last executing test programs: 2m46.667569536s ago: executing program 1 (id=154): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) 2m45.916192503s ago: executing program 1 (id=157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000780)={0x0, 0x5}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000800)=@sack_info={r1, 0x8, 0x8}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r2 = socket(0x200000000000011, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x1, 0x11aa, &(0x7f0000001280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xc0181, 0x45) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0xb, 0x908, 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x460a40, 0x0) execveat(r7, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)={[&(0x7f00000001c0)='\x00', 0xfffffffffffffffd, &(0x7f0000000300)='@.\\\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='bridge0\x00', &(0x7f00000003c0)='&}(^./{$\x00', &(0x7f0000000400)='syz0\x00']}, &(0x7f0000000700)={[&(0x7f0000000480)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f00000004c0)='/.\x00', &(0x7f0000000500)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000540)='syz0\x00', &(0x7f0000000580)='&\x00', &(0x7f00000005c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000600)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000640)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000680)='syz1\x00', &(0x7f00000006c0)='bridge0\x00']}, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m44.295184147s ago: executing program 4 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = semget(0xffffffffffffffff, 0x8, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x1, 0xffff, 0x1800}], 0x1, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x4, 0x7ff, 0x4, 0x7ca3, 0x6, 0xfff9]) semget(0x1, 0x3, 0x8a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) 2m40.920064087s ago: executing program 4 (id=165): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x570, 0xe8, 0xe8, 0xe8, 0xe8, 0xe8, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x3a010000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@private0, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x1000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kvm_dirty_ring_push\x00', r3}, 0x18) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r4, 0x0, 0x0, 0x0}, 0x30) 2m40.282459629s ago: executing program 4 (id=168): lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@known='security.selinux\x00', &(0x7f0000000240)=""/58, 0x3a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f0000000280), 0x9, 0xc102) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc4c03d12, &(0x7f0000000140)={0x3664, 0x9}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000002c0)={0x2, r2}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x113, &(0x7f0000000800)={0x0, 0x46f4, 0x1, 0x0, 0x1}, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070029000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800800044000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000100)=0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x30, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8084}, 0x40040040) 2m32.575875615s ago: executing program 4 (id=179): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x156, &(0x7f0000000240)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="d3809dd114c30ebecae70250847ebe1bd7bb82d3f3ddf6a4162d5049f184cfed946a53defc8d87e8d64376968c13718c81ef9026ea73b90301e13763084574d183e6d52e391bf9960975e98dd3fdb2957d12e541bfb62f8c306e073efb0555b60b8256109f8583f181c04f51d9bec22f98b3d66d04f9c0298f931e80449e3c9b065b8078db90ee9d0ef8b68dda57609d6cbd4f6c16d9252233793138631cea11a96d23e2f7", 0xa5}], 0x1}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x10, r4) ptrace(0x4208, r4) lseek(r2, 0x0, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) 2m30.813440359s ago: executing program 4 (id=180): set_mempolicy(0x2, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xa, 0x2, 0x7, 0x8001, 0x3, 0xff, "e7a2affd6a0af856d9cf"}}, 0x122) 2m27.950191579s ago: executing program 4 (id=187): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600702, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x18, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'vxcan1\x00', @random="e7d890be0a7d"}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 2m25.922752366s ago: executing program 32 (id=187): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600702, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x18, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'vxcan1\x00', @random="e7d890be0a7d"}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 1m58.736417157s ago: executing program 1 (id=157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000780)={0x0, 0x5}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000800)=@sack_info={r1, 0x8, 0x8}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r2 = socket(0x200000000000011, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x1, 0x11aa, &(0x7f0000001280)="$eJzs209rI2UcB/Bf/2hramv9V20vPuhFL4PtwVMvRVqQBpS2EVpBmNJUQ2ISMjkk4qFnT74O8ehNEN9A34W3ooheenKWbZZ2W7qH3WUb2P18LvnCNwPPw8DAM8zvbP2n75rHRXac92NyYiKmuxHpPEWKyZiKkZP46O/1/37c3T/Y3qhWN3dS2trYW/0kpbTw3u9f/fDL+3/05778deG3mThd/Prsn7U/T5dOl8/+3/u2UaRGkdqdfsrTYafTzw9b9XTUKJpZSl+06nlRT412Ue9d649bnW53mPL20Xyl26sXRcrbw9SsD1O/k/q9Ycq/yRvtlGVZmq8ET6P283lZlhFl+VK8HGVZlq9EJebi1ZiPhXgtFuP1eCPejLfi7ViKd+LdWL7417jXDQAAAAAAAAAAAAAAAAAAAM8X8/8AAAAAAAAAAAAAAAAAAAAwfub/AQAAAAAAAAAAAAAAAAAAYPzM/wMAAAAAAAAAAAAAAAAAAMD47e4fbG9Uq5s7Kc1G/HUyqA1qo99Rv/VZdfPjdGHx6qp/B4Pa1GW/OurT9X4mKg/6tVv72fjwg1F/v/v08+qNfiWOnv32AQAA4IWQpUu3nu+z7FH9KD30fuDG+X06VqbvbBs8oWL4fTNvteo9QRCEyzDuJxN34eqmj3slAAAAAAAAAAAAPI67+Jxw3HsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7rEDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAqwIAAP//DSeWkg==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xc0181, 0x45) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0xb, 0x908, 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x460a40, 0x0) execveat(r7, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)={[&(0x7f00000001c0)='\x00', 0xfffffffffffffffd, &(0x7f0000000300)='@.\\\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='bridge0\x00', &(0x7f00000003c0)='&}(^./{$\x00', &(0x7f0000000400)='syz0\x00']}, &(0x7f0000000700)={[&(0x7f0000000480)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f00000004c0)='/.\x00', &(0x7f0000000500)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000540)='syz0\x00', &(0x7f0000000580)='&\x00', &(0x7f00000005c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000600)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000640)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000680)='syz1\x00', &(0x7f00000006c0)='bridge0\x00']}, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m42.935111996s ago: executing program 3 (id=253): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r0, 0xc, 0x8}, 0xc) r1 = syz_usb_connect$uac1(0x0, 0xbb, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0x0, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x11, 0x24, 0x6, 0x4, 0x2, 0x5, [0x9, 0x3, 0x3, 0x18, 0x0], 0xd}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x5, 0x2, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x0, 0x4, "f1b580dd"}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x1, 0x5, [0x2, 0x9, 0x2, 0x6, 0x3], 0x8}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x80, "3fe44f0fea66"}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x2, "b2d56114"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x4, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x68, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) 1m36.765714598s ago: executing program 3 (id=259): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x3}, 0xfd4e89b3c4e748a8) creat(0x0, 0x1c80cc26be508e6e) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x59) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) 1m36.015863683s ago: executing program 3 (id=261): getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000380)=0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4) listen(r0, 0xfff) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x12808, &(0x7f00000004c0)={[{@sys_tz}, {@discard}, {@utf8}, {@errors_continue}, {}, {@umask={'umask', 0x3d, 0x3ff5}}, {@gid}, {@codepage={'codepage', 0x3d, 'cp863'}}, {@discard}, {@errors_continue}]}, 0x5, 0x150f, &(0x7f00000037c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="203111000000084677358e2e8e08003bc867a6deeb75cd774250ba05ea91740a0100e69e5c3460acbc9a351a96fbf0e889169e2596fa160211a521ff0700000000000000a0ea431b0edda831a4b7a09361a55614c53d2a094314bfda0374e8"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0xfffffffffffffffe, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, &(0x7f0000000100)}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m32.414011915s ago: executing program 3 (id=267): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x156, &(0x7f0000000240)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="d3809dd114c30ebecae70250847ebe1bd7bb82d3f3ddf6a4162d5049f184cfed946a53defc8d87e8d64376968c13718c81ef9026ea73b90301e13763084574d183e6d52e391bf9960975e98dd3fdb2957d12e541bfb62f8c306e073efb0555b60b8256109f8583f181c04f51d9bec22f98b3d66d04f9c0298f931e80449e3c9b065b8078db90ee9d0ef8b68dda57609d6cbd4f6c16d9252233793138631cea11a96d23e2f7", 0xa5}], 0x1}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) ptrace(0x4208, r3) lseek(r2, 0x0, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) 1m31.054776147s ago: executing program 3 (id=268): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) (fail_nth: 3) 1m27.49404087s ago: executing program 3 (id=274): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009a6c8120450502800a030102030109021265e8fd2a83673f2c4e0001000000020904000000582a7400f6cc8769aca102ae01281fb3f8d4e70e1be5cdf7ddf42216eb80480fc8bb453f4440b59ac97ad500abf1b59ea5fc662b77bcb34419"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001540)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="8221eef51dffaa63fb86f96acabbbaf44962223ceb9c0df01611da75ed6448a3d66157d038d4705fdc9abe48b22350fa0d0c52260c1df8"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000880)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "40420f", 0x0, 0x6c, 0x0, @dev, @mcast1, [], "ec8112c3f18162af"}}}}}}}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000700), 0x3, 0x453, &(0x7f0000000740)="$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") mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000000)='./file0\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000080)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x4a28, 0x20040) sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r5) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) syz_open_dev$MSR(&(0x7f0000000040), 0x101, 0x0) 1m25.857942774s ago: executing program 33 (id=274): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009a6c8120450502800a030102030109021265e8fd2a83673f2c4e0001000000020904000000582a7400f6cc8769aca102ae01281fb3f8d4e70e1be5cdf7ddf42216eb80480fc8bb453f4440b59ac97ad500abf1b59ea5fc662b77bcb34419"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001540)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="8221eef51dffaa63fb86f96acabbbaf44962223ceb9c0df01611da75ed6448a3d66157d038d4705fdc9abe48b22350fa0d0c52260c1df8"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000880)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "40420f", 0x0, 0x6c, 0x0, @dev, @mcast1, [], "ec8112c3f18162af"}}}}}}}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000700), 0x3, 0x453, &(0x7f0000000740)="$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") mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000000a40)="$eJzs3U2MW0cBAOCxd73JtilxSkKXNLQJhbb8dNPsLuEngqRKhETUVIhLpQgOUZqWiBAkigRUlUhy4karKkic+BGnXqqCkOgFRT1xqUQjVUg9FQ4ciIKIxAECidHuznjtid1n74+fvf4+aTx+b97zzDw/P7/fmQCMrerS68LCTCWEy2+8cuzvD/9tenHM4eYU9aXXyZahWgihEocns897b2I5vnXjxdOd4kqYW3pNw+Gp68157w4hXAh7w5VQD7svX335rbknT1w8fmnf268eurYxtQcAgPHy1SuHFnb95U/377j52gNHwpY0evHN0v55PY7YFvf7j8Qd/7T/Xw3tw5WW0Goqm24yhup0+3QTHaZrzaeWTTfZJf+pLP9al+m2hPfPf6JlXKd6wyhL63E9VKqzbcPV6uzs8jF5WDqun6rMnj977tnnSyoosO7+9WAIYW9LOHqpfXi14Rtxy7Een9UaDm/AZ64x1HqsZ2MIyjqS4cjg8rrZWFZ6nQcUGttL3gABRPn1wjtcyM8srE3z0yZ7y//6E9XO88M6GPT631f+UyXnH+T/64u2OKyfzbo2pXql39G2OJxfR8jvX+r++8uvdLSPza9H1HosZ7frCKNyfaFbOScGXI7V6lb+fL3YrL4Y47QcvpSlt/5+8u90VL5joLN/5+f/BUEY7hDahmtr+axGydsfYHjl98010vXRKL+vL0/fUpC+tSB9uiD9roL0uwvSYZz99ns/CS9VVo7z82P6fs+Hp/Ns98T4A32WJz8f2W/++X2//Vpr/vn9xDDMfn/q6TOfe+bk1eX7/yvN9f92XN/T4UY9/rauxAnS+cL8vHrz3v96ez7VLtPdm5Xnng7TL73f2T5dZefK54SW7cwd5Zhpn297t+n2tE9Xz6abjmFrVt58/+SubL60/5G2q2l5TWb1rWX1mMrKkbYrO2KclwNWI62P3e7/T+vnTKhVnj177szjcTitp3+cqG1ZHH9gwOUG1q7X539mQvvzP9ua42vV1u3C9pXxleXtwuvx89rHzzXzaR8/H4fT/9w3J6aXxs+e/s65Z9a/+jDWnv/hC986de7cme+W/mZ+OoQhKMYq3nx5OIrRz5t02DIs5Vn1m8WKDEExNuGbkjdMwIbb/6PlnYDHzn771HNnnjtzfv7gwfm5uYOfn1/Yv7Rfv791777VhRJKC6ynlT/9sksCAAAAAAAAAAAA9Or7x49dfefNz767/Pz/yvN/6fn/dOdvev7/x9nz//lz8uk5+PQc4I4O6UvTZA2sTmXT1WL4YFbenVk+u7L5PhTjZj9+8fn/lF3ermsqz33Z+FqXwaw5gTvaS5nK2iDJ+wv8aIwvxfhXAUpUme48OsZF7VundT21T9HSLkVD+8CjI31vaW1I7Zik5787tuvU8mXvGEAZWX+DeJyw7DoCnf1jrNr//udKxUsvi9A9TA42v5+N7zrR6LqX3msPNgDro+z+P9N5zxSf/8NXti6GNNn1J9q3l3n7pdCPP7/TPjzs/U9udP55v32Dzr/s+g+6/89m/3c9b/+yHvPqq8v3Pz+/9m5LtmF3r/nn9U/tQO/sL/+bMf9Um0dCb/k3fpnln18Q6tF/s/zv6jH/O+q/Z3X5/y/mnxbbow/1mn91+ZpZtb0c+XnjdP0vP2+c3Mrqn9r2fJ/8v/ZCp/qvsqPG2zF/GGej0s9sv7L9iOZO++r7/40urG//v83CZpu1/D6Mz8QxaUOc7nPI+zvpt/zp/or0P7Ar+/xKwf+b/n9H2xdiXPR7SP3/3r6xfDmvHv/y0/pZj8syDdc6LNvNuq2BUfXeWF3/W4dwcsPz2Fp6HYc+HBmCMjRDY2IV8zX7iSu5/I1GY2NPaBUoNXNKX/5lHyeUnX/Zy79I3v9vvg+f9/+bp+f9/+bpef+/efp0/Ia6pef9/+bLM+//N0+/L/vcvH/gmYL0Dxek7+6c3jxsv79g/j0F6R8pSN/XTD/cNkVKf6Bg/gcL0u9tT9+Spz9UMP/HCtI/XpD+cEH6oy3prX1Ap/RPFMy/2aXnUca1/jDO8ufz/P5hfKTrP91+/zsL0oHR9dPXDhw9+Zuv15ef/59qng9J1/GOxOFaPH76QRzOr3uHluHFtDfj8F+z9GE/3wHjJG8/I/9/f6QgHRhd6T4vv28YQ5WtnUfHuKjdqm77+YyWT8b4UzH+dIwfi/FsjPfH+ECM5wZUPjbG0dd/d+ilysrx/vYsvdf7yfPngdraiQohzPdYnvz8QL/3s+ft+PVrrfmv8nEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0lSXXhcWZiohXH7jlWNPnzi7f3HM4eYU9aXXyZahWnO+EB6P8USMfxHf3Lrx4unW+HaMK2EuVEKlOT48db2Z090hhAthb7gS6mH35asvvzX35ImLxy/te/vVQ9c2bgkAAADA5vf/AAAA//9LWAnF") chdir(&(0x7f0000000000)='./file0\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000080)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x4a28, 0x20040) sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r5) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) syz_open_dev$MSR(&(0x7f0000000040), 0x101, 0x0) 1m24.486624376s ago: executing program 0 (id=280): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x156, &(0x7f0000000240)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="d3809dd114c30ebecae70250847ebe1bd7bb82d3f3ddf6a4162d5049f184cfed946a53defc8d87e8d64376968c13718c81ef9026ea73b90301e13763084574d183e6d52e391bf9960975e98dd3fdb2957d12e541bfb62f8c306e073efb0555b60b8256109f8583f181c04f51d9bec22f98b3d66d04f9c0298f931e80449e3c9b065b8078db90ee9d0ef8b68dda57609d6cbd4f6c16d9252233793138631cea11a96d23e2f7", 0xa5}], 0x1}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) ptrace(0x4208, r3) lseek(r2, 0x0, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) 1m23.305665215s ago: executing program 0 (id=284): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80000, 0x80000022) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1, 0x149, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000540)='./bus\x00', 0x1a00040, &(0x7f0000000b80)={[{@utf8}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@rodir}, {@shortname_winnt}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_lower}, {@utf8no}]}, 0x3, 0x359, &(0x7f0000000c40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000300), 0x2a, 0x402100) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000140)={'batadv_slave_0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1ce9247ed28d999e2007002a3415a475c13d61fd0ec253105e3d50b1bab1945ffcb3dc2318dbd95f48fdc7d9237a1dab31d8227a5f6f086072f9c36067587344bb81ae4a63d6c03eabd2de4c97ccf09529265184434c7be40b5c53cf2cd8270432e57241d289fb28bd607c8e61762817a602c1c9689659f17560e0dd4ff0af2421540000000007831d4bdd353d54ea07cc492e231ecb28defd9b546ca3ebe4925a76b7d4463126f170ef8518a3", @ANYRES16=r4, @ANYBLOB="090200000000000000000a0000000600090002000000"], 0x1c}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r12, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r13, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000001) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xfffffffffffffe8b}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1m19.785619362s ago: executing program 1 (id=157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000780)={0x0, 0x5}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000800)=@sack_info={r1, 0x8, 0x8}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r2 = socket(0x200000000000011, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x1, 0x11aa, &(0x7f0000001280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xc0181, 0x45) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0xb, 0x908, 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x460a40, 0x0) execveat(r7, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)={[&(0x7f00000001c0)='\x00', 0xfffffffffffffffd, &(0x7f0000000300)='@.\\\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='bridge0\x00', &(0x7f00000003c0)='&}(^./{$\x00', &(0x7f0000000400)='syz0\x00']}, &(0x7f0000000700)={[&(0x7f0000000480)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f00000004c0)='/.\x00', &(0x7f0000000500)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000540)='syz0\x00', &(0x7f0000000580)='&\x00', &(0x7f00000005c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000600)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000640)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000680)='syz1\x00', &(0x7f00000006c0)='bridge0\x00']}, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m18.869532041s ago: executing program 0 (id=289): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x66c}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x3552e0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b00000000000000400101c0"]) 1m17.390059572s ago: executing program 0 (id=293): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x156, &(0x7f0000000240)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="d3809dd114c30ebecae70250847ebe1bd7bb82d3f3ddf6a4162d5049f184cfed946a53defc8d87e8d64376968c13718c81ef9026ea73b90301e13763084574d183e6d52e391bf9960975e98dd3fdb2957d12e541bfb62f8c306e073efb0555b60b8256109f8583f181c04f51d9bec22f98b3d66d04f9c0298f931e80449e3c9b065b8078db90ee9d0ef8b68dda57609d6cbd4f6c16d9252233793138631cea11a96d23e2f7", 0xa5}], 0x1}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) ptrace(0x4208, r3) lseek(r2, 0x0, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) 1m15.421004358s ago: executing program 0 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001500)={0x0, 0x0}) sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@space_cache}, {@noacl}, {@skip_balance}, {@thread_pool={'thread_pool', 0x3d, 0x9}}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x5}}]}, 0x4, 0x55ae, &(0x7f000000ac40)="$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") r3 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll, &(0x7f0000000000)=0x80, 0x80800) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$sock_ax25_SIOCADDRT(r4, 0x89e3, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000180)=@sco, 0x80, &(0x7f0000000200)}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1m14.038060752s ago: executing program 0 (id=302): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x66c}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x3552e0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b00000000000000400101c0"]) 1m13.10419905s ago: executing program 34 (id=302): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x66c}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x3552e0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b00000000000000400101c0"]) 1m12.492097977s ago: executing program 5 (id=304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) 1m11.380935491s ago: executing program 5 (id=305): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$setsig(r1, 0xa, 0x40) bind$802154_dgram(r1, &(0x7f00000000c0), 0x14) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000100)=""/154, 0x9a}], 0x1, 0x3, 0x6) 1m10.882047079s ago: executing program 5 (id=306): mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffffffffffffe) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f000000e600)={{0x2, 0x4e21, @empty}, {0x2, @random="0e02685b8586"}, 0x4, {0x2, 0x4e22, @loopback}, 'lo\x00'}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x4, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000080)=""/150, 0x96}, &(0x7f0000000140), 0x20}}], 0x30}, 0x24000014) 1m10.715390128s ago: executing program 5 (id=307): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x156, &(0x7f0000000240)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="d3809dd114c30ebecae70250847ebe1bd7bb82d3f3ddf6a4162d5049f184cfed946a53defc8d87e8d64376968c13718c81ef9026ea73b90301e13763084574d183e6d52e391bf9960975e98dd3fdb2957d12e541bfb62f8c306e073efb0555b60b8256109f8583f181c04f51d9bec22f98b3d66d04f9c0298f931e80449e3c9b065b8078db90ee9d0ef8b68dda57609d6cbd4f6c16d9252233793138631cea11a96d23e2f7", 0xa5}], 0x1}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) ptrace(0x4208, r3) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) 1m9.477546073s ago: executing program 5 (id=309): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8}]}, 0x3c}}, 0x20000000) mount(0x0, &(0x7f0000000300)='./control\x00', &(0x7f0000000440)='ecryptfs\x00', 0x20000c0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0x6, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x1) 1m8.261216257s ago: executing program 5 (id=312): r0 = socket(0x10, 0x3, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x8020, 0x5, 0xffff, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x66, 0x0, 0xa, 