000000000067e6 RDI: 00000000000067e7 [ 1833.203590][ T5942] RBP: dffffc0000000000 R08: ffffffff911c55c7 R09: 1ffffffff2238ab8 [ 1833.203634][ T5942] R10: dffffc0000000000 R11: fffffbfff2238ab9 R12: 0000000000000001 [ 1833.203669][ T5942] R13: ffff88802fb325d9 R14: ffff888036f82c70 R15: ffff888036f82ce8 [ 1833.203713][ T5942] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1833.203765][ T5942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1833.203800][ T5942] CR2: 00007f814f9c9000 CR3: 000000002e7cf000 CR4: 00000000003506e0 [ 1833.203852][ T5942] Call Trace: [ 1833.203875][ T5942] [ 1833.203944][ T5942] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1833.204034][ T5942] ieee80211_csa_finalize+0x5a6/0xf20 [ 1833.204129][ T5942] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1833.204233][ T5942] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 1833.204348][ T5942] ieee80211_channel_switch+0xad5/0xe70 [ 1833.204467][ T5942] ? ieee80211_csa_finalize+0xf20/0xf20 [ 1833.204558][ T5942] ? rcu_is_watching+0x15/0xb0 [ 1833.204635][ T5942] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1833.204736][ T5942] ieee80211_ibss_process_chanswitch+0x9d6/0xd70 [ 1833.204823][ T5942] ? trace_drv_return_int+0x1c0/0x1c0 [ 1833.204878][ T5942] ? cfg80211_find_elem_match+0x1bc/0x1f0 [ 1833.205103][ T5942] ? mutex_lock_nested+0x20/0x20 [ 1833.205215][ T5942] ieee80211_ibss_rx_queued_mgmt+0x1045/0x2c80 [ 1833.205346][ T5942] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 1833.205443][ T5942] ? mark_lock+0x94/0x320 [ 1833.205520][ T5942] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1833.205627][ T5942] ? lock_chain_count+0x20/0x20 [ 1833.205700][ T5942] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1833.205788][ T5942] ? kcov_remote_start+0x4cb/0x7e0 [ 1833.205858][ T5942] ? lockdep_hardirqs_on+0x98/0x150 [ 1833.205943][ T5942] ? kcov_remote_start+0x8f/0x7e0 [ 1833.206021][ T5942] ieee80211_iface_work+0x717/0xc70 [ 1833.206080][ T5942] ? _raw_spin_unlock_irq+0x23/0x50 [ 1833.206169][ T5942] cfg80211_wiphy_work+0x225/0x260 [ 1833.206245][ T5942] ? process_scheduled_works+0x96f/0x15d0 [ 1833.206331][ T5942] process_scheduled_works+0xa5d/0x15d0 [ 1833.206496][ T5942] ? worker_attach_to_pool+0x380/0x380 [ 1833.206625][ T5942] ? assign_work+0x3d2/0x5d0 [ 1833.206715][ T5942] worker_thread+0xa55/0xfc0 [ 1833.206791][ T5942] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1833.206867][ T5942] ? _raw_spin_unlock+0x40/0x40 [ 1833.207019][ T5942] kthread+0x2fa/0x390 [ 1833.207081][ T5942] ? pr_cont_work+0x560/0x560 [ 1833.207159][ T5942] ? kthread_blkcg+0xd0/0xd0 [ 1833.207215][ T5942] ret_from_fork+0x48/0x80 [ 1833.207282][ T5942] ? kthread_blkcg+0xd0/0xd0 [ 1833.207346][ T5942] ret_from_fork_asm+0x11/0x20 [ 1833.207471][ T5942] [ 1833.207491][ T5942] irq event stamp: 17223589 [ 1833.207513][ T5942] hardirqs last enabled at (17223591): [] vprintk_store+0xa33/0xda0 [ 1833.207592][ T5942] hardirqs last disabled at (17223592): [] vprintk_store+0x190/0xda0 [ 1833.207679][ T5942] softirqs last enabled at (17223468): [] __irq_exit_rcu+0xd3/0x190 [ 1833.207745][ T5942] softirqs last disabled at (17223459): [] __irq_exit_rcu+0xd3/0x190 [ 1833.207811][ T5942] ---[ end trace 0000000000000000 ]--- [ 1834.141495][T21765] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1834.146847][T21765] ? security_socket_sendmsg+0x80/0xa0 [ 1834.152341][T21765] ? netlink_getsockopt+0x590/0x590 [ 1834.157589][T21765] ____sys_sendmsg+0x5ba/0x960 [ 1834.162396][T21765] ? __asan_memset+0x22/0x40 [ 1834.167050][T21765] ? __sys_sendmsg_sock+0x30/0x30 [ 1834.172110][T21765] ? __import_iovec+0x5f2/0x850 [ 1834.177052][T21765] ? import_iovec+0x73/0xa0 [ 1834.181682][T21765] ___sys_sendmsg+0x2a6/0x360 [ 1834.186424][T21765] ? __sys_sendmsg+0x2a0/0x2a0 [ 1834.191279][T21765] __se_sys_sendmsg+0x1c2/0x2b0 [ 1834.196253][T21765] ? __x64_sys_sendmsg+0x80/0x80 [ 1834.201246][T21765] ? lockdep_hardirqs_on+0x98/0x150 [ 1834.206538][T21765] do_syscall_64+0x55/0xa0 [ 1834.210990][T21765] ? clear_bhb_loop+0x40/0x90 [ 1834.215713][T21765] ? clear_bhb_loop+0x40/0x90 [ 1834.220424][T21765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1834.226547][T21765] RIP: 0033:0x7fbf11f9c819 [ 1834.231082][T21765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.250818][T21765] RSP: 002b:00007fbf101f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1834.259444][T21765] RAX: ffffffffffffffda RBX: 00007fbf12215fa0 RCX: 00007fbf11f9c819 [ 1834.267631][T21765] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1834.275816][T21765] RBP: 00007fbf12032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1834.283821][T21765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1834.291913][T21765] R13: 00007fbf12216038 R14: 00007fbf12215fa0 R15: 00007ffff9c3aef8 [ 1834.300058][T21765] [ 1834.303691][T21765] Kernel Offset: disabled [ 1834.308238][T21765] Rebooting in 86400 seconds..