0x8dbd28f20dd185c3, 0x0, @private=0xa010100, @remote, {[@ssrr={0x89, 0x13, 0x44, [@empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010102]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00000427bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008085) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000007c0)={0x0, 0x83, "1d6689b232653bc22f5990973aba0128aca7dc97587db436bf1892b856f08cb85cb92b3523ef1b73524891eec7dc6dacbf42f2d2eff6c750c40e1aea5c50aa853c908a5fc77ccc42df16af3ce4ff4d9d6fd6a81c0a5b3e8dd5d7697997c07247b20cc039f8728e6b20ccaf0201c022e7eee82bbf8c74ead20fcf3f072e2dffa39aa186"}, &(0x7f0000000880)=0x8b) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d00)={r3, 0x1b7, "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"}, &(0x7f00000001c0)=0x1bf) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000780)={r4, 0x6b0}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000001600554363cb33bc2db1bdf40a00007848853bb3c0e806d2e0a1703c0b28000008000007000000017d84de64f41dbfcaef7436be7b9b378d4fd17bafba067dec4c54102ff22beaac9e8c3487db085073fe3ed248dd37a2b12ec76241cc558b158ec264e80278f75ab375c03cb755439737778a7a162dcefeeb49e6c5f401261bbfc3020eea7fb16733bf1c69c249fc3447a5004c7cfe098fb2e473690276e790f65ab7c3770a31ee7dbc53f2d2c85e6c78f3"], 0x2c}}, 0x0) 1m7.062333058s ago: executing program 35 (id=312): r0 = socket(0x10, 0x3, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x8020, 0x5, 0xffff, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x66, 0x0, 0xa, 0x8dbd28f20dd185c3, 0x0, @private=0xa010100, @remote, {[@ssrr={0x89, 0x13, 0x44, [@empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010102]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00000427bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008085) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000007c0)={0x0, 0x83, "1d6689b232653bc22f5990973aba0128aca7dc97587db436bf1892b856f08cb85cb92b3523ef1b73524891eec7dc6dacbf42f2d2eff6c750c40e1aea5c50aa853c908a5fc77ccc42df16af3ce4ff4d9d6fd6a81c0a5b3e8dd5d7697997c07247b20cc039f8728e6b20ccaf0201c022e7eee82bbf8c74ead20fcf3f072e2dffa39aa186"}, &(0x7f0000000880)=0x8b) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d00)={r3, 0x1b7, "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"}, &(0x7f00000001c0)=0x1bf) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000780)={r4, 0x6b0}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000001600554363cb33bc2db1bdf40a00007848853bb3c0e806d2e0a1703c0b28000008000007000000017d84de64f41dbfcaef7436be7b9b378d4fd17bafba067dec4c54102ff22beaac9e8c3487db085073fe3ed248dd37a2b12ec76241cc558b158ec264e80278f75ab375c03cb755439737778a7a162dcefeeb49e6c5f401261bbfc3020eea7fb16733bf1c69c249fc3447a5004c7cfe098fb2e473690276e790f65ab7c3770a31ee7dbc53f2d2c85e6c78f3"], 0x2c}}, 0x0) 44.337989426s ago: executing program 1 (id=157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000780)={0x0, 0x5}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000800)=@sack_info={r1, 0x8, 0x8}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r2 = socket(0x200000000000011, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x1, 0x11aa, &(0x7f0000001280)="$eJzs209rI2UcB/Bf/2hramv9V20vPuhFL4PtwVMvRVqQBpS2EVpBmNJUQ2ISMjkk4qFnT74O8ehNEN9A34W3ooheenKWbZZ2W7qH3WUb2P18LvnCNwPPw8DAM8zvbP2n75rHRXac92NyYiKmuxHpPEWKyZiKkZP46O/1/37c3T/Y3qhWN3dS2trYW/0kpbTw3u9f/fDL+3/05778deG3mThd/Prsn7U/T5dOl8/+3/u2UaRGkdqdfsrTYafTzw9b9XTUKJpZSl+06nlRT412Ue9d649bnW53mPL20Xyl26sXRcrbw9SsD1O/k/q9Ycq/yRvtlGVZmq8ET6P283lZlhFl+VK8HGVZlq9EJebi1ZiPhXgtFuP1eCPejLfi7ViKd+LdWL7417jXDQAAAAAAAAAAAAAAAAAAAM8X8/8AAAAAAAAAAAAAAAAAAAAwfub/AQAAAAAAAAAAAAAAAAAAYPzM/wMAAAAAAAAAAAAAAAAAAMD47e4fbG9Uq5s7Kc1G/HUyqA1qo99Rv/VZdfPjdGHx6qp/B4Pa1GW/OurT9X4mKg/6tVv72fjwg1F/v/v08+qNfiWOnv32AQAA4IWQpUu3nu+z7FH9KD30fuDG+X06VqbvbBs8oWL4fTNvteo9QRCEyzDuJxN34eqmj3slAAAAAAAAAAAAPI67+Jxw3HsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7rEDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAqwIAAP//DSeWkg==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xc0181, 0x45) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0xb, 0x908, 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x460a40, 0x0) execveat(r7, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)={[&(0x7f00000001c0)='\x00', 0xfffffffffffffffd, &(0x7f0000000300)='@.\\\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='bridge0\x00', &(0x7f00000003c0)='&}(^./{$\x00', &(0x7f0000000400)='syz0\x00']}, &(0x7f0000000700)={[&(0x7f0000000480)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f00000004c0)='/.\x00', &(0x7f0000000500)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000540)='syz0\x00', &(0x7f0000000580)='&\x00', &(0x7f00000005c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000600)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000640)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000680)='syz1\x00', &(0x7f00000006c0)='bridge0\x00']}, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40.047942678s ago: executing program 7 (id=303): lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@known='security.selinux\x00', &(0x7f0000000240)=""/58, 0x3a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f0000000280), 0x9, 0xc102) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc4c03d12, &(0x7f0000000140)={0x3664, 0x9}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x113, &(0x7f0000000800)={0x0, 0x46f4, 0x1, 0x0, 0x1}, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070029000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800800044000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000100)=0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x30, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8084}, 0x40040040) 33.775041098s ago: executing program 7 (id=344): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000064bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071101b00000000001d400200000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x83}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) 32.713270617s ago: executing program 7 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303000003030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca711c31732d000000000000000000"], 0xff, 0xc3c, &(0x7f0000001100)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x100000001, 0x200000) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0x20}}, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) statfs(&(0x7f00000003c0)='./file0\x00', 0x0) 31.333599448s ago: executing program 7 (id=352): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0xc0800) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x3, 0x6}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfb5}, @in6={0xa, 0x0, 0x4, @private0}}]}, 0xc0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r6) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, @in=@multicast2, 0x4e21, 0x101, 0x4e24, 0xffff, 0x2, 0x80, 0x0, 0x3a, 0x0, r6}, {0x3, 0x7, 0xc4ab, 0x5, 0x8, 0x3, 0x10, 0xa65}, {0xfa3, 0x2, 0x10, 0xfff}, 0x3, 0x6e6bbb, 0x1, 0x0, 0x2, 0x3}, {{@in6=@mcast1, 0x4d2, 0xff}, 0x2, @in6=@remote, 0x3500, 0x1, 0x0, 0x12, 0x81, 0x7, 0xcf}}, 0xe8) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000bc0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='.', 0x1}], 0x1}}], 0x1, 0x20000004) syz_emit_ethernet(0xffffffffffffff16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0000}}, 0x7}, &(0x7f0000000200)=0x90) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x51, 0x0, 0x0, 0x98e1, &(0x7f00000000c0)=[r1], 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2eec0a3f0028000000000000378a72b24e1ddb4ccb26", 0x16}], 0x1}, 0x20000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) 30.428893739s ago: executing program 7 (id=356): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000005b40)={0x0, 0x1000}, &(0x7f0000005b80)=0x8) 27.336210892s ago: executing program 36 (id=356): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000005b40)={0x0, 0x1000}, &(0x7f0000005b80)=0x8) 13.341729984s ago: executing program 6 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x29, 0x1, 0x0, 0x0, {0x6}, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="02000000"]}]}, 0x1c}}, 0x0) getpid() r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="00b0250b7c62"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000000)='pvfs2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80c81a, &(0x7f0000000040)=ANY=[], 0x1, 0x688, &(0x7f0000000cc0)="$eJzs3c1vHGcdB/DvbDZ2Ni2pmyZtQJVqNRIgIhI7VgrmQkAI5VChqhw4W4nTWNmkxXErtyDq8HrtoX9AOeSCOCFxj1Q4cIFbb8jcKiFx6QVzWjTj2fV6/ZLdtlk76ecTzT7PPM88M7/nNzuzL1a0Ab6wrpxL836KXDn38mq5vn5vrr1+b+5Wt55kMsla0kzSSFL8t9PpfJhcToreboqBcof3l+Zf/eiT9Y8315r1Um3f2G/cgHq7tYHmtW7bdJIjdfkZbNvf1c+8v6IX+eUkZ+sSDtzRJJ1tfvq3J3s9fVq7jT42lhiBh6vYfN1M/XrcM5Ucry/08n1A95W3Mf4IhzM55HaD7yAAAADgUTPMZ+CnNrKR1eLEGMIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx8La1u//F/XS6NanU3R//3+ibktdP1xeGG3z+w8rDgAAAAAAAAAYi39Vjy9sZCOrOdFt7RTV3/xfrFZOVY9P5M3cyWKWcz6rWchKVrKc2SRTfbubWF1YWVmeHWLkxV1HXnxAuJN12fo85g4AAAAAAAAAj51f5srW3/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAwKJIjm0WKu33NU2k0kxxLMlE2rCX/6NYfZfcPOgAAAAAY2eTII57ayEZWc6K73ilyKsmz1XcAx/JmbmclS1lJO4u5Vn0vsPmpv7F+b669fm/uVrns3O/3/jNSGNUes/ndw+5HPlNt0cr1t7pjrub1tHMtjWpk6UwdT3eLgbjuljEV360NGdm1uixn/l5d7vDuSJPdy4hfpkxVGTma61mqcjRTx1Zm4+numdn9DI14dgaPNJtGL9hTA0camMSnyvnxuizn89u9cn4gBjNxse/Z9+z+OU++9uc//mSmrh+eKQ3nSF12qsfWzkzM9WXiuWEycaN9++aN63fOPWqZ2GGmysTp3vqV/DA/zrlM55UsZylvZSErWcx0flDVFuqTX/Rd8ntk6vK2tVceFMlE/QzdPFmjxfRiNfZElvKjvJ5rWcxL1b+Lmc23cimXMt93hk/vf4arq76xx1Xf+dKuwZ/9el1pJfldXaavbfeVcSjz+nRfXvvvuVNVX3/LVpZODpGlEe+Nza/UlfIYv6rLw2EwE7N9mXhm/0z8vrqt3Gnfvrl8Y+GN4Q538r26Ul5HvzlUt9Ty+XKyPFnV2vZnR9n3TG/L7fkq+071xjV29J3u9VVXatHc80qdqN/D7dzTxarvuV375qq+M319rV7f+d77LQAOvePfOD7R+nfr760PWr9u3Wi9fOz7k9+efH4iR/9y9DvNmSNfbTxf/Ckf5Bdbn/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBP787b79xcaLcXlwcqnU7n3T26xl1pPiDUHZVM//OJckC3pZNeV/fnzMY4iy8/mRx4DgcqOTbug/6v0+nULcUe2/zhrw9K1M/GFXOn1m1pjPL0e0wqB3dPAsbjwsqtNy7cefudby7dWnht8bXF2/OXLs3PzF96ae7C9aX24szm40FHCTwMWy/6Bx0JAAAAAAAAAAAAMKxx/HeCg54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gi7ci7N+ykyO3N+plxfvzfXLpdufWvLZpJGkuLnSfFhcjmbS6b6dlfsdZz3l+Zf/eiT9Y+39tXsbt/Yb9xw1uol00mObJZ3P6/9Xa3LfRX7TaHozbBM2Nlu4uCg/T8AAP//Z1sEnA==") truncate(0x0, 0x404043000) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xffffffffffffffee, r3, 0x10, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x3c}}, 0x14) r5 = open(&(0x7f0000000080)='./file0\x00', 0xa201, 0x94) mount_setattr(r4, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8800, &(0x7f0000000140)={0x8, 0x100088, 0xa0000, {r5}}, 0x20) 11.684861627s ago: executing program 8 (id=388): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0xc0800) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x3, 0x6}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfb5}, @in6={0xa, 0x0, 0x4, @private0}}]}, 0xc0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000bc0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='.', 0x1}], 0x1}}], 0x1, 0x20000004) syz_emit_ethernet(0xffffffffffffff16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0000}}, 0x7}, &(0x7f0000000200)=0x90) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x51, 0x0, 0x0, 0x98e1, &(0x7f00000000c0)=[r1], 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2eec0a3f0028000000000000378a72b24e1ddb4ccb26", 0x16}], 0x1}, 0x20000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) 10.849295529s ago: executing program 6 (id=389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0x6, 0x7, 0x5c, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x80, 0xb800, 0x1c00000, 0x4}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001500000126bd7000fddbdf250200", @ANYRES32=r1, @ANYBLOB="080009000004f1ff080064deac79935d2e63d40800000100001400030073797a6b616c6c657231000000000000f2a2a0472502589ccd9bb3a1c95f31e2e9c29dd23c099622330d56eef62dd0b05783619d997d1a484fad201634bb07987ec07fa957be518853c6bda9d9942275407179c63a8a3d89e22886dda37588d3cb9a39a0e23a0023f10d4ee3c641276feea310c484c0704cf4f11c51d7aaa6f3c199d0affeb50952"], 0x3c}, 0x1, 0x0, 0x0, 0x4890}, 0x240400c0) syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000008c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x8, 0x4473, &(0x7f0000008c00)="$eJzs27tvHNUeAOAzY98bOzfJ9SvvRFpBgQXIWqcCUhASA4qECDYPIYpY60cSw9pr2WtIgUQQfSQkCkRNk4geJVX+BQrSUqYIFDQIGox2Z9bemfWSVeS1ifk+KZmd85Z/njPn6KzjVPXawmphYbVQWipUZq+snil8XCmvLc6HeIfsdv90phtxEvvdc+nCa2+/dyaE6z8O/W99fX091AyELY03ff7t109nk+sns81l4lydWrtbt7ZdPgghjIQQ+jLjqukJIbz/fQhRCGEwTRtKr/0hhAMhyfviu1tTfds0mp4HtydvTU7cvPNw8X7/hcuFtgWjEL4pH3/+6uLPT/ec/enZbeoeAAD+1utTl959qzge7kXh0N3e1vX60fTabn28Tkde7n4oAQAAoK3N/f9AFEet+/+R9NrmSDDY2D7ZLr55aeLV4nh6/hu15L+QJv3ySk/9DHXz3Dd7bRjM1d/6/Le1n8fVGF+j34EQxWOZ+zgeGwth/HxyfyzaH5crq9XnrlTWlua2bRhPrGz8k9P7THTSA/1O4z+Ua7/75//DLb9NtfvC9v2K7WnZ+PfU085tUe7bz6OO4j+cq7cT8efxZePfW097qrlAIZkAavH/svfR8R/Jtd+t+B+qze1Rbax9mRmgtoappbdbr5CVjf9/6mmZqTP9QbZ7/v/Ixf9wrv3dmv9Hz3e3170iG///1tOyX1rbfP4H40c//0dy7e9G/GvjH/X+70g2/vuSxOzkWf9Jdjr/H82136X430iPVUM4FIXhpm+d3u1NXg6N8+r6lqaWvdyFUewB2fi3nvJv7v/ijtZ/x3L1d2r/1+i3sf9r7ENGo2T/x9ay8e9vW67T5/94rl7X5/+oL90BrH/WnNzT1U73jmz89yeJWywAO43/icaHZCnRtfjXZ/y+Rvw3B/znviS9aP3XkWz801BlXgM36v/X139Ra9x/z8X/ZK79pvjn/zRkm7Su/2rDH+1Sb3tNNv4H2parxf+HDt7/p3L1ur/+D6Forf/YsvE/2LZc/fnve3T8T+fqdTv+z3SzcQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4Gh9DoQongscx/HY2MhDKf3x8L+aKY0Nz1Trsx+tBrCSJpeCEPR1XJlplSeXliqzM1Pl8rlymwIh9P8kdAXrZYr1enF0vKRjbb6o2vzpZXqzHypGkI4mqafCgcbbc0sVBdLy/Wyjbz/x5WV5Wulpem5hZWXisViMRzfGMNgNH+9Or9UTXpPckM4sVF3IGoaXD375MZYDkQfVtZWlkrlevqppjrlymyp3FTndJr3VRiMqitrS7Ol6vx0uXK10d9uOpdeJy5OvTP1xnhLfiFKrkM7OywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mHunX3x6xBCb3IXhxDONT5E6b+Mnge3J29NTty883Dxfv+Fy4WtygAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbpWKVhKAoD8LlXQcFFHX0Cp5BsrooiLkYEn8CX6NDX7GN06NilFNobCEkDXVo6fN9ySH7uPQfuAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOByfP62fz91E5HidnMTMVs83vXzp1Lrt8Pnr84wI6fz9d2+f9RNefc0yl/Kr+Vr3qXr1fw/Sr3ufXeawZ4M92lv3Gdoat+m5uv63kfKVUQ8lPw55VxVx90FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAlr05NAEQDOI4eieYbBbX0CmMiuAeRsdzCefRJBgMwlffSwfHjz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8My7TOvdDHBnVlRn72Tbvf/cc23efZfN1WQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLMDBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBQAAAA//+cx81F") 10.603481468s ago: executing program 8 (id=390): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x74f, 0x0, 0x3}, 0xc) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2121) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) 10.083038427s ago: executing program 8 (id=391): getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000380)=0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4) listen(r0, 0xfff) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x12808, &(0x7f00000004c0)={[{@sys_tz}, {@discard}, {@utf8}, {@errors_continue}, {}, {@umask={'umask', 0x3d, 0x3ff5}}, {@gid}, {@codepage={'codepage', 0x3d, 'cp863'}}, {@discard}, {@errors_continue}]}, 0x5, 0x150f, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOIpADAG6AvHAj5IP8UAAKQjwUgsKgwYAFghCKQFGIwk1QDG6G4lACSkIpcFAaEuAWKAO3Qlm4DcrB7VAe7oAKUBEqQWW4E6rAXVAV7oZqcA9UhxpQE2rBvVAb7oM6cD/UhQegHjwI9eEhaAAPQ0N4BBrBo9AYHoMm8Dg0hWbQHFpAy/9W/kvQA16GntALkqA39IFXoC/0g/4wAAbCqzAIXoPB8DokwxAYCm/AMHgThsNbMAJGwih4G0bDOzAGxsI4GA8pMAEmwrswCd6DyTAFpsI0SIXpMAPeh5kwC2bDBzAHPoS5MA/mwwJIg49gISyCdPgYFsMnkAFLYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yD7bADdsIu2A2fwh74DPbC57APvvgX88/8Q35XBAQUKFChwhiMwViMxVyYC3NjbsyDeTCCEYzDOMyLeTEf5sMCWADjMR4LY2E0aJCQsAgWwShGsRgWw+JYHEtiSXToMAETsAzeimWxLJbDclgey2MFrIgVsTJWxipYBatiVayG1bA6VseaWBPvxXuxN9bBOlgX62I9rHf59hQ2xIbYCBthY2yMTbAJNsWm2BybY0tsia2wFbbG1tgW22I7bIftsT0mYiJ2wA7YETtiJ+yEnbEzdsEu2BW7YTd8KQfgy/gy9sLqojf2wT7YF5Nz9McBOABfxUH4Gr6Gr2MyDsGh+Aa+gW/icDyNI3AkjsJRWEW8g2NwLJIYjymYghNxIk7CSTgZp+AUnIapOB1n4AycibNwFn6Ac/BD/BDn4TxcgGmYhgtxEaZjOi7GM5iBS3ApLsPluAKX4ypcjatwLa7DtbgBN+Am3IRbcAtuw224A3fgLlQA+Cl+hp9hMu7Dfbgf9+MBPIAH8SBmYiYewkN4GA/jETyCR/EoHsPjeAKP4yk8hafxDJ7Fs3gez+MFfCH+m0a7SqxJBpFFCSViRIyIFbEil8glcovcIo/IIyIiIuJEnMgr8op8Ip8oIAqIeBEvCovCwggjSIQxACCiIiqKiWKiuCguSoqSwgknEkSCKCPKiLKirCgnbhflxR2igqgo2rjKorKoItq6quJuUU1UE9VFDVFT1BK1RG1RW9QRdURdUVfUE/VEffGQaCB6Y398RGRVprEYgk3EUGwqmgl56RuslRiOrUUb0VY8JUbiCGwvWrlE8azoIMZgR/E3MRafF53FeOwiXhRdRTfRXbwkeojWrqfoJSZjb9FHTMO+op/oLwaImVhDfIBzctYUr4tkMUQMFW+IBfimGC7eEiPESDFKvC1Gi3fEGDFWjBPjRYqYICaKd8Uk8Z6YLKaIqWKaSBXTxQzxvpgpZonZ4gMxR3wo5op5Yr5YINLER2KhWCTSxcdisfhEZIglYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix1ip9gldotPxR7xmdgrPhf7xBdiv/hSHBBfiYPia5EpvhGHxLfisPhOHBHfi6PiB3FMHBcnxElxSvwoTosz4qw4J86Ln8QF8bO4KLwAiVJIKZUMZIzMIWNlTplLXiNzy+DSq3u9jJM3yLzyRplP5pcFZEEZLwvJwlJLI60kGcoisqiMyptkMXmzLC5LyJKylHSytEyQt8gy8lZZVt4my8nbZXl5h6wgK8pKsrK8U1aRd0mI/HqM6rKGrClryXtlbXmfrCPvl3XlA7KefFDWlw/JBvJh2VA+IhvJR2Vj+ZhsIh+XTWUz2Vy2kC3lE7KVfFK2lm1kW/mUbCeflu3lMzJRPis7SH/pLfK87CxfkF3ki7Kr7Ca7y5/lRellT9lLAvSWfeQrsq/sJ/vLAXKgfFUOkq/JwfJ1mSyHyKHyDTlMvimHy7fkCDlSjpJvy9HyHTlGjpXj5HiZIifIifJdOUm+JyfLKXKqnCZT5XTZ/9JIs6X8p/nv/kH+4F+OvklullvkVrlNbpc75E65S+6Wu+UeuUfulXvlPrlP7pf75QF5QB6UB2WmzJSH5CF5WB6WR+QReVQelcfkcXlOnpSn5I/ytDwjz8hz8rw8Ly9ceg1AoRJKKqUCFaNyqFiVU+VS16jc6lqVR12nIup6FaduUHnVjSqfyq8KqIIqXhVShZVWRllFKlRFVFEVVTfhpTeMKqlKKadKqwR1y7+Sr4qpm1VxVeI3+Zfnl/Qn82upWqpWqpVqrVqrtqqtaqfaqfaqvUpUiaqD6qA6qo6qk+qkOqvOqovqorqqrqq76q56qB6qp+qpklSS6qNeUX1VP9VfDVAD1atqkBqkBqvBKlklq6FqqBqmhqnhargaoUaoUWqUGq1GqzFqjBqnxqkUlaImqolqkpqkJqvJaqqaqlJVqpqhZqiZaqaarWarOWqOmqvmqvlqvkpTaWqhWqjSVbparBarDLVELVHL1DK1Qq1Qq9QqtUatUevUOrVBbVAZarParLaqrWq72q52qp1qt9qt9qg9aq/aq/apfWq/2q8OqAPqoDqoMlWmOqQOqcPqsDqijqij6qg6po6pE+qEOqVOqdPqtDqrzqrz6ry6oC6oi+pi1rIvEIEIVKCCmCAmiA1ig1xBriB3kDvIE+QJIkEkiAvigrzBjUG+IH9QICgYxAeFgsKBDkxgA3Gp6NHgpqBYcHNQPCgRlAxKBS4oHSQEtwRlgluDssFtQbng9qB8cEdQIagYVAoqB3cGVYK7gqrB3UG14J6gelAjqBnUCu4Nagf3BXWC+4O6wQNBveDBoH7wUNAgeDhoGDwSNAoeDRoHjwVNgseDpkGzoHnQImj5l47v/en8T7qeupdO0r11H/2K7qv76f56gB6oX9WD9Gt6sH5dJ+sheqh+Qw/Tb+rh+i09Qo/Uo/TberR+R4/RY/U4PV6n6Al6on5XT9Lv6cl6ip6qp+lUPV3P0O/rmXqWnq0/0HP0h3qunqfn6wU6TX+kF+pFOl1/rBfrT3SGXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoXfqXXq3/lTv0Z/pvfpzvU9/offrL/UB/ZU+qL/WmfobfUh/qw/r7/QR/b0+qn/Qx/RxfUKf1Kf0j/q0PqPP6nP6vP5JX9A/64vaZy3us37ejTLKxJgYE2tiTS6Ty+Q2uU0ek8dETMTEmTiT1+Q1+Uw+U8AUMPEm3hQ2hU0WMmSKmCImaqKmmClmipvipqQpaZxxJsEkmDKmjClryppyppwpb8qbCqaCqWQqmTvNneYuc5e529xt7jH3mBqmhqllapnaprapY+qYuqauqWfqmfqmvmlgGpiGpqFpZBqZxqaxaWKamKamqWlumpuWpqVpZVqZ1qa1aWvamnamnWlv2ptEk2g6mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJskkmT6mj+lr+pr+pr8ZaAaaQWaQGWwGm2STbIaaoWaYGWaGm+FmhBlpRmUtVM07ZowZa8aZ8SbFpJiJZqKZZCaZyWaymWqmmlSTamaYGWammWlmm9lmjplj5pq5Zr6Zb9JMmlloFpp0k24Wm8Umw2SYpWapWW6Wm5VmpVltVpu1Zq1ZD+vNRrPRbDabzVaz1Ww3281Os9PsNrvNHrPH7DV7zT6zz+w3+80Bc8AcNAdNpsk0h8whc9gcNkfMEXPUHDXHzDFzwpwwp8wpc9qcNmfNWXPe5L/0e+lNrM1pc9lrbG57rc1jr7P/GBewBW28LWQLW23z2fy/iY21trgtYUvaUtbZ0jbB3vK7uIKtaCvZyvZOW8XeZav+Lq5t77N17P22rn3A1rL3/iauZx+09e1jtgEigG1mG9kWtrF9zDaxj9umtpltblvYdvZp294+YxPts7aDfe538UK7yK62a+xau87usZ/Zs/acPWy/s+ftT7an7WUH2lftIPuaHWxft8l2yO/iUfZtO9q+Y8fYsXacHf+7eKqdZlPtdDvDvm9n2lm/i9PsR3aOTbdz7Tw73y74Jc6aU7r92C62n9gMu8QutcvscrvCrrSr/u9cl9kNdqPdZHfbT+1Wu81utzvsTrvrlzjrPPbaz+0++4U9ZL+1B+xX9qA9YjPtN7/EWed3xH5vj9of7DF73J6wJ+0p+6M9bc/8cv5Z537S/mwvWm+BkIAkKQoohnJQLOWkXHQN5aZrKQ9dRxG6nuLoBspLN1I+yk8FqCDFUyEqTJoMWSIKqQgVpSjdRJfX6SWpFDkqTQl0C5WhW6ks3Ubl6HYqT3dQBapIlagy3UlV6C6qSndTNbqHqlMNqkm16F6qTfdRHbqf6tIDVI8epPr0EDWgh6khPUKN6FFqTI9RE3qcmlIzak4tqCU9Qa3oSWpNbagtPUXt6GlqT89QIj1LHeg56kh/o070PHWmF6gLvUhdqRt1p5eoB71MPakXJVFv6kOvUF/qR/1pAA2kV2kQvUaD6XVKpiE0lN6gYfQmDae3aASNpFH0No2md2gMjaVxNJ5SaAJNpHdpEr1Hk2kKTaVplErTaQa9TzNpFs2mD2gOfUhzaR7NpwWURh/RQlpE6fQxLaZPKIOW0FJaRstpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG22kH7aRdtJs+pT30Ge2lz2kffUH76Us6QF/RQfqaMukbOkTf0mH6jo7Q974X/UDH6DidoJN0in6k03SGztI5Ok8/0QX6mS6SJwgxFKEMVRiEMWGOMDbMGeYKrwlzh9eGecLrwkh4fRgX3hDmDW8M84X5wwJhwTA+LBQWDnVoQhtSGIZFwqJhNLwpLBbeHBYPS4Qlw1KhC0uHCeEtYZnw1rBseFtYLrw9LB/eEVYIK4aPPVA5vDOsEt4VVg3vDquF94TVwxphzbBWeG9YO7wvrBPeH9YNHwjLhg+G9cOHwgbhw2HD8JGwUfho2Dh8LGwSPh42DZuFzcMWYcvwibBV+GTYOmwTtg2fCtuFT4ftw2fCxPDZsEP43C/9Dy768/6ksHfYJ3wlfCX0/n45P7ogmhb9KLowuiiaHv04ujj6STQjuiS6NLosujy6Iroyuiq6Oromuja6Lro+uiG6Mbop6n2tHODQCSedcoGLcTlcrMvpcrlrXG53rcvjrnMRd72Lcze4vO5Gl8/ldwVcQRfvCrnCTjvjrCMXuiKuqIu6m1wxd7Mr7kq4kq6Uc660S3AtXEvX0rVyT7rWro1r655yT7mn3dPuGfeMe9Z1cM+5ju5vrpN73nV2L7gX3Iuuq+vmuruXXA83Ic+vn8kk18f1cX1dX9ff9XcD3UA3yA1yg91gl+yS3VA31A1zw9xwN9yNcCPcKDfKjXaj3Rg3xo1z41yKS3ET3UQ3yU1yk91kN9VNdaku1c1wM9xMN9NVmfXrUea6uW6+m+/SXJpb6LLWjOlusVvsMlyGW+qWuuVuuVvpVrrVbrVb69a69W692+g2us1us9vqtrrtbrvb6Xa63W632+Ov+3VQt8/td/vdAXfAHXRfu0z3jTvkvnWH3XfuiPveHXU/uGPuuDvhTrpT7kd32p1xZ905d9795C64n91F511KZEJkYuTdyKTIe5HJkSmRqZFpkdTI9MiMyPuRmZFZkdmRDyJzIh9G5kbmReZHFkTSIh9FFkYWRdIjH0cWRz6JZESWRJZGlkWWR1ZEvC+0NfRFfFEf9Tf5Yv5mX9yX8CV9Ke98aZ/gb/Fl/K2+rL/Nl/O3+/L+Dl/BV/SV/OO+qW/mm/sWvqV/wrfyT/rWvo1v65/y7fzTvr1/xif6Z30H/5zv6P/mO/nnfWf/gu/iX/RdfTff3b/ke/iXfU/fyyf53r6Pf8X39f18fz/AD/Sv+kH+NT/Yv+6T/RA/1L/hh/k3/XD/lh/hR/pRMW/70ZcvkWG8T/ET/ET/rp/k3/OT/RQ/1U/zqX66n+Hf9zP9LD/bf+Dn+A/9XD/Pz/cLfJr/yC/0i3y6/9gv9p/4DL/k8k1lv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dr/T7/K7/ad+j//M7/Wf+33+C7/ff+kP+K/8C/5rn+m/8Yf8t/6w/84f8d/7o/4Hf8wf9yf8SX/K/+hP+zP+rD/nz/uf/AX/s7/I/2aNMcYYY+y/ZMKVpvij/t5/8Jz4u537AMC12wpm/n1/1opyfb5f2/1EfLsIADzbq8sjl7fq1ZOSki7tmyEhKDoP4PKfBGWJgSvxEmgLT0MitIEyfzj/fqLbefon40dvB8j1dzmxcCW+Mv6XfzL+E0+NWlg+PBv3/xh/HkDxoldycsKVeAm0VVmPbaDsn4yfv9U/mX/Or1IAWv9dTm64El+ZfwI8Cc9B4m/2ZIwxxhhjjDHGftVPVOp0+frz8t/4/KPr83h1JScHXIn/2fU5Y4wxxhhjjDHGrr7nu3V/5onExDad/vVG1f9WFjf+pza8B7j8jAKAf3NAgP/4WWz5jxwr+dJH5x+7lp/zAfzPKOVf0bjKX0yMMcYYY4yxv9yVRf9vn1dXa0KMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg29J/478Su9jkyxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9v/CQAA//+pXg2m") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="203111000000084677358e2e8e08003bc867a6deeb75cd774250ba05ea91740a0100e69e5c3460acbc9a351a96fbf0e889169e2596fa160211a521ff0700000000000000a0ea431b0edda831a4b7a09361a55614c53d2a094314bfda0374e8"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0xfffffffffffffffe, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, &(0x7f0000000100)}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.074329708s ago: executing program 1 (id=157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000780)={0x0, 0x5}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000800)=@sack_info={r1, 0x8, 0x8}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r2 = socket(0x200000000000011, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x1, 0x11aa, &(0x7f0000001280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xc0181, 0x45) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0xb, 0x908, 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x460a40, 0x0) execveat(r7, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)={[&(0x7f00000001c0)='\x00', 0xfffffffffffffffd, &(0x7f0000000300)='@.\\\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='bridge0\x00', &(0x7f00000003c0)='&}(^./{$\x00', &(0x7f0000000400)='syz0\x00']}, &(0x7f0000000700)={[&(0x7f0000000480)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f00000004c0)='/.\x00', &(0x7f0000000500)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000540)='syz0\x00', &(0x7f0000000580)='&\x00', &(0x7f00000005c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000600)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000640)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000680)='syz1\x00', &(0x7f00000006c0)='bridge0\x00']}, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.422707407s ago: executing program 2 (id=392): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80030}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001300010025bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0020000002210000050021000800000008001e00020000002f1506d3b3baf2400d6bfc8c0ba5de9986a7c7871cd1c9ab0fbcaf52c726b5c184312934fde503c7818f071d11db9caf29a75982b933d14a297b8c83fc6002d0bf97e743e5839dd5cc3a1204f583e420022df1d58e510d17122e80aa14a05050d8818e4c"], 0x30}, 0x1, 0x0, 0x0, 0x4040840}, 0x4c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000000480)={0x7, 0x2, 0x5, 0x100, 0x10001, 0x55c}) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) dup3(r0, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, 0x417) ioperm(0x0, 0x40, 0x80) rt_sigqueueinfo(0x0, 0x2d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x200004) 7.134233881s ago: executing program 2 (id=393): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x156, &(0x7f0000000240)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="d3809dd114c30ebecae70250847ebe1bd7bb82d3f3ddf6a4162d5049f184cfed946a53defc8d87e8d64376968c13718c81ef9026ea73b90301e13763084574d183e6d52e391bf9960975e98dd3fdb2957d12e541bfb62f8c306e073efb0555b60b8256109f8583f181c04f51d9bec22f98b3d66d04f9c0298f931e80449e3c9b065b8078db90ee9d0ef8b68dda57609d6cbd4f6c16d9252233793138631cea11a96d23e2f7", 0xa5}], 0x1}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x10, r4) ptrace(0x4208, r4) lseek(r2, 0x0, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) 6.3810192s ago: executing program 6 (id=394): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x0, 0x18, 0x1, '\t'}, 0x0, 0x0, 0x0, 0x0}) 5.694325351s ago: executing program 8 (id=395): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2001, 0x20) sync_file_range(r0, 0x8, 0x80, 0x1) r1 = dup2(0xffffffffffffffff, r0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x5, 0x4) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x1, 0x8000, 0x6, 0x3}, 0x4b, [0x2, 0x9, 0x9, 0x80000001, 0x6, 0x3, 0x2, 0x9, 0x8, 0x5, 0x4, 0xb291, 0x9, 0x7, 0x5, 0x2f, 0xfffffff9, 0x8000, 0x100, 0x0, 0x8, 0x7, 0x8, 0x80000000, 0x820, 0xfffffffa, 0x40, 0xfffffffa, 0x5, 0x9, 0x7, 0x4, 0x5, 0xffffffff, 0x40, 0x1, 0x6, 0x5, 0x8, 0x4, 0x2, 0xa, 0xf65, 0xc248, 0x7, 0x0, 0x6, 0x3b, 0x6f075d9d, 0x8, 0x7, 0x5, 0x101, 0x8000, 0x6, 0x9, 0x1, 0x2, 0x4, 0x3, 0x7, 0x100, 0xe852, 0x3], [0x3, 0x840b, 0x8, 0x10001, 0x2, 0x4, 0x3, 0x5, 0x787, 0xe0e, 0x7fffffff, 0x80000001, 0x2, 0x558, 0x8, 0xfffffffa, 0x10000, 0x3, 0xe15b, 0x0, 0xff, 0xa, 0x1, 0x80000000, 0xf3, 0x40, 0x152c, 0xfffffffc, 0x6, 0x7, 0x8, 0x3, 0xabc, 0x5, 0x4, 0x9, 0xffff2490, 0x100, 0x6, 0x8000, 0x7, 0x128, 0x2, 0x0, 0x654, 0x2, 0xe1, 0x3, 0x2, 0xf5, 0x3, 0xd, 0x1ff, 0x9, 0x80000000, 0xd, 0x40, 0x7fffffff, 0x6, 0x4, 0xb8, 0x4, 0x400, 0x4], [0x4, 0x1, 0xf, 0x6, 0x3, 0x2, 0x7fff, 0x5, 0x3, 0x2, 0x1, 0x6, 0x8, 0x5, 0x2, 0x3, 0x2, 0x8000, 0x8, 0x7, 0x6, 0x5, 0x3, 0x2, 0xbb8, 0x3, 0x4, 0x8, 0x6, 0x218, 0x3, 0xa, 0x3, 0x4, 0x7f, 0x9, 0x4, 0x7, 0xc, 0x8, 0x1, 0x5, 0x8, 0x1, 0x25000000, 0x7, 0xac, 0x1, 0xf06, 0x2, 0x24, 0xfffffffb, 0x400, 0x9, 0x80000001, 0x4, 0x6, 0x1, 0xffffff00, 0xecfa, 0x4, 0x2, 0x69, 0x10], [0x8000, 0x0, 0x7, 0x6, 0x3f4af47, 0x4, 0x0, 0x2400, 0x3, 0xcd, 0xd7, 0x2, 0xf4, 0xc, 0x4, 0x0, 0x7, 0xf, 0xf405, 0xffffff05, 0x4, 0x2, 0x7, 0x10, 0xffffffff, 0x4, 0x7, 0x29f, 0x2, 0xd, 0x43, 0x61bf, 0x43e6, 0x8, 0x92, 0x15c9, 0xa, 0x53a05334, 0x8, 0x3, 0x247, 0x3, 0x5, 0x800, 0x81, 0x10000000, 0x5, 0xaec, 0x5, 0x3, 0x6, 0x60, 0x8c, 0xfffffff0, 0x2, 0x1, 0x7fffffff, 0x6, 0xfff, 0x5, 0x6, 0x5]}, 0x45c) socket$inet6(0xa, 0x40000, 0x5) umount2(&(0x7f0000000500)='./file0\x00', 0xa) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x21) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000600)=@sack_info={r3, 0x8001, 0x3ec}, 0xc) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000680)=0xa9f107e50b5355dc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000006c0)=0x3, 0x4) r6 = accept4$llc(r1, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x800) sendmsg(r6, &(0x7f0000002e40)={&(0x7f0000000780)=@caif=@rfm={0x25, 0xf8a, "df22da41fa711d76a5e28936e8735cc4"}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000800)="834a8ac08b672a89cc0c9719d74859d0491c6a5235205ec6", 0x18}, {&(0x7f0000000840)="a0c5e249ea0a36e5a27336d8e46cf9362044dafd9c1434cd369fac5a7c61d99403ce2c50b935d7307900fbd748a01c3a5071e91fb0e2d2c8fb1ad59a03072001f4c2951c686108636dbeb4d81e655f0e7a813264583399c9e83d74d314b00412bada996c10ce46d8c1132fa1f6f292b572c1dc3ecb022f09682810e7572ae7d1aa31fbfb9bb7865831fede98514eeb96d7c2ad9442a559fced6a6fbb9b9d9745d6cf2ff248a884a942f2cecd474976ab24d4bc0f54dd57cbc22a25384b169b1bb0ae835d163035f291d77b89db01d3cd2bc86671bf3f62aff8d73b2272d6f6dc5a05a42183cf284ee883a02ea5228d203df22720", 0xf4}, {&(0x7f0000000940)="36187c27505daccf441d59a36da22e2e65621618632c02ca2bb047a9bb5b0f4a53506362e147c91dcca153f3b7fbaeb222582b138a857938ec79f7e0172cbfc93cf73aa3ba10820203776443a52e186bae54d61b7fc7b2e885053e47491c60a5daca45afab8de19867c3f006bac324ce38a3d852d54b531d32da17d24d263b2dcc1e45305cb3c830a6d7b5ca51cb78e8a510ef0b555289a9eab8f27f8c6ddb0aac3fdf59e3e218f558c1b5571b2db8833d0bf2bf64872bf036926fdc99ddd3c5fcb018df8be35b0928ef45cc027472faeb37fd9f4e739ea7d758b499c26da4ccb1c8089f20c18a566c2db993901494548ec1ecca5f6a9a75c1243f39d9abfa12ed3ec15abf686027fe70a9ac9459d8fb9d5ae14053a68e307ffcd87090a19b4482459cb811c4a504deac8e0c7eb8843d3f900c41eff3c23cfcee7b95ee2819255705e161fbfee13d10f74afdf89a774989c75e642d861c191bdbbfbe14ef4b82bde47534e27f51a7894be78731535246484d001d94178618b9ac9eeda2cff8f205d74f33ce3625e7210007688c83fd6ca6cd1a1d79fcd0028018c0d57a349d40e4bfe6890e5c738a9dac4e0fe7ee763e776bf4b8774842276fd9f31aaf4fc6826b7a7fc6d4158c3daa112bdbec6724ab8710e0b9d57d76117ceacb849804a37b621348e5f7795b6f510854b0347af3fcfeb0a6a0f16eac212d2fdb4dd6366e9041f830a865fd02df4c915332818230a354df0d8ea109de0b4cd22db80072b1a4bec880198c6a42a9e12e7f3587c0d68ed65ac1259413987330a612ffcbbe1b343517cc2fb4c6ea9e9701929d18bd51670edaa60f071e8b027a021e6b9805a1ad6106efafc1d9566137757e2d61421db0e4d3fcd960e54a7d57d1f4a2e2409ea697abafe1655d3552b90d9f55e951811b4a30eadab8486f126118e01f954b4c3a63e170d42dfbfed379e55b6604929f4c95badb6550c145f98fdcf4982b48945009bc1b9f4559e1a9eb60dfaeded41dfe2543cc55122832be18c2e479012895f1c9cd413c6d9dae1ce932b41d4f10ec498b511e9d38802245284387e11d0f84a03cde0a8a83096304e3e386f77b8eb9ab9c34b8952f90ee3971bb6ded1055472d546cbf9871fd1207fa919f2f2c726c9cdbbb68ce8d2a11190295c742a32b8d8856def9e1e61e6905a1e93aa3146012a9f522e12c9a4f3babc2d73b6c4813cf3fa6cf3565776746897323afb3c471003f08424643555009d65d0fe50ecffc879ff6818c0e9d06e92829e5dd735a677ede37a3ed9fd5289a324135a28d7e0377d8202b91e5d89a857f09ab16d9ba0c94d601c1459e5b4a151aae38a36f554f155d310aeebde5a268cf44776325ec7e8edc9e09dab0b7cb719a55894d827dd6c622d675769b8c371053bf202b70fcff953cbee3eaba393da02e34a9072e51ed51d00871da2dfaab0bc0f277526ecf944efc0c309682d2c531d2ddd6fd3647411125261cfa8cabbcce994a9d975a543400cf3d34269516e70f8ff1c5163734d0eeceaf23a15f48e89a63215645fbbd96278b39fd7fea4f934097347d3710da82f154a126ca47299c2e873d1609bdee79b7231eb45dd66e5672925ca1dcb0257515bf08885cd3ad98faeb04dd456ccfa58a5efab7a72021367a1ace3ce5a931759bb4f503d3a265bfc63134d3d2bb4acf6a85b3c63b9903649d00822817aedf5bbaf6dcf1700777b1ab4d8f2c6604b27200fa302ee44fa32f20c0a0391a45668a2425884deb3f0eed1e2aa8f5de37d3fef11153c04f2fe4fb49716c9f3fc0bb4939f81d2fb818b538101914900f0bc1f03ae68be4d72bee40a49b9ce60f7eb763e557b828d0dcdbb46f1c32bc85dc0b65403669f3710cb4de7ae65b2f179983ea25ca9c7e719333c404f8c2a5e3664821197a1fcec1d9e06a2ec3a7a938630b4137646a438703f4b297237abb75b29f942d8d895abcfad717d6a043ab03191236a60b90de4ccfd4815d6d24fbd008239111f17a7057eafdbfb2fc80cb1fe8985c2ee03cf3988e3f8a3b1c0309e0f90a441f91d6d62f6df1a16b89086f401bce1a0e1155e82cb2004aed112331dcdb20df9bc3392334c6578187095c753b35013a12f67bbd3c81568c574aa57eac74ace4685bc975edc167a81f5f604a835c3a4ad7123ce4a628ca697a521d8279f9cd501f3bba62cd1363cb53bf52b700655bd64d6bf17aa2bdce560fe912000bfbfc4540836192d888a84d4fc5a6803f02b3d18816abdf8ffd44c5313907879f13981826e3ae8738abd1d3f339a1c9d4345399f222ecfafbbb85ec2b203af91707f85a3e439400c55ac9268575fa78f1bcf3b0b954aa84e667b6a6b0213edb05584d1205e340b77363b7e3114e333b3305d9115fc1151bd09fd39822d453c6c7dc7fc0e867debcdee82180216f9a3b1aba7bfb98c1b7a01d59092029a8a0122c2e94853e2dc5b2bf9b0873dc4ab200e20150359ea34b96f6e25f516c8ce6a2e10adb8b980cae23de5eb7d1a626868b28deea48985e5f9c1753812eda53333205ce2ca4d08ad8777eaa8c686afd7b343158558847fc2c2b6944c50f18e2ecb8bcb3d75bd17e9ad5ca45edee17b0222c467186216bc8d14cd2e675c678f7ba84b71201a4e3dbd6fa0f73f98d369ed946485b5cd2104413679feee3e2ec07cab1d595258e807d06c326eafb2987c7074a78cf6bddb2f66c65dda10e3842b8317f54fc2134e722471b919b45318d0c505574884273dda162b14ba628bbdbd3f416a17b26f28c7f8fd6f5b10a015bc97d8b2ad31eb72452ab65c0d29bb8a39c2a0feeba4fa989221b749bf571e0c16d54a32b3e653b90cf0b1282941c66e101458208059362271914a380f4a1124eed58068b7a660a6cd50046b11ee9f3eeaa30678432220ad96f348e0909f4ecb8e3c2734dd4e83ab62573052a7ef47a798e2f570f5138f04b801f61f2c1c64d18745727eebdedea514d3cd75720d14538bd2ecea1f256ef7d353ebe0d3a8f9426d8413de1f15dd8b71fc07d22dadd73e05321533f16ac7c0dcba6e07a02b937a13fbfca17316c73f971f8a881f4410b139ac813457514ab60138944ee85ee5dfee939708207cea94a9202d719d560776a9494f0690da069578c289b5d1c791bf57d9dc84bf415191478798b927a9d352295c39593222d5cfbb95371bf89f8212d9e151ccce16a08fd33a602db519b2201004859fb79516a1ed1867f7539772eb5143c7888e117f3233c35e442548cc4e6a1b31fe30b3a4e724a92de2fd29e0a6288e64a22002ebbcb910f52e813291e9559f5efa2e25926687bd833a033f2d1c42b8e11596087d79497171643511333d9ff173931ca4986f7ff701b350ff2786cbf4857ac8c3bee4ddcd255118e6969e7590b470b0e962e6390973e27af4247715b8852ab949ef4783af610254012d1198df77b7eee8c3df29447c2ed6ee358bb35c70e85cc968074315f5c2a634c6655b96ef18383acb185218d114a1262971644dadc4bc6e0b1ad6af3c88941fe6623bf2f735e708295961a3ba0758ea325fd2adf3b64fe00df53671e3012cec23bda5f1d6a19ee15522b454f379e2182282f5156bde23eed2f0c8183d1259df45302a92addf4afd4a372b3132a954c55e78e632ddef302c25ea11daf52b1ca8b42a78d98d40571a9b7dde706ab4859f4ea8be9fc212d081deaf5748d5ac7bd99d3d309ae9616ecc2aef1a83b970ae56361203205a3b398d4b65cf74621391e02e0239c26cc89cf96155d826bdc5e067b224caacd591cf4494c53d795c1bc1c29bbd5a0b397a4e485ea75989be8d1eb8d2a4671b5e6396cd9dd8a2f6b9ee2bfb31c15ea046901dbbc14b6b2f06d96b9f8723e96f64fe3e15c64d1459eb0eb278643eb37971af2f842ee7c544a6dcb4378a0a5e28a46a4cae47c068fc3bd94b699b7bfc53d25b179aa60f3dcab0cb6002bc02413d0a072e79860e42d1c690dff99edbcc341bfcb83a844bb351ce0ee9fb9ead19f7276d209c8e91bec3fa5a43382787c51f8c000205ebe18f48e6fdcaaebb9e1bca964b66f7aa7eb84e9e1fce37bf5ead443f89b7f723cbc7cf303933eeb4fe80f8236782ddfe6ea268c7eec96a94a03d452e8aeeee74601eed675f4d829656809e749ccb78a62a76dd553f08825107b4199703b761ab1c82c0a35f5afedede663b10cf82bbb19828caedf3ae41e67295eaae7b083f2d0ddfb4aa0add4371fdb5d41b0f53cc90af0880802fb0023dfcc49de025d7a10c0f46983c65f2d6ef79f738a43ae91ecbb28736470aedd14912e9d5e08353007d6114e51b02b780f55ec87d3c2f247f91e925339d6700267807a920554231e991d81723f677b7096af31979f8d86ab3455aeaefea621ed05dca90013d0e6559e5f04578cb53348587fa25c8d5dbf0000b2253624a13d9ee6c618ff26c253ccc2a5ed3abc88037f0caa474092263788ae7fbd3f4d18a18892eef813ed76e54dd0519afd5122cb417e37ad30b245ea714d8864b1418840801ad0f200ddecba766f6849ad181dace473b1fa7762c778596010255686d1f38f83c0f794fac8f8bad9adc1be24b9c49e463f992f015e8085394fc8241d83beb0b55bbc022acb808c52278d5b64670976226f8a99a2fbf7a6c764978a2b40e288e94497520b2e27347c6153c45c365c3b085b02e48398740e0e92057cec3470df942440f0f0d49dae5bafd182c0cf906875a51771e2e8367f836b631f222b8e02b382e6c9b19286c89ab1aaf91cc9e9998daabf3347b89bcbd1a5eec714216ccdff1845df813ed66a61f38fd143dba1695f0ad9e99f98aaec2ca7d209a3c9879c6dc86e89005da9dfcd69b4da1f3bb75a72638e6b89c080ad36ec3ed9a3f5564dbafb89a6f1b365492f657cf3201d322c39fb8d9b65945c341d5aed338f150128da5d853e70fe46eb951d8c19591a10dede6bd079ca73f5d8a1c4d34e3c10506de84913eb18af4c67cc3a3e9e9a115be8151d64a34bf7820beef99562ae55ef2e879db02309de7112588f90a1bf20efcf76cfa7495f035ae34dffee02a3961b7ba332b9adcb341b67dfec8d4f1d9a09a8fe708282a1e51167b84c37d985bccfb34742eff6734062464077d4e6e58259fdfa52f5700c5f247384c3240e69caa7fe2bbc471d3c7ce9a2a1e2f33f783f997b22eb9f18a27386cf89f447c8a8b3de08ead99ddf3ec2b74409ad1911701f3a1e4b9f5f0d178609de347c17b3804129bd371c64a13b70151e0d3a43ca8ed73eafcd5c571603b0b466fc559ca1945ebc18f252fab45db9601ed90a94a9bb92950dd2219e1764a786f46a535cda32faa2a2ccd77ebef0b0c0c6293bc225710752cea5967ac53103219af031eb7f26da9276b8071e428f066df17338a7ae805b3962df821513ea8237d2227ee51672b2af73906d63a11157be34900ebd12bb683561ba3d62ba0b4bba55b7a710aad3db4bbe03ba72ac4d2172638f46a89c408e32f222d1db92f26ae629aad701ff26c80b424191a5019f3493a0d4d8878045c606b0592ea0cbb6b18bf835a75fe073e81f2da062dc90ed4022e27f5a760797381b53ae024a80c774423baf6ccd3c3dff22eda1326811a09d4fa390de75337d69dbb767f650ab59d63be7c4fb0157ebfba43dc7123cd955d91b155a8b26df7c36c71b23cc3b994c07a58cc5ac143873432f03d640aa9f750e86535e1f2d7c16ea5415065a42077e705ef6b26715661ac7540cc92e3c6b78964c50ff6c240c9c5906cb7245a383d6ec3a8b4c606b36", 0x1000}, {&(0x7f0000001940)="13c065c08612306dcdefaf973f3183918ede61e62e15072f60f8645df9220bd51eaacd297a6a58b38690f546aabc2fc360db685ebea4d02c605d24a857f12fbcba90d3f5e571637d3fb93a78c12016978111e9db0404f917e1a0c2da2b176041a9e313db6c00d2196ae4c3f77c7a7c901d9d22e47d76ffa7db2eb733fbc367eb63959e", 0x83}, {&(0x7f0000001a00)="2aba82b28453b3bf96fd1c4096a27571c410d366b4eddffe24680673af148c284379ddcab73a79978476c729672bde4cdca9a409a153ce935a3fb1f5c1ab795c044baf3adfbe8558ad627ba2364ec1257eedbbcf76d2aebd3fa78b316afc7d77948e6b30f532a43d597621682145401c2cfd49a69b0eb96a5871f81e6dfa003d370a1496e10a27c9598e56345f7d252d9825d7214b8ac939d3265e655d1fd7ded5ce599bbb89ce0074da7bb424925a7d8bf2a3b77c746c854ea67c68faabeec4", 0xc0}, {&(0x7f0000001ac0)="9804d329b22b929c3ca6e7df68a8359fbd9f51eb74cf8928ee758bed5cc32da8f05dd596934dc2fbe745cde7b8ba27d012f56dcb58c63a93d810cf329fe8633721d6537489f65a0e357131eb29a7536459b4837a7bcad83eaee59842aa0565e5abee3533a504d5c134147aca3db33baf842998ae61b6b2162906f7181f6ebe28fe80a9eb07afaeeeb43f4172ee9e3ffb1c081bfb857a9b03ad0b47ef5f74227d", 0xa0}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)}], 0x8, &(0x7f0000002c40)=[{0x38, 0x102, 0x5, "a88e32f3758f1ffd794965992823b5754485a321951df32152910092f4786bbdbc50152521cd38"}, {0xb0, 0x115, 0x0, "fb13c93a646199c43a1dc40bfb9cd00c91d76ae19f405bb79facee11ae767fda547f74176cfbb6d06d78c59c3db9d7ec7a39013bbefe1918069b2a98a8e8564ada897aef8d8b4b0aff60acaab95945a9b4eecf989b099bb1e26e4dab22c60da92eb0e8814299439ec6f4332784cf4a783cebf01c2d23b38e2d847d6293a09490362075b09f253d37868aed08fc7832c92a2d608d0e654cdbc1f779"}, {0x108, 0x11, 0x9, "76609816fc6e1b54575c18783a6a24e8b349bbd17229ab395db02e3eee1baaed2cd1c0e59649066eb1740d74c4601536b8c9f4f713cbfdde52e60f85fb162b40ae43f1b83b659bbc222a678a134e12be20d778b7759d74c627b6c6722b0339344360c267226f5aedf661fee9ab8e1e9320a24fdedc8d279dba556785b42a1d9d57b1f0a022bdd40d36ea477f587fd0363279dda95401206109c288b36091b4a7028268d69d769721e3c58bd800ea0e5c9dcbe4a98d5d8e8fa7523cac037efe59afcd09fb2afa323aecb664f604bcb86e212359b4382c5dd672bdc5c76d380cfecf72d0ad89dfc9a92fa0c1f03a8b847868eab066"}], 0x1f0}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), r1) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000002ec0)=@generic={0x0, 0x5, 0xfffffffffffffff8}) fremovexattr(r5, &(0x7f0000002f00)=@random={'system.', '\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003200)={r1, 0xe0, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000002f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002fc0)=[0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000003000)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000003040), &(0x7f0000003080), 0x8, 0x61, 0x8, 0x8, &(0x7f00000030c0)}}, 0x10) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000003240)={r3, 0x62, "48c0c2410b756a32c2fec562e499792ab93d9ad0fb55394be18a837a6feba1ee9cc357850ade3c48798c1fc6129dd9825fed52d1f7093db3c952877fc09ea23a4e6ff56205026d99592b60b4e41416e51e3fb4676db5e93ca9a8b9c60be36a1b28b4"}, &(0x7f00000032c0)=0x6a) r8 = syz_usb_connect(0x0, 0x4ad, &(0x7f0000003300)={{0x12, 0x1, 0x300, 0x68, 0x9d, 0xe2, 0x8, 0x1110, 0x9022, 0x56c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49b, 0x1, 0x9, 0xf0, 0x10, 0x9, [{{0x9, 0x4, 0xd2, 0x3, 0x9, 0xe, 0x3d, 0x32, 0xd, [@hid_hid={0x9, 0x21, 0xc0, 0x0, 0x1, {0x22, 0x489}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x3, 0x8c34}, [@mdlm_detail={0x4b, 0x24, 0x13, 0xab, "4e44afee1fbe2130b07c65727759172d4052ed78e69215e23e77895c6eb4fe473d660ab5f160de99008ab6381f40671015e5d5e8dfb0a46a68818b8936bbd40704b4ea05833ab3"}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm_detail={0x6a, 0x24, 0x13, 0x97, "12b6a24e14391a7897a1bfb386696c2cc1ce6f124440e18f94361381c739983e348275f1a5078f73be4adf92014663633a525b2d029be5d3993673d8351298907e4ff88e7fbe17e26e446b768b537a347986b6dba81b776ea0274df0cbb4ff4d01bd7963d8d4"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xa}, @mdlm={0x15}, @mdlm_detail={0xe2, 0x24, 0x13, 0x7, "b1d341bf01df3267fa42903f5ad536aedf9022c53325540c4c406654670f3fbdd96d9db165886433692ce306124349b61adf440f79587a1686780c3e04a9ec5f25b5f8f413c9e9838e38585ef3aa907acf451a3f56954b834822ce84440e7de5e955c8c7a436745c301192aca5e1298d67f5b2bc9f79993e02cb37e6565d9f00a8745e52cedb3a5ca333b2b87f19257f31f305899e00e08531cf748290b01eb9aa135193fb766561b2c2f8721c46ecfb40da5549cd5a02ece75200feaae038e0d72e4d265539ebd3eb1aef6ba2ca8689fbcaacc1ccea3629f5b583e97b18"}]}], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x10, 0xb, 0x81, [@generic={0xe4, 0xb, "236f5c506fcb3d5e0ce7d35bf2bf7b5a7cd2245b9f02ccbf47c07735c0533b21230fb00bfc23402dfc438f12591e04ad4f1b0a85a87c9ef31fccce9fe76f589e9a6d3cfe7e0f67d1e0d73b8637658988a08f552a43e53b9c35584b1af8b32f175d5d6861a176cadd688d3bc45af1d8818a140438ec147970cefd600800004f67b9fc23fbe762bbd01659bfa19fa5bb5420eeb815f02f087594332f3b43efa8b5d2e51068750c47e83efa12236779d05e4512572c60f3a8cf23b715e25afeb85f85279b00bd997a1db85c883def683b722a73fed192b9b704a002936c6b745253a256"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xd, 0x4a, 0x80, [@generic={0x59, 0x9, "7452f3e0636da32fb3eeac48fe4bfc75ee5517c6684bcfd4b14caa117aabe836b6619e82b11ff02171116d855ffb1476b2fb80a3cbf09ad7f7bb1900914bdddc214057d14894fe52f4d1ef5463b07682b418fa881798f0"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x4, 0x10, 0x6a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xa}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x1, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x4, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0xf, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1a, 0x7}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x12, 0x6, 0x53, [@generic={0xe6, 0x2, "a626f53ca186e9237dfc594d29dedaf715d22a318772676230f3315289193ef12fce38848afc4438f5db90f44622c0ef98896656550a7662f2b90d571ecaa01f7841928f91184bb2eb3397216ad1d13b51f2854c46e413eb4fd484ce5a80c61fc486cf7317e65820736b65ce4b0cb32127be95da40465b8c577415faf32c13aff7c3455c76652cf741ca3e1db2c355f87bc02234d6d2bc29737369cab0e1838d79b48e1c3513061724d78cac068b360442ca7c0d2830e5821e91908e5a7a75c0f21dba6dbe84f74e908c4fcc514ed7992bbed6b4f39282776a60e88c6e2dfc060f6c5c5a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x7, 0x8, 0x7, [@generic={0x5, 0xe, "8b4ffc"}]}}]}}]}}]}}, &(0x7f0000003d40)={0xa, &(0x7f00000037c0)={0xa, 0x6, 0x250, 0x0, 0x9, 0xc, 0x20, 0xf}, 0x43, &(0x7f0000003800)={0x5, 0xf, 0x43, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x2000, 0x1ef00, 0x0, [0xc000, 0xff003f, 0xff00c0, 0xf0]}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "efc2911a413e4e69482eb882612e5a34"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x1, 0xfff7}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x3, 0xa, 0x8}]}, 0x8, [{0x4, &(0x7f0000003880)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f00000038c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0xff, &(0x7f0000003900)=@string={0xff, 0x3, "0ff6004d9958f82261d4897c3c965a0fb6a9a0c3db877746ca5086127a98d0fc447679959aab569939b902738335687aad62955066ef517722f38699a2638566f25bac3ebe5d982e074082502b47f84de5d518acdf3c3af417e6df11c7f21b51ad655a7b7cd9a8b69206cca5564668e00d0328e573ca62af6705af93c7d3fe6cda23c3e3f47797e79de57dba600953b5835ab5396322136dae50c2b53fd33ba257e3c1ea9cb6f64200f72013df698572c834fd27c2406c4356ba62b09382d0ddfa607a6b6d95c67b9ee16fc1ad3edf1864889edd5a0c736f8ac59d9b48a1734af12cc50167a9b3862ab56a9408cd1e8ed6fb7d57a2d49bee116fe55c24"}}, {0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0x18}}, {0xd5, &(0x7f0000003a40)=@string={0xd5, 0x3, "bf2f4294ade2b329c00dc1c3d3425716f5f0247645cab0b8e8b213234d56878a554414dd25755cfcb32c3ce5f4b42ec265a1f0d638325ae3e1f23e1dc971ca20c46139395a85de23a91f46249d343c896098a453da24dba7e38befa7c98becb3588f026ca1e7a8948997e63b34808b4607f3a1eb0f2ddf453bd8902a3ab60177fc65b50daa0df58ae394b348070e5956056aad6d3b6e7c931e482f40484f03f22952c109acfafcf09f570c978565221c6716b7a991cff5fc418a2467c458db0ebac2bc6db7bbd7f5a90709cd1f612da6eb313a"}}, {0xa0, &(0x7f0000003b40)=@string={0xa0, 0x3, "cdbf7531aaf34dd5a29d676e5ac8a3d3a167b56288e74dfc4ab3244048159bcc04b68d0c8bb0a389269a72533cac63147f0c3f0ac6871d33093d8c4ee6209fedeb18613c05994fc772b9cccb6ae326bdee06a091bcdbc037961409dacafff0c0bc83a74a7fb7a0e0567187d41dc71fd5665bacd75386b4b53a402439482f5ad2787ba141a7f826b0791fbaa75bfd7be8b72e5ad1baf8509e664b288c46e3"}}, {0xa5, &(0x7f0000003c00)=@string={0xa5, 0x3, "e03120f437f30e7c6f6e4f4ea47d45358d50b31dc14fa4da81cba868564cb4e77bc2ba89895f859efdb79243531a5bcf583c47272861cae445a36e6e077679ca470e9f9e520a7962d0f7c5acbab568c7a33a8b6c73eca2e1b92f97917b9fcc6c40efa7b39c1c8daf3ee6be211a7520f0d3e2e0fbb6021476d909c63e898e70575df8637f0761dcb43997087c13c28f4522d0624512541da96b504e9d26ce8214d3bba9"}}, {0x48, &(0x7f0000003cc0)=@string={0x48, 0x3, "471da4b36fbe7c48f78bd1c7cb37ea10132c17bc96a9282598b927bc71455440633297b0c67c4763901e965cee9cfc044064057fafe5fdba3c12946e2c4598756a82b8e72be3"}}]}) syz_usb_control_io(r8, &(0x7f0000003f40)={0x2c, &(0x7f0000003dc0)={0x40, 0x22, 0x38, {0x38, 0x23, "1f117fdbf3ab6006b1bc4018306f7cc525d423fa58af6c46a681a8885f3774ab1a24e8e1140613ba252d4679f5d32d9f5fefc512c01d"}}, &(0x7f0000003e00)={0x0, 0x3, 0x15, @string={0x15, 0x3, "fafee6bfff06d213dbb95ae6b14555169c0010"}}, &(0x7f0000003e40)={0x0, 0xf, 0x65, {0x5, 0xf, 0x65, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x0, 0x2, 0x3, 0x12}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0xb, 0x22734a691c3f9270, 0x2}, @generic={0x38, 0x10, 0xb, "f57ec8a224c9f26ce229d8720f031a698995bb20210ee065d90809751b788a1ea0da0bd49dc91282e50aef2c8c3cbd2936c514a0d9"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xb, 0x4, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x3, 0xa, 0x400}]}}, &(0x7f0000003ec0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x32, 0x0, 0xf, 0x5, "15effc85", "7cfc9bd8"}}, &(0x7f0000003f00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x18, 0x94, 0x0, 0x9, 0xa, 0xa}}}, &(0x7f0000004380)={0x84, &(0x7f0000003f80)={0x0, 0x18, 0x2a, "707a27e2e62d9560d259dce042d0767912381581db540aac70d0357e910aec369213c569d23f2f30f03b"}, &(0x7f0000003fc0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000004000)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000004040)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000004080)={0x20, 0x0, 0x8, {0x800, 0x10, [0x0]}}, &(0x7f00000040c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000004100)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000004140)={0x40, 0xb, 0x2, 'L}'}, &(0x7f0000004180)={0x40, 0xf, 0x2, 0xc50}, &(0x7f00000041c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000004200)={0x40, 0x17, 0x6, @local}, &(0x7f0000004240)={0x40, 0x19, 0x2, "5ec1"}, &(0x7f0000004280)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000042c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000004300)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000004340)={0x40, 0x21, 0x1, 0x7}}) syz_emit_vhci(&(0x7f0000004440)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9) stat(&(0x7f0000004500)='./file0\x00', &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000045c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000004480)='./file0\x00', &(0x7f00000044c0), 0x3860081, &(0x7f0000004600)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x1600}}], [{@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, 'system.'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_type={'subj_type', 0x3d, ')-}\x1a+^#-'}}, {@euid_lt={'euid<', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@appraise_type}]}}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000047c0)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000004800)={[0xb000000000, 0x7fffffffffffffff, 0x3, 0x7, 0x4, 0xc86, 0x1ff, 0x2, 0x1, 0x7, 0x1, 0x4, 0x8000, 0xfa, 0x10, 0x8], 0x8000000, 0x70840}) 5.409234608s ago: executing program 2 (id=396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESOCT, @ANYBLOB="010000000000000000000300000008000600ac14", @ANYRES32=0x0, @ANYRESOCT=r0], 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x24004085}, 0x8040) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xfff1, 0x6}}}, 0x24}}, 0x20060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x4c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0xfff2}, {0xa, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x9}]}}]}, 0x4c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000d00)={@initdev}, &(0x7f0000000d40)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000010c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYRES8=r5], 0x2e4}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000002c0)=0xa0000) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000180)=0x5) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f00000000c0)=0x66a) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f00000101c0)={@my=0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x88, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000329bd7000fedbdf250200000004000500050002000a0000000400fcffffff02000a00000014000900fe8000000000000000002000000000aa0400050014000900fc010000000000000000000000000001050004000000000008000b00ec", @ANYRES32=r10, @ANYBLOB="08000800ac1e0101"], 0x70}, 0x1, 0x0, 0x0, 0x4081}, 0x10) 4.178625208s ago: executing program 2 (id=397): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000001600554363cb33bc2db1bdf40a00007848853bb3c0e806d2e0a1703c0b28000008000007000000017d84de64f41dbfcaef7436be7b9b378d4fd17bafba067dec4c54102ff22beaac9e8c3487db085073fe3ed248dd37a2b12ec76241cc558b158ec264e80278f75ab375c03cb755439737778a7a162dcefeeb49e6c5f401261bbfc3020eea7fb16733bf1c69c249fc3447a5004c7cfe098fb2e473690276e790f65ab7c3770a31ee7dbc53f2d2c85e6c78f3"], 0x2c}}, 0x0) 3.37300003s ago: executing program 2 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x29, 0x1, 0x0, 0x0, {0x6}, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="02000000"]}]}, 0x1c}}, 0x0) getpid() r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="00b0250b7c62"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000000)='pvfs2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80c81a, &(0x7f0000000040)=ANY=[], 0x1, 0x688, &(0x7f0000000cc0)="$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") truncate(0x0, 0x404043000) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xffffffffffffffee, r3, 0x10, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x3c}}, 0x14) r5 = open(&(0x7f0000000080)='./file0\x00', 0xa201, 0x94) mount_setattr(r4, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8800, &(0x7f0000000140)={0x8, 0x100088, 0xa0000, {r5}}, 0x20) 2.789309849s ago: executing program 8 (id=399): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0xc0800) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x3, 0x6}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfb5}, @in6={0xa, 0x0, 0x4, @private0}}]}, 0xc0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000bc0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='.', 0x1}], 0x1}}], 0x1, 0x20000004) syz_emit_ethernet(0xffffffffffffff16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0000}}, 0x7}, &(0x7f0000000200)=0x90) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x51, 0x0, 0x0, 0x98e1, &(0x7f00000000c0)=[r1], 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2eec0a3f0028000000000000378a72b24e1ddb4ccb26", 0x16}], 0x1}, 0x20000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) 2.332611527s ago: executing program 6 (id=400): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x74f, 0x0, 0x3}, 0xc) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2121) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) 2.286023773s ago: executing program 8 (id=401): socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x3, 0x4c) socket(0x28, 0x5, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7f, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x7, 0x1b0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0xfff, 0x81}, {0x6, 0x24, 0x1a, 0x3, 0x2b}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x7, 0x4, 0x4}, @country_functional={0x6, 0x24, 0x7, 0xc}, @acm={0x4, 0x24, 0x2, 0xa}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf, 0xb, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x1, 0xcc}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0xe, 0x2, 0x40, 0x1}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x7, [{0x45, &(0x7f0000000300)=@string={0x45, 0x3, "898daf15668dc1a296378fdd013f8aff74c9b699b67d0929eb9a7677b3b30cf8231ad6471a76d29876c5090c56302f859ec4fe8abe43b746af72fd1a86282ffa150067"}}, {0x7a, &(0x7f0000000380)=@string={0x7a, 0x3, "298f43c7941de1b5e783b98213d44ffec23c97cec3ab903c3c8897c6226c68f24f412d1017410dfebae5725d02c676a53ba2afed8e9b49a745dc4c76efcee8d9da09f17377d279c77ba931a49368018cb00338c856ce362deff0f2e02c2c7eaa4e37e045a71bffaa6086848c5ee5cfa29fe004c690a43385"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x458}}, {0x93, &(0x7f0000000440)=@string={0x93, 0x3, "49437162d4d0366eb94e64d82623e7fdd9e254d0b94893a5232743104ec21496c09237ad2beaa8d42c197c3340e7fe7df680d3febdfbf1a1a42410ab745e2d9db79881518b241e971834f2b287d11d4f39cbf00a420459dbc320e753719d1c0ef1282ebb05c6e796ad92386838be37b8c6e53f20de42a90b9a2b03a73aa0d192a0088b9de70ec0979b1e1b02e9f552a745"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xfb698c366fad70f9}}, {0x46, &(0x7f0000000a40)=@string={0x46, 0x3, "dc50ed0271ae509017de480bb8956041de7dbcfb926314b655bebfb6dd1a9e35cad9834a155805926c450eaf7d06e7c3db13a29c60db1161b02a8825e8568104023380ec"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x816}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x20, 0x1, 0x46, {0x46, 0x22, "b16886ae95ff70cc4fc4065d1256206f2b88864d0bd2c27328336783b2811de8956a43326ffd4b7f20ac9cbd932025700308152af6343043270a97899562a291c743e567"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000740)={0x20, 0x16, 0x22, "dbd7b7dd1aea3833ac4a0df074c71544d104daf4b98b4ea215853c53608b1f6df8c0"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1c}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x533, 0x1ff, 0xffff, 0x5, 0xfff7, 0x5bd795c5, 0xff, 0x4, 0x2, 0x2}}, &(0x7f0000000840)={0x20, 0x85, 0x4}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}, 0x1, 0x0, 0x0, 0x20024080}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.478881929s ago: executing program 6 (id=402): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80030}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001300010025bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0020000002210000050021000800000008001e00020000002f1506d3b3baf2400d6bfc8c0ba5de9986a7c7871cd1c9ab0fbcaf52c726b5c184312934fde503c7818f071d11db9caf29a75982b933d14a297b8c83fc6002d0bf97e743e5839dd5cc3a1204f583e420022df1d58e510d17122e80aa14a05050d8818e4c"], 0x30}, 0x1, 0x0, 0x0, 0x4040840}, 0x4c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000000480)={0x7, 0x2, 0x5, 0x100, 0x10001, 0x55c}) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) dup3(r0, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000000c0000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000001000000000240b182e9936299000000000000000000000000000000ffffffff010000000b00000020000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000020000000000000000000000020080000000000001404000000000000000000000a00000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce400000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000034c688f1cda1b3c1e36ef29200e4ff0000000000000000000000000000000000000000000000000000000000000000c06a330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000040000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de1f8f0000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044"]}, 0x417) ioperm(0x0, 0x40, 0x80) rt_sigqueueinfo(0x0, 0x2d, 0x0) ftruncate(0xffffffffffffffff, 0x200004) 870.996327ms ago: executing program 2 (id=403): open(0x0, 0x14d27e, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0xfffffffffffffffd, 0x58) r3 = epoll_create1(0x0) socket(0x1d, 0x2, 0x3) pselect6(0x40, &(0x7f0000000000)={0x3c}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="646174615f636865636b73756d3d63726336342c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6e6f7265636f766572792c73686172645f696e6f05655f6e756d626572732c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6effff655f70726566657463682c6261636b67726f756e645f636f7072655434696f6e3d6e6f6e652c7265636f6e7374727563745f616c6c6f632c636f6d7072657373696f6e3d6e6f6e652c726174656c696d69745f658e080000732c00"], 0x1, 0x593a, &(0x7f0000005b40)="$eJzs3X+QXFW9IPBzu3synZlMMgnwiCCTIZD3ePA0E34V6qtnnuuvAqRiYSlhozCQCUaTkEqCQEAJLrhQgIWWlqL+gRZSi0aLKlglUiI/NmEVpVhdaguplV30D7eQJSWQpSzXeTXT9/T03Ok7t6enJyTw+VQyt8/p29/zvfeevn3P6Z7pAAAAwJvCvhu3HzjvmPf94vMjr173wZ9svj70lsfrq3GF/nR51euVIQdTd2Xp+DLbL/7hmu/9YfDS9/z83p7vvrZ3/fEbfvveIy598FNn77njm4+80nf/354vihv708kT5eTFJITqT/d/9Qt7nzh6rC4JIZST/l0hLE6WPLI4yYQY+ksIYX1aWJq5875XT9swtrz+lu5J9Ysy6+nvb27VtJ/tPHDlKeF3/7r2hl8t++EPuna/sGtilaTa0J9CWHhx4+O7Qgjz0/9jYm+L/TF22jUhhJ6Gx51VkNcJLea/Mqd8bLqcly57C+LE+5dnyqXMetly1JVZ9hS0N1t5ebS7XpEFmXL2ZDRbeXnG+sXp8sfp8uQZxi/H/0koJaFST39TMtFHQsNxS0Iyfiyr9XKpfmxDuv2ZcpIplzLlcldmu8bbTTtaOUkm18f1MvXxdFxJ649vPFc3cX5O/VvSZTV9or4WyyF7o6Z3yo36do2Lee2fJpeDodRwDmpWXz/w6cHoTet6kyVTHjPaRLxv79pbV5TXPbqvPyeP5N4kjZ+0FX/nLxcv+MT3b74i+7pej39xKY1fysRPWor/3DlPvnThzd/5Rm7822P8clv5n/pQz4vnPHbj8tz9sz/un0pb8Yeff/y2ZUdesjs3/ztj/Gpb8VfvebK778BDD+fmPxT3z/y24j/7rvf//p6nH3ghN36I8Xvair9uz9Yvdg8cOCk3/sNx//S2Ff+5l3ef+czAwB8HGx9wUt9E/Kdi/L624t+964533rXolrNzj++auH/624p/7okP3rDgwAPH5Z07kzs79coJ8OZ0RHqNdVNabnecOVsN44WvD1ZqV0kL0v99nWwoc/E51s7CTsYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBDCUaf81w/874/2v1hJy93pjWdLtWWsnxdCMj+EsH3H8LYdG7dcNvipy6/YtmV40+DwjsGRLTu2XT14+j8NbhvZumn46rF7h952Wu1xS0JSWybHTWm7e3R0tNQ/uS629+9O3P27FWf9nz+FMHTUbwYqufmvvGPzXUc2+ZmRrB599+YrzvvNGd9Ot6s/zau/SV6jo6OjISev/3vBX+/68v4/nBTC0N9Nl9fjz/7LzyYlNF4xESdV6g61hLqTnqZ51LNO84n7q7Jh46aRoen379jjyznb8e+veeEvG6760l9r+7eaux0t7t/5q0c3lb629tz//7VraxVFeb1ex71of8etiPnF/VdN9/fCdLsW5mxXJWe7bvzVw0//9JibX9kVhiovL5vadtF2daUdoCt5S0vtxhZ6ksWT6qvp+vGIx8et3LF568rtV+9828bNw5eNXDay5R2rTl915tAZZ56xcnzLV3Z4+2P7f9/i9h+c/rToM7t+HH+21p+K8iraH2N5Fe+Pxozynn8953/hK++447HzahVF/TyuXT+fpMueseO8KjT0t6n7qtl2Fe2HEMJgs/3w0itnh6P/x8Ybis5DjUem8WdGsnr0ieV//vZZ31r6z7WKg3Keb0yozfN8PeuJfMb3VzU9HqOH6P7tDuV0u3qb5rXqice6bt33p8/W85s3L1w1vGPHtlW1nwvSTBckxzbNK1sbt2vZ+M9ySHdLqHfTJv11TFeo5Zc9f8bVs3u1N72vN1nSdLuy4n171966orzu0X15ezq5t9bi/NBXWyZvzVlzU+aB5XrCzdo/VJ9/Rf1j4APfuv+j9//o9Cn949Taz6LtSnK264dP3/2V737pP/6oc9v1gX95sv/P//OTK2oVh8t5pZ51mk/SeF45NYSi59+y0Hw7cp9/pebbU/T8y7YzsX7zeIOZcm8ot/V8PfWhnhfPeezG5bnP1/2tPl+vnVQqFzxfD5X+k31+JZXJeczd82tSR0lWj/78piN2PXLdmmNqFUX9ur52s359Wgvjj5zt+tmFzwxcPvgf/nvnzhvf+6f7Lvrt8OrP1SraP+4xl84c92q6f6s5+7eedRx3Nu7ft196+ab1tfpD9/o3XRaMf+KpZPvVOz89vGnTyLbtrW1Xq6+nsZ3sXm739TSe3ZYUbFdpynbN3Y1W9lerz7eY//q299fk51tvSNp6Xdj5y8ULPvH9m6/on/KotKGLS2n8UlvxnzvnyZcuvPk738iNf3uMX2kr/vDzj9+27MhLdufGvzNJ41fbir96z5PdfQceejg3/lDMf35b8Z991/t/f8/TD7yQGz/E+L3t7f+Xd5/5zMDAH3PjP5Wk7YxdI4Vw36unbaiVk9CVPt9iHl2T8grZcpIplzLlcmO5VJtrrTdQTpLJ9XG9tP74hlya+VhOfbwKqy6tLV+L5ZC9MX39oabUcO5vVl90nQoA8EYX3/+P16Dx/f+R9EIpf6YBJsx2HLY0J24ch03M58ybdP/SNH58fJwHHHh7GBpbXj9Yu9Cf6fsI8fmQneeM7Zx0wuQY7c5zFs2/L8+UY161+fJKwzg0NXVcUwktzL9PbWf6+ffM5hfPjw/eNCWtwYZ5q+zx60pnzJp93iGTb2UsQl7/yM6Lxc9zDCwMa8bba7F/ZD9HE49D9nM0sZ1jMifOdj9HM9v+EdOepn+Mp1z8/sbU4xem2b8Tx695tOzxm8Hxro6tP9fvz3Zg3rDpKe3gzRvO7fth5iVz4qdPsDmeNxy7Oat5w1gft6PS4nziR3Pqa8/aXfVyW/OJ5YmbMa/90+RyMJhPBN6o4vg/vkaMjf/HLsD/X2a9ouvQ7FVjjJf7OaFy83yKxh1TP6fX09br+Lo9W7/YPXDgpNzrnIdb/dzP1kmlnoLP/RTtxxWZcuF+zJmgKRrvZdsp2u/Zz2X0hr629vvdu+54512Lbjk7d7+vqb2QFu/3r0wq9RXs98NgvNA8vvHCm2K8MNfzZ6/b5xjSDz7N1XjkIzn1M/18Q8+UG/XtGnfYjUe6Dm5eAMDhI47/6++fpeP//xVXSK8jisatJ2fKMV7uuDXn+iRv3PqhdHlVZv3e9DcqZnrdfO6JD96w4MADx+WOW+5sdRz6nyaV+gvHobMbN+eOI9Z05vPiueOI+jhrduPE3Pzr48TZjdNz49fH6bMbR+fun/o4enbzALnx6/MAh/s4t2C+LtNYLLY6X/eGHUenvz47V+Po83PqZzqO7p1yo75d44yjAQBeX3H8Hy/j4vj/scx6s32fPXdc0KHr9uzfA6nHf+pgjSvnetw31+PWuR7Xz/W8xOE+Lp7reaG5nSd704+L00aNiwEAOJTF8f/8tJw//p/d+KTZ+K1r0vjE+LxpfOPzQ2R8frjPfxn/e1+8mPE/AMAbWxz/x197jH//77+k5ezfrTdOz4lvnG6cPl3/aXmc3vl5tuBzAK/vPMD8ifXNAwAA8HroGh8pTf09+4+ny+zv2ef9Xv6FOeu3qpJeHl+yY9vIyEVXbF0/vGPkoi2Xrx/ZftGV2zbu2DGypbbebMeNueOWdNzYFSrp/mi+Xnbctij9ewiLcv4eQnb9GPbY8RtT/x5Cttn5BX9HYOL4tZZv3vErTbN+s/6Rd7zz4n8sZ/2ofvwv/eSpF23YftHGLRt3bBzetHHnyOT1xkatPTP43sy4W2b0famZH1OUZv79nZ3JozQlj650f+R9P3uSyWNxmsnivO8/yMn7F//ty585cfSv94QwdFT5rbPaf8nq0f98wciHduz7zdax/EvT5l9fM82r6PtKs+vH7alsunz7jlM2XH7Fluw3SrYnzmeU6uU5ms9In/7lFucn1uXUz/RzCuUpNw5NLc9PAAAwSXz/P17PxvcPv5ReQMX61sfps3v/OHecPtTaOD37vWRF4/Ts+nF7Wx2nV2c5Ts+2XzROb7Z+s3F63rg7L/5Hctafqdb7yew+55HbTy5urZ9kv8+gqJ9k12/eT0q5/SSZZT/Jtl/UT5qt36yf5B33vPgfzlk/T+v9YXafy8ntD7e31h/+MVMu6g/Z9Wd63ijNsj9k2y/qD83Wb9Yf8o5vXvzzctZv1eT+MdYxxvvFyEVXXr7t0w3rzfX3X8w+v7n9/o92tZ7/3H7ua+7zn9vPlc19/rP7XFlu/k/Nbias9fzn9vtd2nXQ5mvTD5sVff6saB53bU79TOdx5025cWgyjwuvnzj+j2/3xPH/Lemy028DHf7fk+Z7zJrG79D3mBVdx3g9T5fNXjQPAV7PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrTXVk6vtx34/YD5x3zvl98fuTV6z74k83X/8M13/vD4KXv+fm9Pd99be/64zf89r1HXPrgp87ec8c3H3ml7/6/PV8YuH/8Z+XktFgNIXkxCaH60/1f/cLeJ44eq0tCCOWkf1cIi5MljyxOMhGG/hJCWF/Pc/Kd97162oax5fW3dE+qX5QJkt2u0FuO+TTmGcJVhVvEYaia9rOdB648JfzuX9fe8KtlP/xB1+4Xdk2sklQb+lMICy9ufHxXCGF++n9M7G1L44PT5ZoQQk/D484qyOuEFvNfmVM+Nl3OS5e9BXHi/csz5VJmvWw56sosewram628PNpdr8iCTDl7MqqptB0/L89Yvzhd/jhdnjzD+OX4PwmlJFTq6W9KJvpIaDhuSUjGj2W1Xi7Vj21Itz9TTjLlUqZc7sps13i7aUcrJ8nk+rhepj6ejitp/fHjOZZzt/v8nPq3pMtq+kR9LZZD9kZN75Qb9e0aF/Pan5vJwVFqOAc1q68f+PRg9KZ1vcmSKY8ZbSLet3ftrSvK6x7d15+TR3JvksZP2oq/85eLF3zi+zdfsTQv/sWlNH6prfjPnfPkSxfe/J1v5Ma/PcYvtxX/1Id6XjznsRuX5+6f/XH/VNqKP/z847ctO/KS3bn531mL/3SothV/9Z4nu/sOPPRwbv5Dcf/Mbyv+s+96/+/vefqBF3Ljhxi/p6346/Zs/WL3wIGTcuM/HPd/b3v95+XdZz4zMPDHwbz4T8X4fW3Fv3vXHe+8a9EtZ+ce3zVx//S3Ff/cEx+8YcGBB46r5sW/s1OvnABvTkek11g3peV2x5mz1TBe+PpgpXbNtyD939fJhjLG2lk4h/EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhj+vW1p3/8gnd/eG0lCSHJWWe0iXhfed7q1YNttDv8/OO3LTvykt2NdUvbiAMAAAAUi+PwUr2mGpaGK5P54dim68c5gmNjKZlcn51DiHGycwTtxil1KE65Q3EqHYrT1aE48zoUp7tDcaoFcaqhtTjzp4lTGesVLebTM20+rcfp7VCcBR2K09d+nCfWNsRZWBAnzv8V5bOoQ9vVP22c1vvh4g7FWdKhOEd0KM6RHYpzVIfi/F0bceY1iXN0h/LJzinPtB/2pWsekxdn/Ea5ME4lKdfvaDaffnTaznGzbKe3oJ2+otfjFtuZ32I7J2QeV5phO9UW2/n7WbaTtNjOP86ynVJBO7HfXpXNL7YTS9O3U4lxrp5dnPrzaGeH4lzToTjXdijOZzsU53MdinPdLOMAtCqO/yfGe/2hu/LPoSc942RnAeJ4d9n4z6mvd3knpBjvrZn6eUXxsgP1TLxlM80vO4GQibc8U981KV6lPh6ZJl61Md6KzJ2F25udUMjkd3KmvrsoXnZiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADm0K+vPf3jF7z7w2tDEsb+NTXaRLyvPG/16sE22t279tYV5XWP7mus6660EQgAAAAoFMfhXfWaauiurArdybxJ61XTeYBqWi7315YDC8OasWUyWBov9ySLp31cJX3cyh2bt67cfvXOt23cPHzZyGUjW96x6vRVZw6dceYZKzds3DQyVPsZQndBvBDC+PTD9qt3fnp406aRbdtrldn8l6aPW5qWk/RxA28PQ2PL69P8lxS0V5rS3tzdKD56AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwbu3YXIudVxgH8vDOzM9NtY1b6NQ3NZshHiVo0iVtJtXRfECy0SchSkNnqWoJNsLhpQptIrGMbsK0JitASCJFcGInF1uJNP2wR+0EgUqMBNwZpi/ZCL5RWK2nJhaSMZHfO7MzsTGYdS9PG3+9i3plznnOe98zFwv/dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD9NVUdmaiMjo0PJiEkXWpqHcS5bD5Ny330/fJz239QGD69snmskOtjIwAAAKCnmMMHGiPFUMhlQzZcNf1paWiaCLO5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P8zVR2ZqIyOjV+chJB0qal1EOey+TQt99H39bef+Mwrw8N/ax4r9bEPAAAA0FvM4ZnGSDGUwrIwkFzVUhefDSxqW99eF/dZPM+69mcH3eqWzbPumnnWfaxH3Yb6dVcAAACAD7+Y/3ONkaFQyC3omv975fpYt6StLlu/9vNbAQAAAOB/E/N/oTFSCoVcqZHX55v3l7bVxfW9/m8f16/osr7X//PX16/+Tw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx5T1ZGJyujYeDYJIelSU+sgzmXzaVruo++a5wf/ccuRB5c2jxVyfWwEAAAA9BRz+Gz0LoZCbjAMhIunc//wTQef+uJTz4yEEGZifj4fdm3asePuNTOvsW71sSMD3z/65rfn1K2eeT1vBwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN4zU9WRicro2PhFSQhJl5paB3Eum0/Tch99X/vcF/7y2Mln32geK/WxDwAAANBbzOGz2b8YSiEf8uGK6U/NWf+sTNv6bs8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvHPd+89+ubJic33+2NN95403hzvv8yAQAA77UlIQm1/9KVG8/3XQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8EU9WRicro2HgxCSHpUlPrIM5l82la7qNv+tzxwoLTz7/YPFbqYx8AAACgt5jDZ7N/MZTCQBgIl09/6vRMYDr/D72PNwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8oExVRyYqo2PjC5IQki41tQ7iXDafpuU++j66+8BnDy/83s3NY4VcHxsBAAAAPcUcnm+MFEMh9/FQCFfXP0+2Lkiy9Wvn5wKz67a3LBuc97pqy7rsvNftaTtZrn6amXXFuN/QzLWxrjx3XblpXSk02pdb1oV9LasW9LjPAAAAAOdRzP+FxshQKOQKTTn3py31Q3IuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDFVHVkojI6Np4kISRdamodxLlsPk3LffS997cfveQrP9u7s3ms1Mc+AAAAQG8xh89m/2IohcXhI2HxdO4PQ631se6flTOHH/nXX1eGsOqKE8O59m1/FN/8+rUbX2h/CSHTWp0JYWG9X9Kl329+/0h2ee3MYyGsujx79Zx+4dz9WrdMa09XNq/fcfTE9h5fDgAAAFwgYv4faIwMhULurq75PybvHvm/YTqAL/zG7l9cVn+tJ/K2FZmher9Ml36fX/7En1es/fubZ/P/ufp96sDWw5e1NJwZaZOktdGtOzecuO5QJp56pn+2rX/8Xr70rTf+vWXXw2dm+hdDsT6+KJfr0H/ua5uL0tpkZv/4unf3V1v757qc/8HfvXjyV4v2vnO2/9tLBhv9rznH+c/df/DWh/Zdf+DIhtb+IYRyp/5vvXNzuPKPdz7Qfv7Bto2bv/nm1zZJWju29NShtQdLN7T2T9r6x+//5ycf3feTh7/7TOwffyuyctl8+2fa+r+859LdL92/cVFr/0yX879w2yvD28rf+UP7+e9o2TXX9S7mnv/xa5+8/dVN6X3tUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeWqerIRGV0bDyThJB0qal1EOey+TQt99H39VuOv3Xb3h//sHms1Mc+AAAAQG8xh89m/2IohXzIh8Hp3P90ZfP6HUdPbA9DM7NJ/Zqb3HbPjk9s2bbzrjvO050DAAAA8xXzf64xMhQKueVhoJ7/R7fu3HDiukOZmP8zMf9vuXNy86rQqHt5z6W7X7p/46LGc4IQpn8WUDxb9+nZuptuPD506k9fW9Gxbs1s3bGlpw6tPVi6IdaF5rrVofF84vFrn7z91U3pfY37a6775Fe3TdYfT8R9B299aN/1B45saJyjfh2s7xvrJjP7x9e9u78a67L1a7F+bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgrqnqyERldGw8ZENIutTUOohz2Xyalvvou275Lx+45PSzi5vHCrk+NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWG/fkLjqOI4gL+3uzHbbNImrWBUTNOqKPVgURDRi4qKtCIFT5Ui1dYeREEQUerBVFqxVMWLYPVSRAU1SkHBxmJplVT8V7x4UEGhehBKMaANxYORbN5sN5OMaydV0H4+MLy8NzPf+c28t7NZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/lO7aYLM9vOPhyTsuuOWzJ+878cRtHzy47bLH3/xpeNNNn+7tee3k+OYVW769edmm/fevGdv98qHf+t7742jH4MdmmlWpWw8hHo8h1D+ceOGp8c/Pmx6LIYRq7B8JYSAuPTQQcwmrfw8hbG7VOXvnuyeu3jLdbtvVPWt8SS4kf1+hUc3qmdE/u17+X+ppnW2dfPSK8P2N67d/ufydt7tGj42cOiTW29ZTCIs3tp/fFUJYlLZp2WobzE5O7boQQk/bedd2qOviv1n/lQX9C1N7TmobHXKy/Stz/UruuHw/05Vrezpcb6GK6ih7XCe9uX7+ZbRQRXVm4wOpfT+1q04zv5ptMVRiqLXKfyCeWiOhbd5iiM25rLf6ldbchnT/uX7M9Su5frUrd1/N66aFVo1x9nh2XG48ex3X0viK9nf1PO4sGD8/tfX0QT2Z9UP+jxmNOX+07qspq2viL2r5N1Ta3kHzjbcmPk1GI4014tI550zNUZvK9o2vf+bS6oaPDvcX1BH3xpQfTyN/qpW/9YuB3rvf2vnIYFH+xkrKr5TK/2HtkV/u2vnKS4X5z2f51VL5Vx3oOb724x0rC5/PRPZ8aqXy7zn6ybPLz713dL65bubvyfLrpfJvGDvS3Td54GBh/auz57OoVP5319/64xtf7ztWmB+y/J5S+RvGHnque2jy8sL8gzMfhUZzhZZYP7+OXvPN0NDPw0X5X2XPv2+e/Ngx//WR3de9umTXmsL1uS57Pv2l6r/9kv3beyf3XVT07ox7ztQ3J8DZaVn6H+vp1C/7O3Oh2n4vvDhcm/kG6k1b35m8UM70dRb/g/kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8yQ4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FQAA//+hKjF2") syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000002540)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfb, 0xba, 0x4, 0x7f, "32f2ee375c3753e27665173189963501", "bdf164e4bed4f8bc0062be9b73d1cf6a370612ec0f8ae212ac04df9afece5e4019a75c93fb2ffb0e9685920336c7cb93b00b4c173af58201e1fb3022d20b1ef834b30313347009450e14d44b394c9dd78911c3aabb85342eefd29f654ea8890177790cd42ec5627e2a5e268c2865bd3a0cdf938ee81c906fc3c7be62cc6a96150815de1929317f2a19c214eba75ebd7debdaf5df828841ec68ee31add3105bd58219061142"}, 0xba, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) 0s ago: executing program 6 (id=404): getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000380)=0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4) listen(r0, 0xfff) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x12808, &(0x7f00000004c0)={[{@sys_tz}, {@discard}, {@utf8}, {@errors_continue}, {}, {@umask={'umask', 0x3d, 0x3ff5}}, {@gid}, {@codepage={'codepage', 0x3d, 'cp863'}}, {@discard}, {@errors_continue}]}, 0x5, 0x150f, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOIpADAG6AvHAj5IP8UAAKQjwUgsKgwYAFghCKQFGIwk1QDG6G4lACSkIpcFAaEuAWKAO3Qlm4DcrB7VAe7oAKUBEqQWW4E6rAXVAV7oZqcA9UhxpQE2rBvVAb7oM6cD/UhQegHjwI9eEhaAAPQ0N4BBrBo9AYHoMm8Dg0hWbQHFpAy/9W/kvQA16GntALkqA39IFXoC/0g/4wAAbCqzAIXoPB8DokwxAYCm/AMHgThsNbMAJGwih4G0bDOzAGxsI4GA8pMAEmwrswCd6DyTAFpsI0SIXpMAPeh5kwC2bDBzAHPoS5MA/mwwJIg49gISyCdPgYFsMnkAFLYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yD7bADdsIu2A2fwh74DPbC57APvvgX88/8Q35XBAQUKFChwhiMwViMxVyYC3NjbsyDeTCCEYzDOMyLeTEf5sMCWADjMR4LY2E0aJCQsAgWwShGsRgWw+JYHEtiSXToMAETsAzeimWxLJbDclgey2MFrIgVsTJWxipYBatiVayG1bA6VseaWBPvxXuxN9bBOlgX62I9rHf59hQ2xIbYCBthY2yMTbAJNsWm2BybY0tsia2wFbbG1tgW22I7bIftsT0mYiJ2wA7YETtiJ+yEnbEzdsEu2BW7YTd8KQfgy/gy9sLqojf2wT7YF5Nz9McBOABfxUH4Gr6Gr2MyDsGh+Aa+gW/icDyNI3AkjsJRWEW8g2NwLJIYjymYghNxIk7CSTgZp+AUnIapOB1n4AycibNwFn6Ac/BD/BDn4TxcgGmYhgtxEaZjOi7GM5iBS3ApLsPluAKX4ypcjatwLa7DtbgBN+Am3IRbcAtuw224A3fgLlQA+Cl+hp9hMu7Dfbgf9+MBPIAH8SBmYiYewkN4GA/jETyCR/EoHsPjeAKP4yk8hafxDJ7Fs3gez+MFfCH+m0a7SqxJBpFFCSViRIyIFbEil8glcovcIo/IIyIiIuJEnMgr8op8Ip8oIAqIeBEvCovCwggjSIQxACCiIiqKiWKiuCguSoqSwgknEkSCKCPKiLKirCgnbhflxR2igqgo2rjKorKoItq6quJuUU1UE9VFDVFT1BK1RG1RW9QRdURdUVfUE/VEffGQaCB6Y398RGRVprEYgk3EUGwqmgl56RuslRiOrUUb0VY8JUbiCGwvWrlE8azoIMZgR/E3MRafF53FeOwiXhRdRTfRXbwkeojWrqfoJSZjb9FHTMO+op/oLwaImVhDfIBzctYUr4tkMUQMFW+IBfimGC7eEiPESDFKvC1Gi3fEGDFWjBPjRYqYICaKd8Uk8Z6YLKaIqWKaSBXTxQzxvpgpZonZ4gMxR3wo5op5Yr5YINLER2KhWCTSxcdisfhEZIglYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix1ip9gldotPxR7xmdgrPhf7xBdiv/hSHBBfiYPia5EpvhGHxLfisPhOHBHfi6PiB3FMHBcnxElxSvwoTosz4qw4J86Ln8QF8bO4KLwAiVJIKZUMZIzMIWNlTplLXiNzy+DSq3u9jJM3yLzyRplP5pcFZEEZLwvJwlJLI60kGcoisqiMyptkMXmzLC5LyJKylHSytEyQt8gy8lZZVt4my8nbZXl5h6wgK8pKsrK8U1aRd0mI/HqM6rKGrClryXtlbXmfrCPvl3XlA7KefFDWlw/JBvJh2VA+IhvJR2Vj+ZhsIh+XTWUz2Vy2kC3lE7KVfFK2lm1kW/mUbCeflu3lMzJRPis7SH/pLfK87CxfkF3ki7Kr7Ca7y5/lRellT9lLAvSWfeQrsq/sJ/vLAXKgfFUOkq/JwfJ1mSyHyKHyDTlMvimHy7fkCDlSjpJvy9HyHTlGjpXj5HiZIifIifJdOUm+JyfLKXKqnCZT5XTZ/9JIs6X8p/nv/kH+4F+OvklullvkVrlNbpc75E65S+6Wu+UeuUfulXvlPrlP7pf75QF5QB6UB2WmzJSH5CF5WB6WR+QReVQelcfkcXlOnpSn5I/ytDwjz8hz8rw8Ly9ceg1AoRJKKqUCFaNyqFiVU+VS16jc6lqVR12nIup6FaduUHnVjSqfyq8KqIIqXhVShZVWRllFKlRFVFEVVTfhpTeMKqlKKadKqwR1y7+Sr4qpm1VxVeI3+Zfnl/Qn82upWqpWqpVqrVqrtqqtaqfaqfaqvUpUiaqD6qA6qo6qk+qkOqvOqovqorqqrqq76q56qB6qp+qpklSS6qNeUX1VP9VfDVAD1atqkBqkBqvBKlklq6FqqBqmhqnhargaoUaoUWqUGq1GqzFqjBqnxqkUlaImqolqkpqkJqvJaqqaqlJVqpqhZqiZaqaarWarOWqOmqvmqvlqvkpTaWqhWqjSVbparBarDLVELVHL1DK1Qq1Qq9QqtUatUevUOrVBbVAZarParLaqrWq72q52qp1qt9qt9qg9aq/aq/apfWq/2q8OqAPqoDqoMlWmOqQOqcPqsDqijqij6qg6po6pE+qEOqVOqdPqtDqrzqrz6ry6oC6oi+pi1rIvEIEIVKCCmCAmiA1ig1xBriB3kDvIE+QJIkEkiAvigrzBjUG+IH9QICgYxAeFgsKBDkxgA3Gp6NHgpqBYcHNQPCgRlAxKBS4oHSQEtwRlgluDssFtQbng9qB8cEdQIagYVAoqB3cGVYK7gqrB3UG14J6gelAjqBnUCu4Nagf3BXWC+4O6wQNBveDBoH7wUNAgeDhoGDwSNAoeDRoHjwVNgseDpkGzoHnQImj5l47v/en8T7qeupdO0r11H/2K7qv76f56gB6oX9WD9Gt6sH5dJ+sheqh+Qw/Tb+rh+i09Qo/Uo/TberR+R4/RY/U4PV6n6Al6on5XT9Lv6cl6ip6qp+lUPV3P0O/rmXqWnq0/0HP0h3qunqfn6wU6TX+kF+pFOl1/rBfrT3SGXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoXfqXXq3/lTv0Z/pvfpzvU9/offrL/UB/ZU+qL/WmfobfUh/qw/r7/QR/b0+qn/Qx/RxfUKf1Kf0j/q0PqPP6nP6vP5JX9A/64vaZy3us37ejTLKxJgYE2tiTS6Ty+Q2uU0ek8dETMTEmTiT1+Q1+Uw+U8AUMPEm3hQ2hU0WMmSKmCImaqKmmClmipvipqQpaZxxJsEkmDKmjClryppyppwpb8qbCqaCqWQqmTvNneYuc5e529xt7jH3mBqmhqllapnaprapY+qYuqauqWfqmfqmvmlgGpiGpqFpZBqZxqaxaWKamKamqWlumpuWpqVpZVqZ1qa1aWvamnamnWlv2ptEk2g6mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJskkmT6mj+lr+pr+pr8ZaAaaQWaQGWwGm2STbIaaoWaYGWaGm+FmhBlpRmUtVM07ZowZa8aZ8SbFpJiJZqKZZCaZyWaymWqmmlSTamaYGWammWlmm9lmjplj5pq5Zr6Zb9JMmlloFpp0k24Wm8Umw2SYpWapWW6Wm5VmpVltVpu1Zq1ZD+vNRrPRbDabzVaz1Ww3281Os9PsNrvNHrPH7DV7zT6zz+w3+80Bc8AcNAdNpsk0h8whc9gcNkfMEXPUHDXHzDFzwpwwp8wpc9qcNmfNWXPe5L/0e+lNrM1pc9lrbG57rc1jr7P/GBewBW28LWQLW23z2fy/iY21trgtYUvaUtbZ0jbB3vK7uIKtaCvZyvZOW8XeZav+Lq5t77N17P22rn3A1rL3/iauZx+09e1jtgEigG1mG9kWtrF9zDaxj9umtpltblvYdvZp294+YxPts7aDfe538UK7yK62a+xau87usZ/Zs/acPWy/s+ftT7an7WUH2lftIPuaHWxft8l2yO/iUfZtO9q+Y8fYsXacHf+7eKqdZlPtdDvDvm9n2lm/i9PsR3aOTbdz7Tw73y74Jc6aU7r92C62n9gMu8QutcvscrvCrrSr/u9cl9kNdqPdZHfbT+1Wu81utzvsTrvrlzjrPPbaz+0++4U9ZL+1B+xX9qA9YjPtN7/EWed3xH5vj9of7DF73J6wJ+0p+6M9bc/8cv5Z537S/mwvWm+BkIAkKQoohnJQLOWkXHQN5aZrKQ9dRxG6nuLoBspLN1I+yk8FqCDFUyEqTJoMWSIKqQgVpSjdRJfX6SWpFDkqTQl0C5WhW6ks3Ubl6HYqT3dQBapIlagy3UlV6C6qSndTNbqHqlMNqkm16F6qTfdRHbqf6tIDVI8epPr0EDWgh6khPUKN6FFqTI9RE3qcmlIzak4tqCU9Qa3oSWpNbagtPUXt6GlqT89QIj1LHeg56kh/o070PHWmF6gLvUhdqRt1p5eoB71MPakXJVFv6kOvUF/qR/1pAA2kV2kQvUaD6XVKpiE0lN6gYfQmDae3aASNpFH0No2md2gMjaVxNJ5SaAJNpHdpEr1Hk2kKTaVplErTaQa9TzNpFs2mD2gOfUhzaR7NpwWURh/RQlpE6fQxLaZPKIOW0FJaRstpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG22kH7aRdtJs+pT30Ge2lz2kffUH76Us6QF/RQfqaMukbOkTf0mH6jo7Q974X/UDH6DidoJN0in6k03SGztI5Ok8/0QX6mS6SJwgxFKEMVRiEMWGOMDbMGeYKrwlzh9eGecLrwkh4fRgX3hDmDW8M84X5wwJhwTA+LBQWDnVoQhtSGIZFwqJhNLwpLBbeHBYPS4Qlw1KhC0uHCeEtYZnw1rBseFtYLrw9LB/eEVYIK4aPPVA5vDOsEt4VVg3vDquF94TVwxphzbBWeG9YO7wvrBPeH9YNHwjLhg+G9cOHwgbhw2HD8JGwUfho2Dh8LGwSPh42DZuFzcMWYcvwibBV+GTYOmwTtg2fCtuFT4ftw2fCxPDZsEP43C/9Dy768/6ksHfYJ3wlfCX0/n45P7ogmhb9KLowuiiaHv04ujj6STQjuiS6NLosujy6Iroyuiq6Oromuja6Lro+uiG6Mbop6n2tHODQCSedcoGLcTlcrMvpcrlrXG53rcvjrnMRd72Lcze4vO5Gl8/ldwVcQRfvCrnCTjvjrCMXuiKuqIu6m1wxd7Mr7kq4kq6Uc660S3AtXEvX0rVyT7rWro1r655yT7mn3dPuGfeMe9Z1cM+5ju5vrpN73nV2L7gX3Iuuq+vmuruXXA83Ic+vn8kk18f1cX1dX9ff9XcD3UA3yA1yg91gl+yS3VA31A1zw9xwN9yNcCPcKDfKjXaj3Rg3xo1z41yKS3ET3UQ3yU1yk91kN9VNdaku1c1wM9xMN9NVmfXrUea6uW6+m+/SXJpb6LLWjOlusVvsMlyGW+qWuuVuuVvpVrrVbrVb69a69W692+g2us1us9vqtrrtbrvb6Xa63W632+Ov+3VQt8/td/vdAXfAHXRfu0z3jTvkvnWH3XfuiPveHXU/uGPuuDvhTrpT7kd32p1xZ905d9795C64n91F511KZEJkYuTdyKTIe5HJkSmRqZFpkdTI9MiMyPuRmZFZkdmRDyJzIh9G5kbmReZHFkTSIh9FFkYWRdIjH0cWRz6JZESWRJZGlkWWR1ZEvC+0NfRFfFEf9Tf5Yv5mX9yX8CV9Ke98aZ/gb/Fl/K2+rL/Nl/O3+/L+Dl/BV/SV/OO+qW/mm/sWvqV/wrfyT/rWvo1v65/y7fzTvr1/xif6Z30H/5zv6P/mO/nnfWf/gu/iX/RdfTff3b/ke/iXfU/fyyf53r6Pf8X39f18fz/AD/Sv+kH+NT/Yv+6T/RA/1L/hh/k3/XD/lh/hR/pRMW/70ZcvkWG8T/ET/ET/rp/k3/OT/RQ/1U/zqX66n+Hf9zP9LD/bf+Dn+A/9XD/Pz/cLfJr/yC/0i3y6/9gv9p/4DL/k8k1lv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dr/T7/K7/ad+j//M7/Wf+33+C7/ff+kP+K/8C/5rn+m/8Yf8t/6w/84f8d/7o/4Hf8wf9yf8SX/K/+hP+zP+rD/nz/uf/AX/s7/I/2aNMcYYY+y/ZMKVpvij/t5/8Jz4u537AMC12wpm/n1/1opyfb5f2/1EfLsIADzbq8sjl7fq1ZOSki7tmyEhKDoP4PKfBGWJgSvxEmgLT0MitIEyfzj/fqLbefon40dvB8j1dzmxcCW+Mv6XfzL+E0+NWlg+PBv3/xh/HkDxoldycsKVeAm0VVmPbaDsn4yfv9U/mX/Or1IAWv9dTm64El+ZfwI8Cc9B4m/2ZIwxxhhjjDHGftVPVOp0+frz8t/4/KPr83h1JScHXIn/2fU5Y4wxxhhjjDHGrr7nu3V/5onExDad/vVG1f9WFjf+pza8B7j8jAKAf3NAgP/4WWz5jxwr+dJH5x+7lp/zAfzPKOVf0bjKX0yMMcYYY4yxv9yVRf9vn1dXa0KMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg29J/478Su9jkyxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9v/CQAA//+pXg2m") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="203111000000084677358e2e8e08003bc867a6deeb75cd774250ba05ea91740a0100e69e5c3460acbc9a351a96fbf0e889169e2596fa160211a521ff0700000000000000a0ea431b0edda831a4b7a09361a55614c53d2a094314bfda0374e8"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0xfffffffffffffffe, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, &(0x7f0000000100)}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 468ba [ 364.056429][ T6971] Code: 90 8b 45 04 ba 03 00 00 00 c1 e0 04 03 45 64 39 c6 48 0f 42 f0 45 31 c9 31 ff e8 a1 f4 13 00 8b 75 00 ba 03 00 00 00 45 89 e0 <49> 89 45 00 41 b9 00 00 00 10 b9 01 80 00 00 31 ff c1 e6 06 e8 7d [ 364.076368][ T6971] RSP: 002b:00007fc30d92cfd0 EFLAGS: 00010217 [ 364.082742][ T6971] RAX: ffffffffffffffff RBX: 00007fc30cd75fa0 RCX: 00007fc30cb85d63 [ 364.088776][ T5793] Bluetooth: hci3: command tx timeout [ 364.090885][ T6971] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.104592][ T6971] RBP: 0000000020000780 R08: 00000000ffffffff R09: 0000000000000000 [ 364.112834][ T6971] R10: 0000000000008001 R11: 0000000000000246 R12: ffffffffffffffff [ 364.121065][ T6971] R13: 0000000000000000 R14: 000000000000016e R15: 0000000000000000 [ 364.129306][ T6971] [ 364.136425][ T6652] syz-executor: attempt to access beyond end of device [ 364.136425][ T6652] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 364.151046][ T6652] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 364.197813][ T3625] team0 (unregistering): Port device team_slave_1 removed [ 364.222688][ T3625] team0 (unregistering): Port device team_slave_0 removed [ 364.650790][ T6966] netlink: 132 bytes leftover after parsing attributes in process `syz.0.240'. [ 365.960740][ T6989] loop0: detected capacity change from 0 to 256 [ 366.717664][ T6993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 366.763150][ T5840] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 366.793500][ T6920] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.801984][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.810378][ T6920] bridge_slave_0: entered allmulticast mode [ 366.824699][ T6920] bridge_slave_0: entered promiscuous mode [ 366.875776][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 366.947266][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.955350][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.963227][ T6920] bridge_slave_1: entered allmulticast mode [ 366.972465][ T6920] bridge_slave_1: entered promiscuous mode [ 367.019981][ T5840] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 367.032674][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.042252][ T5840] usb 1-1: Product: syz [ 367.046953][ T5840] usb 1-1: Manufacturer: syz [ 367.051816][ T5840] usb 1-1: SerialNumber: syz [ 367.096621][ T5840] usb 1-1: config 0 descriptor?? [ 367.194386][ T6993] atomic_op ffff8880124f6928 conn xmit_atomic 0000000000000000 [ 367.396063][ T5840] hso 1-1:0.0: Failed to find INT IN ep [ 367.403604][ T5840] usb-storage 1-1:0.0: USB Mass Storage device detected [ 367.624720][ T6920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.777729][ T6920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.800864][ T6025] udevd[6025]: failed to send result of seq 12616 to main daemon: Connection refused [ 368.104154][ T6920] team0: Port device team_slave_0 added [ 368.172979][ T6920] team0: Port device team_slave_1 added [ 368.315469][ T7005] loop5: detected capacity change from 0 to 4096 [ 368.383478][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.391091][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.417908][ T6920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.449214][ T7005] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 368.451485][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.472425][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.498982][ T6920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.726092][ T6920] hsr_slave_0: entered promiscuous mode [ 368.776780][ T6920] hsr_slave_1: entered promiscuous mode [ 368.821088][ T6920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.829584][ T6920] Cannot create hsr debugfs directory [ 369.475332][ T7018] binder: BC_ATTEMPT_ACQUIRE not supported [ 369.484487][ T7018] binder: 7017:7018 ioctl c0306201 20000380 returned -22 [ 369.570478][ T44] usb 1-1: USB disconnect, device number 3 [ 370.068016][ T7026] netlink: 32 bytes leftover after parsing attributes in process `syz.5.251'. [ 370.476191][ T5838] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 370.887871][ T5838] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 370.899384][ T5838] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.911569][ T5838] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.226800][ T5838] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 371.236371][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.244960][ T5838] usb 4-1: Product: syz [ 371.249385][ T5838] usb 4-1: Manufacturer: syz [ 371.254306][ T5838] usb 4-1: SerialNumber: syz [ 371.903318][ T6920] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.398257][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 372.520530][ T6920] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.853326][ T6920] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.125462][ T6920] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.142809][ T6920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.185375][ T6920] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.302260][ T6920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 374.313070][ T6920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.415979][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.423669][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.439145][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.446937][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.996682][ T5838] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 375.189184][ T5838] usb 4-1: USB disconnect, device number 8 [ 375.992340][ T7024] Set syz1 is full, maxelem 65536 reached [ 376.056770][ T7058] syz.0.257 uses obsolete (PF_INET,SOCK_PACKET) [ 376.333435][ T5839] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 376.475071][ T5839] usb 3-1: device descriptor read/64, error -71 [ 376.784249][ T5839] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 376.838385][ T6920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.857177][ T5838] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 376.927634][ T7070] loop3: detected capacity change from 0 to 256 [ 376.996141][ T6920] veth0_vlan: entered promiscuous mode [ 377.054446][ T5838] usb 6-1: Using ep0 maxpacket: 8 [ 377.075293][ T5839] usb 3-1: device descriptor read/64, error -71 [ 377.092946][ T6920] veth1_vlan: entered promiscuous mode [ 377.122955][ T5838] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 377.133690][ T5838] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 377.186577][ T5839] usb usb3-port1: attempt power cycle [ 377.209636][ T5838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.219529][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.228019][ T5838] usb 6-1: Product: ј [ 377.232337][ T5838] usb 6-1: Manufacturer: 輩읃ᶔ뗡菧芹퐓﹏㳂캗ꯃ㲐蠼욗氢䅏ိ䄗︍嵲옂ꕶꈻ鮎ꝉ癌컯৚珱퉷읹ꥻꐱ梓谁ΰ져칖ⴶⰬꩾ㝎䗠ᮧ꫿虠貄ꋏ옄꒐蔳 [ 377.252329][ T5838] usb 6-1: SerialNumber: 䍉扱탔渶亹⌦﷧큔䢹ꖓ✣၃쉎阔鋀괷풨᤬㍼緾胶ﻓ﮽ꇱ⒤꬐年鴭颷冁⒋霞㐘닲톇伝쬹૰т⃃叧鵱ผ⣱묮옅雧銭核븸렷‿䋞ன⮚꜃ꀺ鋑ࢠ鶋໧韀ẛțꝒ [ 377.425933][ T6920] veth0_macvtap: entered promiscuous mode [ 377.444291][ T44] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 377.477089][ T6920] veth1_macvtap: entered promiscuous mode [ 377.557189][ T5839] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 377.612715][ T5839] usb 3-1: device descriptor read/8, error -71 [ 377.687731][ T44] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 377.697378][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.706490][ T44] usb 4-1: Product: syz [ 377.711065][ T44] usb 4-1: Manufacturer: syz [ 377.716203][ T44] usb 4-1: SerialNumber: syz [ 377.727968][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.739735][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.751297][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.762740][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.772868][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.788117][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.800017][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.810853][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.825803][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.862601][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.873965][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.888041][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.900024][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.910350][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.921253][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.929222][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.5.260'. [ 377.931515][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.940562][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.5.260'. [ 377.983443][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.009699][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.039213][ T44] usb 4-1: config 0 descriptor?? [ 378.059709][ T5839] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 378.094862][ T5839] usb 3-1: device descriptor read/8, error -71 [ 378.173121][ T6920] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.182432][ T6920] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.196471][ T6920] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.207050][ T6920] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.227499][ T5839] usb usb3-port1: unable to enumerate USB device [ 378.276985][ T7066] dummy0: entered promiscuous mode [ 378.279858][ T44] hso 4-1:0.0: Failed to find INT IN ep [ 378.296494][ T44] usb-storage 4-1:0.0: USB Mass Storage device detected [ 378.377862][ T7066] batadv_slave_1: entered promiscuous mode [ 378.484800][ T7066] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 378.496643][ T7066] Cannot create hsr debugfs directory [ 378.621113][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.5.260'. [ 378.632084][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.5.260'. [ 378.898659][ T5838] cdc_ncm 6-1:1.0: bind() failure [ 378.925539][ T5838] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 378.932695][ T5838] cdc_ncm 6-1:1.1: bind() failure [ 379.075196][ T5838] usb 6-1: USB disconnect, device number 2 [ 380.098651][ T44] usb 4-1: USB disconnect, device number 9 [ 380.186166][ T7095] loop5: detected capacity change from 0 to 128 [ 380.348841][ T7095] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 380.421655][ T7101] loop3: detected capacity change from 0 to 64 [ 380.477242][ T7095] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 381.220827][ T7095] sysv_count_free_inodes: unable to read inode table [ 381.376316][ T5839] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 381.474839][ T6652] sysv_free_block: trying to free block not in datazone [ 381.516908][ T6652] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 381.589945][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.601474][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.612117][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.625670][ T5839] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.635208][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.796431][ T5839] usb 3-1: config 0 descriptor?? [ 382.027661][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 382.037735][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.266'. [ 382.094026][ T7119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.101509][ T7119] IPv6: NLM_F_CREATE should be set when creating new route [ 382.159809][ T5839] usbhid 3-1:0.0: can't add hid device: -71 [ 382.168184][ T5839] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 382.214568][ T7119] netlink: 'syz.5.269': attribute type 27 has an invalid length. [ 382.250198][ T5839] usb 3-1: USB disconnect, device number 14 [ 382.962308][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.972138][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.036054][ T7129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.270'. [ 383.705268][ T7119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.772811][ T7119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.784403][ T5840] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 383.980077][ T5840] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 383.989993][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.053694][ T5840] usb 1-1: config 0 descriptor?? [ 384.371174][ T7135] loop0: detected capacity change from 0 to 1024 [ 384.402914][ T7119] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.413581][ T7119] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.422964][ T7119] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.436475][ T7119] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.600719][ T5840] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 384.611166][ T5840] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 384.686459][ T5840] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 384.693548][ T5840] [drm] Initialized udl on minor 2 [ 384.731025][ T5840] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 384.742969][ T5840] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 384.962636][ T7149] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 384.972637][ T5838] IPVS: starting estimator thread 0... [ 385.064778][ T7151] IPVS: using max 240 ests per chain, 12000 per kthread [ 385.079111][ T4102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.207362][ T4102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.417825][ T5839] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 385.428616][ T4102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.428857][ T5840] usb 1-1: USB disconnect, device number 4 [ 385.456046][ T5839] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 385.467385][ T5839] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 385.637006][ T4102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.089992][ T4102] bridge_slave_1: left allmulticast mode [ 386.096362][ T4102] bridge_slave_1: left promiscuous mode [ 386.103010][ T4102] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.145923][ T7156] loop5: detected capacity change from 0 to 4096 [ 386.165175][ T4102] bridge_slave_0: left allmulticast mode [ 386.174577][ T4102] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.198731][ T7156] ntfs3(loop5): It is recommened to use chkdsk. [ 386.238915][ T7156] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 386.247399][ T7156] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 386.255796][ T7156] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 386.264234][ T7156] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 386.272426][ T7156] ntfs3(loop5): try to read out of volume at offset 0x3fffffc1c00 [ 386.284547][ T7156] ntfs3(loop5): try to read out of volume at offset 0x3fffffc2c00 [ 386.292748][ T7156] ntfs3(loop5): try to read out of volume at offset 0x3fffffc4c00 [ 386.302310][ T7156] ntfs3(loop5): try to read out of volume at offset 0x3fffffc8c00 [ 386.310660][ T7156] ntfs3(loop5): try to read out of volume at offset 0x3fffffd0c00 [ 386.494746][ T7156] FAULT_INJECTION: forcing a failure. [ 386.494746][ T7156] name failslab, interval 1, probability 0, space 0, times 0 [ 386.507962][ T7156] CPU: 1 UID: 0 PID: 7156 Comm: syz.5.275 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 386.518867][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 386.529169][ T7156] Call Trace: [ 386.532647][ T7156] [ 386.535787][ T7156] dump_stack_lvl+0x216/0x2d0 [ 386.540784][ T7156] dump_stack+0x1e/0x24 [ 386.545244][ T7156] should_fail_ex+0x748/0x7f0 [ 386.550240][ T7156] should_failslab+0x17f/0x210 [ 386.555306][ T7156] kmem_cache_alloc_noprof+0xee/0xe10 [ 386.561020][ T7156] ? getname_flags+0x102/0xa30 [ 386.566102][ T7156] ? kmsan_get_metadata+0x13e/0x1c0 [ 386.571603][ T7156] getname_flags+0x102/0xa30 [ 386.576497][ T7156] getname+0x30/0x40 [ 386.580675][ T7156] do_sys_openat2+0xc3/0x2f0 [ 386.585570][ T7156] __x64_sys_open+0x275/0x2d0 [ 386.590553][ T7156] x64_sys_call+0x16d3/0x3c30 [ 386.595554][ T7156] do_syscall_64+0xcd/0x1e0 [ 386.600306][ T7156] ? clear_bhb_loop+0x25/0x80 [ 386.605282][ T7156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.611475][ T7156] RIP: 0033:0x7fa3bd185d29 [ 386.616127][ T7156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.636015][ T7156] RSP: 002b:00007fa3bdf27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 386.644717][ T7156] RAX: ffffffffffffffda RBX: 00007fa3bd375fa0 RCX: 00007fa3bd185d29 [ 386.652922][ T7156] RDX: 0000000000000000 RSI: 0000000000040800 RDI: 000000002001fa40 [ 386.661118][ T7156] RBP: 00007fa3bdf27090 R08: 0000000000000000 R09: 0000000000000000 [ 386.669312][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.677500][ T7156] R13: 0000000000000000 R14: 00007fa3bd375fa0 R15: 00007ffe05e980c8 [ 386.685725][ T7156] [ 387.031699][ T4102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.121335][ T4102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.185480][ T4102] bond0 (unregistering): Released all slaves [ 387.811410][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.820852][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.830214][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.843690][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.855359][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 387.884546][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.175960][ T7182] loop0: detected capacity change from 0 to 64 [ 388.489613][ T4041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.498547][ T4041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.802812][ T7189] netlink: 32 bytes leftover after parsing attributes in process `syz.5.281'. [ 388.864975][ T4102] team0: left promiscuous mode [ 388.870076][ T4102] team_slave_0: left promiscuous mode [ 388.878745][ T4102] team_slave_1: left promiscuous mode [ 388.910694][ T4102] batadv_slave_1: left promiscuous mode [ 388.979181][ T4102] hsr_slave_0: left promiscuous mode [ 389.047395][ T4102] hsr_slave_1: left promiscuous mode [ 389.076713][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.084786][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.137997][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.149468][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.220546][ T4102] veth1_macvtap: left promiscuous mode [ 389.229124][ T4102] veth0_macvtap: left promiscuous mode [ 389.235397][ T4102] veth1_vlan: left promiscuous mode [ 389.240964][ T4102] veth0_vlan: left promiscuous mode [ 389.689276][ T7199] loop0: detected capacity change from 0 to 256 [ 389.984485][ T5788] Bluetooth: hci4: command tx timeout [ 390.019032][ T4102] team0 (unregistering): Port device team_slave_1 removed [ 390.027080][ T7199] FAT-fs (loop0): Directory bread(block 64) failed [ 390.027226][ T7199] FAT-fs (loop0): Directory bread(block 65) failed [ 390.027478][ T7199] FAT-fs (loop0): Directory bread(block 66) failed [ 390.027601][ T7199] FAT-fs (loop0): Directory bread(block 67) failed [ 390.027840][ T7199] FAT-fs (loop0): Directory bread(block 68) failed [ 390.027962][ T7199] FAT-fs (loop0): Directory bread(block 69) failed [ 390.077781][ T7199] FAT-fs (loop0): Directory bread(block 70) failed [ 390.086069][ T7199] FAT-fs (loop0): Directory bread(block 71) failed [ 390.093020][ T7199] FAT-fs (loop0): Directory bread(block 72) failed [ 390.101099][ T7199] FAT-fs (loop0): Directory bread(block 73) failed [ 390.209406][ T4102] team0 (unregistering): Port device team_slave_0 removed [ 390.451066][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.459280][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.768555][ T7172] chnl_net:caif_netlink_parms(): no params data found [ 390.961320][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 391.108302][ T7212] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 391.115676][ T7212] overlayfs: failed to set xattr on upper [ 391.121643][ T7212] overlayfs: ...falling back to redirect_dir=nofollow. [ 391.128779][ T7212] overlayfs: ...falling back to xino=off. [ 391.135385][ T7212] overlayfs: maximum fs stacking depth exceeded [ 391.250518][ T7207] dummy0: entered promiscuous mode [ 391.503074][ T7207] dummy0: left promiscuous mode [ 392.096993][ T5788] Bluetooth: hci4: command tx timeout [ 393.121919][ T7219] loop5: detected capacity change from 0 to 64 [ 393.525814][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.535255][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 393.546163][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 393.559660][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 393.587703][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 393.597429][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 393.887242][ T7228] FAULT_INJECTION: forcing a failure. [ 393.887242][ T7228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.900921][ T7228] CPU: 1 UID: 0 PID: 7228 Comm: syz.5.290 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 393.911821][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 393.922128][ T7228] Call Trace: [ 393.925604][ T7228] [ 393.928733][ T7228] dump_stack_lvl+0x216/0x2d0 [ 393.933720][ T7228] dump_stack+0x1e/0x24 [ 393.938176][ T7228] should_fail_ex+0x748/0x7f0 [ 393.943157][ T7228] should_fail+0x2a/0x40 [ 393.947675][ T7228] should_fail_usercopy+0x2e/0x40 [ 393.952995][ T7228] _copy_to_user+0x34/0x120 [ 393.957801][ T7228] simple_read_from_buffer+0x199/0x340 [ 393.963578][ T7228] proc_fail_nth_read+0x1e5/0x2c0 [ 393.968877][ T7228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.974691][ T7228] vfs_read+0x29d/0xf50 [ 393.979136][ T7228] ? stack_depot_save_flags+0x2c/0x750 [ 393.984881][ T7228] ? kmsan_get_metadata+0x13e/0x1c0 [ 393.990344][ T7228] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 393.996992][ T7228] ksys_read+0x240/0x4b0 [ 394.001518][ T7228] ? kmsan_get_metadata+0x13e/0x1c0 [ 394.006980][ T7228] __x64_sys_read+0x93/0xe0 [ 394.011776][ T7228] x64_sys_call+0x314c/0x3c30 [ 394.016797][ T7228] do_syscall_64+0xcd/0x1e0 [ 394.021574][ T7228] ? clear_bhb_loop+0x25/0x80 [ 394.026556][ T7228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.032753][ T7228] RIP: 0033:0x7fa3bd18473c [ 394.037401][ T7228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 394.057298][ T7228] RSP: 002b:00007fa3bdf27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 394.066009][ T7228] RAX: ffffffffffffffda RBX: 00007fa3bd375fa0 RCX: 00007fa3bd18473c [ 394.074228][ T7228] RDX: 000000000000000f RSI: 00007fa3bdf270a0 RDI: 0000000000000004 [ 394.082466][ T7228] RBP: 00007fa3bdf27090 R08: 0000000000000000 R09: 0000000000000000 [ 394.090676][ T7228] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 394.098873][ T7228] R13: 0000000000000000 R14: 00007fa3bd375fa0 R15: 00007ffe05e980c8 [ 394.107186][ T7228] [ 394.147685][ T4102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.204340][ T5793] Bluetooth: hci4: command tx timeout [ 394.413552][ T4102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.744291][ T4102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.778847][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.789211][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.797308][ T7172] bridge_slave_0: entered allmulticast mode [ 394.806724][ T7172] bridge_slave_0: entered promiscuous mode [ 394.884084][ T44] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 394.936451][ T4102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.966392][ T7239] netlink: 32 bytes leftover after parsing attributes in process `syz.5.292'. [ 395.031850][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.039896][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.047872][ T7172] bridge_slave_1: entered allmulticast mode [ 395.056976][ T7172] bridge_slave_1: entered promiscuous mode [ 395.126931][ T44] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 395.136573][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.166602][ T44] usb 3-1: config 0 descriptor?? [ 395.451296][ T7250] loop0: detected capacity change from 0 to 64 [ 395.522867][ T7252] FAULT_INJECTION: forcing a failure. [ 395.522867][ T7252] name failslab, interval 1, probability 0, space 0, times 0 [ 395.536406][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: syz.5.294 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 395.547315][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.557626][ T7252] Call Trace: [ 395.561100][ T7252] [ 395.564234][ T7252] dump_stack_lvl+0x216/0x2d0 [ 395.569246][ T7252] dump_stack+0x1e/0x24 [ 395.573714][ T7252] should_fail_ex+0x748/0x7f0 [ 395.578725][ T7252] should_failslab+0x17f/0x210 [ 395.583793][ T7252] __kmalloc_noprof+0x176/0x1230 [ 395.589060][ T7252] ? kfree+0x20/0xdb0 [ 395.593334][ T7252] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 395.599453][ T7252] ? tomoyo_realpath_from_path+0x104/0xaa0 [ 395.605613][ T7252] ? kmsan_get_metadata+0x13e/0x1c0 [ 395.611131][ T7252] tomoyo_realpath_from_path+0x104/0xaa0 [ 395.617135][ T7252] ? __srcu_read_lock+0x76/0xd0 [ 395.622280][ T7252] tomoyo_path_number_perm+0x1d9/0x8f0 [ 395.628072][ T7252] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 395.634792][ T7252] ? kmsan_get_metadata+0x13e/0x1c0 [ 395.640299][ T7252] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 395.646443][ T7252] tomoyo_file_ioctl+0x3f/0x50 [ 395.651499][ T7252] security_file_ioctl+0x145/0x590 [ 395.656926][ T7252] __se_sys_ioctl+0xd0/0x440 [ 395.661845][ T7252] __x64_sys_ioctl+0x96/0xe0 [ 395.666749][ T7252] x64_sys_call+0x19f0/0x3c30 [ 395.671755][ T7252] do_syscall_64+0xcd/0x1e0 [ 395.676547][ T7252] ? clear_bhb_loop+0x25/0x80 [ 395.681546][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.687770][ T7252] RIP: 0033:0x7fa3bd185d29 [ 395.692436][ T7252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.712450][ T7252] RSP: 002b:00007fa3bdf27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.721203][ T7252] RAX: ffffffffffffffda RBX: 00007fa3bd375fa0 RCX: 00007fa3bd185d29 [ 395.729461][ T7252] RDX: 0000000000000003 RSI: 0000000000001260 RDI: 0000000000000003 [ 395.737791][ T7252] RBP: 00007fa3bdf27090 R08: 0000000000000000 R09: 0000000000000000 [ 395.746034][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.754260][ T7252] R13: 0000000000000000 R14: 00007fa3bd375fa0 R15: 00007ffe05e980c8 [ 395.762518][ T7252] [ 395.766690][ T5793] Bluetooth: hci3: command tx timeout [ 395.767925][ T7252] ERROR: Out of memory at tomoyo_realpath_from_path. [ 395.807756][ T7172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.005601][ T7172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.041763][ T44] ath6kl: Failed to submit usb control message: -71 [ 396.049541][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 396.057285][ T44] ath6kl: Unable to send get target info: -71 [ 396.136999][ T4102] bridge_slave_1: left allmulticast mode [ 396.142911][ T4102] bridge_slave_1: left promiscuous mode [ 396.147928][ T44] ath6kl: Failed to init ath6kl core: -71 [ 396.149548][ T4102] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.159739][ T44] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 396.183513][ T4102] bridge_slave_0: left allmulticast mode [ 396.189915][ T4102] bridge_slave_0: left promiscuous mode [ 396.196621][ T4102] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.254054][ T44] usb 3-1: USB disconnect, device number 15 [ 396.348078][ T5793] Bluetooth: hci4: command tx timeout [ 396.753438][ T4102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.799092][ T4102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.847749][ T4102] bond0 (unregistering): Released all slaves [ 397.079968][ T7221] chnl_net:caif_netlink_parms(): no params data found [ 397.194903][ T7172] team0: Port device team_slave_0 added [ 397.246733][ T7172] team0: Port device team_slave_1 added [ 397.425560][ T7271] FAULT_INJECTION: forcing a failure. [ 397.425560][ T7271] name failslab, interval 1, probability 0, space 0, times 0 [ 397.440811][ T7271] CPU: 0 UID: 0 PID: 7271 Comm: syz.2.297 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 397.451748][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.462060][ T7271] Call Trace: [ 397.465547][ T7271] [ 397.468684][ T7271] dump_stack_lvl+0x216/0x2d0 [ 397.473698][ T7271] dump_stack+0x1e/0x24 [ 397.478172][ T7271] should_fail_ex+0x748/0x7f0 [ 397.483184][ T7271] should_failslab+0x17f/0x210 [ 397.488252][ T7271] __kmalloc_noprof+0x176/0x1230 [ 397.493523][ T7271] ? kmsan_get_metadata+0x13e/0x1c0 [ 397.499107][ T7271] ? tomoyo_encode+0x5f8/0xa40 [ 397.504238][ T7271] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.510468][ T7271] ? kmsan_get_metadata+0x13e/0x1c0 [ 397.515973][ T7271] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.522098][ T7271] tomoyo_encode+0x5f8/0xa40 [ 397.527052][ T7271] tomoyo_realpath_from_path+0x9dd/0xaa0 [ 397.533072][ T7271] tomoyo_path_number_perm+0x1d9/0x8f0 [ 397.538869][ T7271] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 397.545300][ T7271] ? kmsan_get_metadata+0x13e/0x1c0 [ 397.550800][ T7271] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.556954][ T7271] tomoyo_file_ioctl+0x3f/0x50 [ 397.562012][ T7271] security_file_ioctl+0x145/0x590 [ 397.567444][ T7271] __se_sys_ioctl+0xd0/0x440 [ 397.572368][ T7271] __x64_sys_ioctl+0x96/0xe0 [ 397.577284][ T7271] x64_sys_call+0x19f0/0x3c30 [ 397.582290][ T7271] do_syscall_64+0xcd/0x1e0 [ 397.587160][ T7271] ? clear_bhb_loop+0x25/0x80 [ 397.592175][ T7271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.598408][ T7271] RIP: 0033:0x7f9ff0785d29 [ 397.603082][ T7271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.623014][ T7271] RSP: 002b:00007f9ff14e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.631757][ T7271] RAX: ffffffffffffffda RBX: 00007f9ff0975fa0 RCX: 00007f9ff0785d29 [ 397.640016][ T7271] RDX: 0000000020000680 RSI: 00000000c0306201 RDI: 0000000000000005 [ 397.648260][ T7271] RBP: 00007f9ff14e8090 R08: 0000000000000000 R09: 0000000000000000 [ 397.656494][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.664728][ T7271] R13: 0000000000000000 R14: 00007f9ff0975fa0 R15: 00007ffdee68f818 [ 397.672985][ T7271] [ 397.678978][ T7271] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.686958][ T7271] binder: 7270:7271 ioctl c0306201 20000680 returned -14 [ 397.785020][ T5793] Bluetooth: hci3: command tx timeout [ 398.147058][ T7281] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 398.169146][ T4102] hsr_slave_0: left promiscuous mode [ 398.201323][ T7281] capability: warning: `syz.2.299' uses 32-bit capabilities (legacy support in use) [ 398.224914][ T4102] hsr_slave_1: left promiscuous mode [ 398.260235][ T29] audit: type=1326 audit(1735792329.316:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.5.300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3bd185d29 code=0x0 [ 398.315713][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.323452][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.364194][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.371909][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.546650][ T4102] veth1_macvtap: left promiscuous mode [ 398.552648][ T4102] veth0_macvtap: left promiscuous mode [ 398.558816][ T4102] veth1_vlan: left promiscuous mode [ 398.565569][ T4102] veth0_vlan: left promiscuous mode [ 399.432927][ T4102] team0 (unregistering): Port device team_slave_1 removed [ 399.632954][ T4102] team0 (unregistering): Port device team_slave_0 removed [ 399.785560][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 399.864208][ T5788] Bluetooth: hci3: command tx timeout [ 399.872513][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.879863][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.885094][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 399.909174][ T7172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.932362][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.939722][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.966066][ T7172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.047787][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 400.116658][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 400.142535][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 400.147854][ T7293] binder: BINDER_SET_CONTEXT_MGR already set [ 400.151928][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 400.156434][ T7293] binder: 7292:7293 ioctl 4018620d 200002c0 returned -16 [ 400.364024][ T5840] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 400.368386][ T7172] hsr_slave_0: entered promiscuous mode [ 400.386392][ T7172] hsr_slave_1: entered promiscuous mode [ 400.400193][ T7172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.410104][ T7172] Cannot create hsr debugfs directory [ 400.461900][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.470007][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.477883][ T7221] bridge_slave_0: entered allmulticast mode [ 400.486896][ T7221] bridge_slave_0: entered promiscuous mode [ 400.569121][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.578841][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.586693][ T7221] bridge_slave_1: entered allmulticast mode [ 400.595519][ T7221] bridge_slave_1: entered promiscuous mode [ 400.677536][ T5840] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 400.687055][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.700009][ T5840] usb 3-1: config 0 descriptor?? [ 400.870962][ T7221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.947199][ T7221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.067549][ T4102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.159690][ T4102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.369635][ T7299] Unsupported ieee802154 address type: 0 [ 401.417397][ T7221] team0: Port device team_slave_0 added [ 401.483978][ T5840] ath6kl: Failed to submit usb control message: -71 [ 401.490967][ T5840] ath6kl: unable to send the bmi data to the device: -71 [ 401.498496][ T5840] ath6kl: Unable to send get target info: -71 [ 401.525246][ T7221] team0: Port device team_slave_1 added [ 401.542410][ T5840] ath6kl: Failed to init ath6kl core: -71 [ 401.553728][ T5840] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 401.573678][ T5840] usb 3-1: USB disconnect, device number 16 [ 401.577344][ T4102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.850511][ T4102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.880673][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.889342][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.916716][ T7221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.955067][ T5788] Bluetooth: hci3: command tx timeout [ 402.022469][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.030354][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.046069][ T7304] loop5: detected capacity change from 0 to 64 [ 402.059565][ T7221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.264132][ T5788] Bluetooth: hci0: command tx timeout [ 402.300972][ T7172] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 402.325564][ T7172] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 402.359658][ T7172] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 402.400321][ T29] audit: type=1326 audit(1735792333.456:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.2.308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0785d29 code=0x0 [ 402.462375][ T7172] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 402.487410][ T7312] FAULT_INJECTION: forcing a failure. [ 402.487410][ T7312] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 402.501193][ T7312] CPU: 1 UID: 0 PID: 7312 Comm: syz.2.308 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 402.512100][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 402.522443][ T7312] Call Trace: [ 402.525927][ T7312] [ 402.529062][ T7312] dump_stack_lvl+0x216/0x2d0 [ 402.534078][ T7312] dump_stack+0x1e/0x24 [ 402.538590][ T7312] should_fail_ex+0x748/0x7f0 [ 402.543608][ T7312] should_fail_alloc_page+0x235/0x2b0 [ 402.549301][ T7312] __alloc_pages_noprof+0x343/0xe00 [ 402.554849][ T7312] alloc_pages_mpol_noprof+0x299/0x990 [ 402.560623][ T7312] ? kmsan_get_metadata+0x13e/0x1c0 [ 402.566128][ T7312] vma_alloc_folio_noprof+0x454/0x7f0 [ 402.571834][ T7312] handle_mm_fault+0xa40e/0xdcc0 [ 402.577098][ T7312] ? mt_find+0x1663/0x1910 [ 402.581861][ T7312] exc_page_fault+0x29f/0x700 [ 402.586878][ T7312] asm_exc_page_fault+0x2b/0x30 [ 402.592055][ T7312] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 402.598201][ T7312] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 402.618129][ T7312] RSP: 0018:ffff88804d8f78b8 EFLAGS: 00050206 [ 402.624515][ T7312] RAX: 33320a3232310a31 RBX: 000000000000000e RCX: 000000000000000e [ 402.632753][ T7312] RDX: 000000004da98000 RSI: ffff88804da98000 RDI: 0000000020001740 [ 402.640998][ T7312] RBP: ffff88804d8f79f0 R08: ffffea000000000f R09: ffffffff862e38f8 [ 402.649249][ T7312] R10: 0000000000000006 R11: ffff888129508000 R12: 0000000000000000 [ 402.657491][ T7312] R13: 0000000000000000 R14: ffff88804d8f78c0 R15: 0000000000000000 [ 402.665729][ T7312] ? _copy_to_iter+0x168/0x2b30 [ 402.670896][ T7312] ? _copy_to_iter+0x321/0x2b30 [ 402.676052][ T7312] ? kmsan_get_metadata+0x13e/0x1c0 [ 402.681547][ T7312] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 402.688173][ T7312] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 402.694594][ T7312] ? kmsan_get_metadata+0x13e/0x1c0 [ 402.700058][ T7312] seq_read_iter+0x18b9/0x20e0 [ 402.705093][ T7312] ? __pfx_kernfs_seq_stop+0x10/0x10 [ 402.710703][ T7312] kernfs_fop_read_iter+0x1f0/0x990 [ 402.716213][ T7312] ? kmsan_get_metadata+0x13e/0x1c0 [ 402.721705][ T7312] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 402.728368][ T7312] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 402.734414][ T7312] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 402.740466][ T7312] do_iter_readv_writev+0x88a/0xa30 [ 402.745977][ T7312] ? kmsan_get_metadata+0x13e/0x1c0 [ 402.751438][ T7312] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 402.757499][ T7312] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 402.763566][ T7312] vfs_readv+0x366/0xee0 [ 402.768080][ T7312] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 402.774759][ T7312] ? kmsan_get_metadata+0x13e/0x1c0 [ 402.780243][ T7312] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 402.786365][ T7312] do_readv+0x247/0x5c0 [ 402.790830][ T7312] __x64_sys_readv+0x98/0xe0 [ 402.795753][ T7312] x64_sys_call+0x3917/0x3c30 [ 402.800756][ T7312] do_syscall_64+0xcd/0x1e0 [ 402.805543][ T7312] ? clear_bhb_loop+0x25/0x80 [ 402.810517][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.816651][ T7312] RIP: 0033:0x7f9ff0785d29 [ 402.821313][ T7312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.841248][ T7312] RSP: 002b:00007f9fee5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 402.850017][ T7312] RAX: ffffffffffffffda RBX: 00007f9ff0976080 RCX: 00007f9ff0785d29 [ 402.858278][ T7312] RDX: 0000000000000001 RSI: 0000000020000340 RDI: 0000000000000004 [ 402.866518][ T7312] RBP: 00007f9fee5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.874750][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.882974][ T7312] R13: 0000000000000001 R14: 00007f9ff0976080 R15: 00007ffdee68f818 [ 402.891238][ T7312] [ 403.097702][ T7221] hsr_slave_0: entered promiscuous mode [ 403.112347][ T7221] hsr_slave_1: entered promiscuous mode [ 403.122636][ T7221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.131010][ T7221] Cannot create hsr debugfs directory [ 403.519321][ T7288] chnl_net:caif_netlink_parms(): no params data found [ 403.543001][ T4102] bridge_slave_1: left allmulticast mode [ 403.578286][ T4102] bridge_slave_1: left promiscuous mode [ 403.587333][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.588215][ T4102] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.594356][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.627527][ T4102] bridge_slave_0: left allmulticast mode [ 403.634670][ T4102] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.978758][ T4102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.000684][ T4102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.014759][ T4102] bond0 (unregistering): Released all slaves [ 404.155357][ T7318] netlink: 76 bytes leftover after parsing attributes in process `syz.2.311'. [ 404.165561][ T7318] netlink: 76 bytes leftover after parsing attributes in process `syz.2.311'. [ 404.363634][ T5788] Bluetooth: hci0: command tx timeout [ 404.984231][ T4102] hsr_slave_0: left promiscuous mode [ 405.027572][ T4102] hsr_slave_1: left promiscuous mode [ 405.044219][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.051984][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.227057][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.234976][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.276297][ T4102] veth1_macvtap: left promiscuous mode [ 405.282093][ T4102] veth0_macvtap: left promiscuous mode [ 405.288294][ T4102] veth1_vlan: left promiscuous mode [ 405.293984][ T4102] veth0_vlan: left promiscuous mode [ 405.861782][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.878959][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.894206][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.054965][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.127085][ T4102] team0 (unregistering): Port device team_slave_1 removed [ 406.149933][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 406.182678][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.197000][ T4102] team0 (unregistering): Port device team_slave_0 removed [ 406.426643][ T5788] Bluetooth: hci0: command tx timeout [ 407.072352][ T7172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.164478][ T4102] IPVS: stop unused estimator thread 0... [ 407.297149][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.305090][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.312921][ T7288] bridge_slave_0: entered allmulticast mode [ 407.322038][ T7288] bridge_slave_0: entered promiscuous mode [ 407.446293][ T7221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.469394][ T7221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.494864][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.502629][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.511033][ T7288] bridge_slave_1: entered allmulticast mode [ 407.520175][ T7288] bridge_slave_1: entered promiscuous mode [ 407.559535][ T7221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 407.642144][ T7221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 407.882896][ T7172] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.913379][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.923305][ T5136] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 408.063183][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.153498][ T5136] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 408.157245][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.163069][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.179031][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.186333][ T5136] usb 3-1: config 0 descriptor?? [ 408.424621][ T5788] Bluetooth: hci2: command tx timeout [ 408.447755][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.455515][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.504087][ T5788] Bluetooth: hci0: command tx timeout [ 408.530868][ T7288] team0: Port device team_slave_0 added [ 408.572467][ T7335] chnl_net:caif_netlink_parms(): no params data found [ 408.687191][ T7288] team0: Port device team_slave_1 added [ 409.062747][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.070606][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.097194][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.276520][ T5136] ath6kl: Failed to submit usb control message: -71 [ 409.281745][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.283401][ T5136] ath6kl: unable to send the bmi data to the device: -71 [ 409.291162][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.291320][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.336453][ T5136] ath6kl: Unable to send get target info: -71 [ 409.371850][ T5136] ath6kl: Failed to init ath6kl core: -71 [ 409.385155][ T5136] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 409.427477][ T5136] usb 3-1: USB disconnect, device number 17 [ 409.544861][ T4102] bridge_slave_1: left allmulticast mode [ 409.550792][ T4102] bridge_slave_1: left promiscuous mode [ 409.557618][ T4102] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.623040][ T4102] bridge_slave_0: left allmulticast mode [ 409.629195][ T4102] bridge_slave_0: left promiscuous mode [ 409.637115][ T4102] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.976741][ T4102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.024669][ T4102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.042974][ T4102] bond0 (unregistering): Released all slaves [ 410.375086][ T7288] hsr_slave_0: entered promiscuous mode [ 410.402931][ T7288] hsr_slave_1: entered promiscuous mode [ 410.427560][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.318'. [ 410.448325][ T7288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.456295][ T7288] Cannot create hsr debugfs directory [ 410.504704][ T5788] Bluetooth: hci2: command tx timeout [ 410.742526][ T4102] dummy0: left promiscuous mode [ 410.752277][ T4102] batadv_slave_1: left promiscuous mode [ 410.807801][ T4102] hsr_slave_0: left promiscuous mode [ 410.818463][ T4102] hsr_slave_1: left promiscuous mode [ 410.840295][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.855164][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.198897][ T4102] team0 (unregistering): Port device team_slave_1 removed [ 411.228813][ T4102] team0 (unregistering): Port device team_slave_0 removed [ 411.471454][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.479429][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.489668][ T7335] bridge_slave_0: entered allmulticast mode [ 411.501845][ T7335] bridge_slave_0: entered promiscuous mode [ 411.541331][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.549156][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.557013][ T7335] bridge_slave_1: entered allmulticast mode [ 411.568506][ T7335] bridge_slave_1: entered promiscuous mode [ 411.680845][ T7375] FAULT_INJECTION: forcing a failure. [ 411.680845][ T7375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.695028][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.2.321 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 411.705932][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 411.716232][ T7375] Call Trace: [ 411.719703][ T7375] [ 411.722810][ T7375] dump_stack_lvl+0x216/0x2d0 [ 411.727796][ T7375] dump_stack+0x1e/0x24 [ 411.732225][ T7375] should_fail_ex+0x748/0x7f0 [ 411.737208][ T7375] should_fail+0x2a/0x40 [ 411.741723][ T7375] should_fail_usercopy+0x2e/0x40 [ 411.747042][ T7375] _copy_from_user+0x35/0x110 [ 411.751999][ T7375] ___sys_sendmsg+0x120/0x3c0 [ 411.756956][ T7375] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 411.763037][ T7375] ? __rcu_read_unlock+0x7b/0xe0 [ 411.768271][ T7375] ? __fget_files+0x42b/0x500 [ 411.773212][ T7375] ? kmsan_get_metadata+0x13e/0x1c0 [ 411.778683][ T7375] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 411.784760][ T7375] __x64_sys_sendmsg+0x212/0x3c0 [ 411.789977][ T7375] ? kmsan_get_metadata+0x13e/0x1c0 [ 411.795441][ T7375] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 411.801635][ T7375] ? kmsan_get_metadata+0x13e/0x1c0 [ 411.807193][ T7375] x64_sys_call+0x2ed6/0x3c30 [ 411.812182][ T7375] do_syscall_64+0xcd/0x1e0 [ 411.816933][ T7375] ? clear_bhb_loop+0x25/0x80 [ 411.821905][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.828093][ T7375] RIP: 0033:0x7f9ff0785d29 [ 411.832735][ T7375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.852632][ T7375] RSP: 002b:00007f9ff14e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.861335][ T7375] RAX: ffffffffffffffda RBX: 00007f9ff0975fa0 RCX: 00007f9ff0785d29 [ 411.869546][ T7375] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 411.877746][ T7375] RBP: 00007f9ff14e8090 R08: 0000000000000000 R09: 0000000000000000 [ 411.885938][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.894127][ T7375] R13: 0000000000000000 R14: 00007f9ff0975fa0 R15: 00007ffdee68f818 [ 411.902347][ T7375] [ 412.050237][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.198562][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.246510][ T7221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.375067][ T7172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.476895][ T7335] team0: Port device team_slave_0 added [ 412.588795][ T5788] Bluetooth: hci2: command tx timeout [ 413.087056][ T7335] team0: Port device team_slave_1 added [ 413.159774][ T7221] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.302903][ T3691] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.310759][ T3691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.483675][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.491455][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.515256][ T7288] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 413.569710][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.577255][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.603662][ T7335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.645977][ T7288] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 413.767486][ T7288] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 413.816759][ T7288] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 413.876767][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.884340][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.910789][ T7335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.057882][ T7221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.412357][ T7335] hsr_slave_0: entered promiscuous mode [ 414.475531][ T7335] hsr_slave_1: entered promiscuous mode [ 414.654679][ T7390] FAULT_INJECTION: forcing a failure. [ 414.654679][ T7390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.669967][ T7390] CPU: 1 UID: 0 PID: 7390 Comm: syz.2.324 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 414.680887][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 414.691186][ T7390] Call Trace: [ 414.694659][ T7390] [ 414.695859][ T5788] Bluetooth: hci2: command tx timeout [ 414.697687][ T7390] dump_stack_lvl+0x216/0x2d0 [ 414.708071][ T7390] dump_stack+0x1e/0x24 [ 414.712533][ T7390] should_fail_ex+0x748/0x7f0 [ 414.717531][ T7390] should_fail+0x2a/0x40 [ 414.722080][ T7390] should_fail_usercopy+0x2e/0x40 [ 414.727443][ T7390] _copy_to_user+0x34/0x120 [ 414.732256][ T7390] simple_read_from_buffer+0x199/0x340 [ 414.738066][ T7390] proc_fail_nth_read+0x1e5/0x2c0 [ 414.743398][ T7390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.749239][ T7390] vfs_read+0x29d/0xf50 [ 414.753710][ T7390] ? stack_depot_save_flags+0x2c/0x750 [ 414.759476][ T7390] ? kmsan_get_metadata+0x13e/0x1c0 [ 414.764961][ T7390] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 414.771653][ T7390] ksys_read+0x240/0x4b0 [ 414.776218][ T7390] ? kmsan_get_metadata+0x13e/0x1c0 [ 414.781733][ T7390] __x64_sys_read+0x93/0xe0 [ 414.786565][ T7390] x64_sys_call+0x314c/0x3c30 [ 414.791579][ T7390] do_syscall_64+0xcd/0x1e0 [ 414.796357][ T7390] ? clear_bhb_loop+0x25/0x80 [ 414.801357][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.807586][ T7390] RIP: 0033:0x7f9ff078473c [ 414.812243][ T7390] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 414.832267][ T7390] RSP: 002b:00007f9ff14e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 414.841023][ T7390] RAX: ffffffffffffffda RBX: 00007f9ff0975fa0 RCX: 00007f9ff078473c [ 414.849266][ T7390] RDX: 000000000000000f RSI: 00007f9ff14e80a0 RDI: 0000000000000004 [ 414.857504][ T7390] RBP: 00007f9ff14e8090 R08: 0000000000000000 R09: 0000000000000000 [ 414.865729][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.873947][ T7390] R13: 0000000000000000 R14: 00007f9ff0975fa0 R15: 00007ffdee68f818 [ 414.882198][ T7390] [ 415.602544][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.794387][ T5849] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 415.814715][ T7335] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 415.902051][ T7335] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 415.946505][ T7221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.967173][ T7335] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 416.030203][ T5849] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 416.039841][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.060667][ T7288] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.105814][ T5849] usb 3-1: config 0 descriptor?? [ 416.112471][ T7335] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 416.182335][ T7172] veth0_vlan: entered promiscuous mode [ 416.258164][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.266053][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.468463][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.476364][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.560220][ T7172] veth1_vlan: entered promiscuous mode [ 417.041488][ T7221] veth0_vlan: entered promiscuous mode [ 417.252657][ T5849] ath6kl: Failed to submit usb control message: -110 [ 417.260496][ T5849] ath6kl: unable to send the bmi data to the device: -110 [ 417.268794][ T5849] ath6kl: Unable to send get target info: -110 [ 417.343643][ T7221] veth1_vlan: entered promiscuous mode [ 417.401774][ T5849] ath6kl: Failed to init ath6kl core: -110 [ 417.418683][ T5849] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 417.449328][ T7172] veth0_macvtap: entered promiscuous mode [ 417.498916][ T5849] usb 3-1: USB disconnect, device number 18 [ 417.641375][ T7172] veth1_macvtap: entered promiscuous mode [ 417.842058][ T7221] veth0_macvtap: entered promiscuous mode [ 417.959100][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.971224][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.987766][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.012364][ T7221] veth1_macvtap: entered promiscuous mode [ 418.185570][ T7335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.236750][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.247684][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.262099][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.291617][ T7221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.303995][ T7221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.315676][ T7221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.326491][ T7221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.340926][ T7221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.410605][ T7172] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.420130][ T7172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.429364][ T7172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.438660][ T7172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.520737][ T7221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.531692][ T7221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.541950][ T7221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.552800][ T7221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.567423][ T7221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.594122][ T7335] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.694295][ T7221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.703387][ T7221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.712781][ T7221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.722030][ T7221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.758449][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.326'. [ 418.790244][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.798007][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.998610][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.006388][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.348409][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.361158][ T7335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.461303][ T7288] veth0_vlan: entered promiscuous mode [ 421.666354][ T7288] veth1_vlan: entered promiscuous mode [ 422.006002][ T7288] veth0_macvtap: entered promiscuous mode [ 422.114604][ T7288] veth1_macvtap: entered promiscuous mode [ 422.281612][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.294020][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.304269][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.315031][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.327029][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.338440][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.355379][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.550963][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.562162][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.573593][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.585552][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.595707][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.606540][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.621192][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.865679][ T7288] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.875043][ T7288] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.884166][ T7288] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.893197][ T7288] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.871185][ T7335] veth0_vlan: entered promiscuous mode [ 424.016174][ T7482] netlink: 256 bytes leftover after parsing attributes in process `syz.2.331'. [ 424.028915][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.331'. [ 424.053033][ T7335] veth1_vlan: entered promiscuous mode [ 424.540990][ T7335] veth0_macvtap: entered promiscuous mode [ 424.617047][ T7335] veth1_macvtap: entered promiscuous mode [ 424.766744][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.778133][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.788410][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.799255][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.809461][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.820266][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.830543][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.841597][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.856922][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.041786][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.052938][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.063286][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.074142][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.084528][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.095341][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.105520][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.116474][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.131027][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.448419][ T7335] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.458938][ T7335] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.469239][ T7335] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.478442][ T7335] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.905154][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.913234][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.078191][ T4041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.087030][ T4041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.125053][ T7509] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 427.174352][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 427.195401][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.203586][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.364084][ T3822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.372305][ T3822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.409472][ T7520] loop6: detected capacity change from 0 to 4096 [ 427.456429][ T7520] ntfs3(loop6): It is recommened to use chkdsk. [ 427.471635][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 427.481957][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.569730][ T8] usb 3-1: config 0 descriptor?? [ 427.580870][ T7520] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 427.589355][ T7520] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 427.597987][ T7520] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 427.606509][ T7520] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 427.614916][ T7520] ntfs3(loop6): try to read out of volume at offset 0x3fffffc1c00 [ 427.623141][ T7520] ntfs3(loop6): try to read out of volume at offset 0x3fffffc2c00 [ 427.632340][ T7520] ntfs3(loop6): try to read out of volume at offset 0x3fffffc4c00 [ 427.641205][ T7520] ntfs3(loop6): try to read out of volume at offset 0x3fffffc8c00 [ 427.653257][ T7520] ntfs3(loop6): try to read out of volume at offset 0x3fffffd0c00 [ 428.027873][ T7523] ERROR: device name not specified. [ 428.282758][ T1128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.472543][ T8] ath6kl: Failed to submit usb control message: -71 [ 428.479638][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 428.487232][ T8] ath6kl: Unable to send get target info: -71 [ 428.510257][ T8] ath6kl: Failed to init ath6kl core: -71 [ 428.521651][ T8] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 428.579280][ T1128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.605756][ T8] usb 3-1: USB disconnect, device number 19 [ 428.792006][ T1128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.926095][ T1128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.395183][ T1128] bridge_slave_1: left allmulticast mode [ 429.403275][ T1128] bridge_slave_1: left promiscuous mode [ 429.412729][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.492853][ T1128] bridge_slave_0: left allmulticast mode [ 429.498950][ T1128] bridge_slave_0: left promiscuous mode [ 429.505781][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.084005][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.130638][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.179464][ T1128] bond0 (unregistering): Released all slaves [ 430.401794][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.412365][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.648247][ T4041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.657368][ T4041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.974145][ T1128] hsr_slave_0: left promiscuous mode [ 431.007627][ T1128] hsr_slave_1: left promiscuous mode [ 431.027397][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.035816][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.054606][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.062342][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.134835][ T1128] veth1_macvtap: left promiscuous mode [ 431.140629][ T1128] veth0_macvtap: left promiscuous mode [ 431.149887][ T1128] veth1_vlan: left promiscuous mode [ 431.155588][ T1128] veth0_vlan: left promiscuous mode [ 431.564759][ T7562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.334'. [ 431.766415][ T7564] loop6: detected capacity change from 0 to 512 [ 431.779796][ T7564] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 431.871033][ T7564] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.335: bad orphan inode 131083 [ 431.872529][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 431.914915][ T7564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.930775][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.053260][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.093488][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 432.118127][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 432.291393][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.302778][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 432.312624][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 433.132640][ T7578] netlink: 32 bytes leftover after parsing attributes in process `syz.7.303'. [ 433.197976][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.206296][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.235402][ T7172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.609309][ T3822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.617515][ T3822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.677845][ T5788] Bluetooth: hci3: command tx timeout [ 434.720192][ T7567] chnl_net:caif_netlink_parms(): no params data found [ 436.746063][ T5788] Bluetooth: hci3: command tx timeout [ 436.762396][ T7605] loop8: detected capacity change from 0 to 512 [ 436.889218][ T7605] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 437.071482][ T7608] loop6: detected capacity change from 0 to 128 [ 437.099263][ T7605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 437.130297][ T7608] VFS: Found a Xenix FS (block size = 1024) on device loop6 [ 437.631823][ T7172] sysv_free_block: flc_count > flc_size [ 437.637857][ T7172] sysv_free_block: flc_count > flc_size [ 437.643682][ T7172] sysv_free_block: flc_count > flc_size [ 437.649561][ T7172] sysv_free_block: flc_count > flc_size [ 437.655409][ T7172] sysv_free_block: flc_count > flc_size [ 437.661131][ T7172] sysv_free_block: flc_count > flc_size [ 437.667317][ T7172] sysv_free_block: flc_count > flc_size [ 437.673033][ T7172] sysv_free_block: flc_count > flc_size [ 437.685231][ T7172] sysv_free_block: flc_count > flc_size [ 437.690964][ T7172] sysv_free_block: flc_count > flc_size [ 437.697752][ T7172] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 437.934427][ T7605] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.340: corrupted in-inode xattr: e_value size too large [ 438.100655][ T7605] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.340: couldn't read orphan inode 15 (err -117) [ 438.172230][ T7605] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.233450][ T7575] Set syz1 is full, maxelem 65536 reached [ 438.240431][ T1628] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 438.436968][ T1628] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 438.446522][ T1628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.501376][ T1628] usb 3-1: config 0 descriptor?? [ 438.528140][ T7567] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.536448][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.544487][ T7567] bridge_slave_0: entered allmulticast mode [ 438.553641][ T7567] bridge_slave_0: entered promiscuous mode [ 438.682864][ T7567] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.690731][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.698790][ T7567] bridge_slave_1: entered allmulticast mode [ 438.714091][ T7567] bridge_slave_1: entered promiscuous mode [ 438.825471][ T5788] Bluetooth: hci3: command tx timeout [ 438.924659][ T7609] ERROR: device name not specified. [ 439.092597][ T7567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.119966][ T7567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.228601][ T7624] FAULT_INJECTION: forcing a failure. [ 439.228601][ T7624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.242587][ T7624] CPU: 1 UID: 0 PID: 7624 Comm: syz.6.345 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 439.253503][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 439.263805][ T7624] Call Trace: [ 439.267273][ T7624] [ 439.270408][ T7624] dump_stack_lvl+0x216/0x2d0 [ 439.275415][ T7624] dump_stack+0x1e/0x24 [ 439.279868][ T7624] should_fail_ex+0x748/0x7f0 [ 439.284873][ T7624] should_fail+0x2a/0x40 [ 439.289424][ T7624] should_fail_usercopy+0x2e/0x40 [ 439.294770][ T7624] _copy_to_user+0x34/0x120 [ 439.299582][ T7624] ? copy_to_sockptr+0xb6/0x150 [ 439.304759][ T7624] copy_to_sockptr+0xd8/0x150 [ 439.309771][ T7624] do_ip_getsockopt+0x1300/0x2370 [ 439.315139][ T7624] ? kmsan_get_metadata+0x13e/0x1c0 [ 439.320630][ T7624] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 439.327308][ T7624] ? kmsan_get_metadata+0x13e/0x1c0 [ 439.332821][ T7624] ip_getsockopt+0xdc/0x410 [ 439.337650][ T7624] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 439.343756][ T7624] ipv6_getsockopt+0x43d/0x4c0 [ 439.348795][ T7624] ? kmsan_get_metadata+0x13e/0x1c0 [ 439.354284][ T7624] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 439.359846][ T7624] sctp_getsockopt+0x195/0x12a0 [ 439.361690][ T1628] ath6kl: Failed to submit usb control message: -71 [ 439.364877][ T7624] ? __pfx_sctp_getsockopt+0x10/0x10 [ 439.365016][ T7624] sock_common_getsockopt+0xa1/0xe0 [ 439.372000][ T1628] ath6kl: unable to send the bmi data to the device: -71 [ 439.377049][ T7624] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 439.377236][ T7624] do_sock_getsockopt+0x5f0/0xa10 [ 439.382501][ T1628] ath6kl: Unable to send get target info: -71 [ 439.389581][ T7624] __x64_sys_getsockopt+0x449/0x590 [ 439.389765][ T7624] x64_sys_call+0x1554/0x3c30 [ 439.389957][ T7624] do_syscall_64+0xcd/0x1e0 [ 439.390096][ T7624] ? clear_bhb_loop+0x25/0x80 [ 439.390279][ T7624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.390463][ T7624] RIP: 0033:0x7fd291985d29 [ 439.390573][ T7624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.390706][ T7624] RSP: 002b:00007fd2927fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 439.390854][ T7624] RAX: ffffffffffffffda RBX: 00007fd291b75fa0 RCX: 00007fd291985d29 [ 439.390966][ T7624] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 439.391074][ T7624] RBP: 00007fd2927fd090 R08: 0000000020000100 R09: 0000000000000000 [ 439.391176][ T7624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.391270][ T7624] R13: 0000000000000000 R14: 00007fd291b75fa0 R15: 00007ffc53811678 [ 439.391398][ T7624] [ 439.448011][ T7567] team0: Port device team_slave_0 added [ 439.506926][ T1628] ath6kl: Failed to init ath6kl core: -71 [ 439.546984][ T1628] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 439.571031][ T1628] usb 3-1: USB disconnect, device number 20 [ 439.584222][ T5849] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 439.752435][ T7567] team0: Port device team_slave_1 added [ 439.760780][ T5849] usb 9-1: Using ep0 maxpacket: 32 [ 439.861632][ T5849] usb 9-1: config 0 has an invalid interface number: 231 but max is 0 [ 439.870337][ T5849] usb 9-1: config 0 has no interface number 0 [ 439.876927][ T5849] usb 9-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 439.887481][ T5849] usb 9-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid maxpacket 24840, setting to 1024 [ 439.899232][ T5849] usb 9-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 439.963651][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.971128][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.998833][ T7567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.051225][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.058917][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.086162][ T7567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.176968][ T7605] Process accounting resumed [ 440.232806][ T5849] usb 9-1: string descriptor 0 read error: -71 [ 440.245186][ T5849] usb 9-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 440.254752][ T5849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.275480][ T5849] usb 9-1: config 0 descriptor?? [ 440.285735][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.6.346'. [ 440.304944][ T5849] usb 9-1: can't set config #0, error -71 [ 440.332765][ T5849] usb 9-1: USB disconnect, device number 2 [ 440.335237][ T7632] loop7: detected capacity change from 0 to 2048 [ 440.374840][ T7335] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.450520][ T7632] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 440.575115][ T7639] usb usb4: usbfs: process 7639 (syz.8.348) did not claim interface 0 before use [ 440.721037][ T7567] hsr_slave_0: entered promiscuous mode [ 440.738711][ T7567] hsr_slave_1: entered promiscuous mode [ 440.782321][ T7567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.790488][ T7567] Cannot create hsr debugfs directory [ 440.912938][ T5788] Bluetooth: hci3: command tx timeout [ 440.915859][ T7632] 9pnet_fd: Insufficient options for proto=fd [ 440.940633][ T1628] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 441.116784][ T1628] usb 9-1: Using ep0 maxpacket: 16 [ 441.175403][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.351'. [ 441.185101][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.351'. [ 441.194592][ T1628] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 441.204915][ T1628] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.213190][ T1628] usb 9-1: Product: syz [ 441.218165][ T1628] usb 9-1: Manufacturer: syz [ 441.223016][ T1628] usb 9-1: SerialNumber: syz [ 441.289770][ T1628] r8152-cfgselector 9-1: Unknown version 0x0000 [ 441.297825][ T1628] r8152-cfgselector 9-1: config 0 descriptor?? [ 441.313210][ T7288] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 441.324195][ T7648] loop6: detected capacity change from 0 to 1024 [ 441.361654][ T7288] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 441.503011][ T7648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.851464][ T7639] netlink: 36 bytes leftover after parsing attributes in process `syz.8.348'. [ 441.886843][ T7656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.354'. [ 441.916973][ T1628] r8152-cfgselector 9-1: USB disconnect, device number 3 [ 441.930503][ T7172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.073026][ T4041] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.353053][ T4041] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.371720][ T7567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 442.479670][ T4041] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.584935][ T7567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 442.818315][ T4041] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.919421][ T7659] can: request_module (can-proto-3) failed. [ 442.967674][ T7567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 443.144941][ T7666] loop6: detected capacity change from 0 to 32768 [ 443.168952][ T7567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 443.292809][ T4041] bridge_slave_1: left allmulticast mode [ 443.298855][ T4041] bridge_slave_1: left promiscuous mode [ 443.305615][ T4041] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.329575][ T4041] bridge_slave_0: left allmulticast mode [ 443.335684][ T4041] bridge_slave_0: left promiscuous mode [ 443.342328][ T4041] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.472139][ T7666] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 443.481949][ T7666] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 444.022691][ T7666] bcachefs: bch2_fs_get_tree() error: EINVAL [ 444.204789][ T4041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.326486][ T4041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.422089][ T4041] bond0 (unregistering): Released all slaves [ 444.933443][ T7659] loop6: detected capacity change from 0 to 2048 [ 444.998242][ T7659] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.255634][ T4041] hsr_slave_0: left promiscuous mode [ 445.304200][ T4041] hsr_slave_1: left promiscuous mode [ 445.343470][ T4041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.351748][ T4041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.435121][ T4041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.442872][ T4041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.504301][ T4041] veth1_macvtap: left promiscuous mode [ 445.510196][ T4041] veth0_macvtap: left promiscuous mode [ 445.516686][ T4041] veth1_vlan: left promiscuous mode [ 445.522267][ T4041] veth0_vlan: left promiscuous mode [ 445.706429][ T5839] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 445.709191][ T7690] netlink: 24 bytes leftover after parsing attributes in process `syz.8.361'. [ 445.999247][ T5839] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 446.008997][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.041087][ T5839] usb 3-1: config 0 descriptor?? [ 446.175090][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.205568][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.240149][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.272198][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.298916][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 446.321902][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 446.536257][ T7687] ERROR: device name not specified. [ 446.636136][ T4041] team0 (unregistering): Port device team_slave_1 removed [ 446.752566][ T4041] team0 (unregistering): Port device team_slave_0 removed [ 447.028922][ T5839] ath6kl: Failed to submit usb control message: -71 [ 447.036110][ T5839] ath6kl: unable to send the bmi data to the device: -71 [ 447.043408][ T5839] ath6kl: Unable to send get target info: -71 [ 447.068904][ T5839] ath6kl: Failed to init ath6kl core: -71 [ 447.081737][ T5839] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 447.144159][ T5839] usb 3-1: USB disconnect, device number 21 [ 447.696617][ T7567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.038983][ T5788] Bluetooth: hci0: command tx timeout [ 449.110166][ T7567] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.185431][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 449.204354][ T7720] loop8: detected capacity change from 0 to 32768 [ 449.212224][ T3691] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.220016][ T3691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.234057][ T7720] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.364 (7720) [ 449.271751][ T7720] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 449.282648][ T7720] BTRFS info (device loop8): using sha256 (sha256-generic) checksum algorithm [ 449.294223][ T7720] BTRFS info (device loop8): using free-space-tree [ 449.316672][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.324537][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.503700][ T7335] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 450.513587][ T7700] chnl_net:caif_netlink_parms(): no params data found [ 450.604508][ T5839] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 450.740360][ T7756] netlink: 32 bytes leftover after parsing attributes in process `syz.2.367'. [ 450.836048][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 450.877190][ T5839] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 450.885850][ T5839] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.899794][ T5839] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 450.911733][ T5839] usb 7-1: config 0 has no interface number 1 [ 450.919509][ T5839] usb 7-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 451.074540][ T5788] Bluetooth: hci0: command tx timeout [ 451.257178][ T5839] usb 7-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 451.267840][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.277173][ T5839] usb 7-1: Product: syz [ 451.281594][ T5839] usb 7-1: Manufacturer: syz [ 451.286968][ T5839] usb 7-1: SerialNumber: syz [ 451.320754][ T5839] usb 7-1: config 0 descriptor?? [ 451.360102][ T5839] pwc: Logitech QuickCam Pro 3000 USB webcam detected. [ 451.489671][ T7567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.672706][ T5839] pwc: Failed to set LED on/off time (-71) [ 451.690433][ T5839] pwc: send_video_command error -71 [ 451.696041][ T5839] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 451.704421][ T5839] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 451.801676][ T5839] usb 7-1: USB disconnect, device number 2 [ 451.963231][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.974198][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.982004][ T7700] bridge_slave_0: entered allmulticast mode [ 451.991188][ T7700] bridge_slave_0: entered promiscuous mode [ 452.008946][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.020582][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.028564][ T7700] bridge_slave_1: entered allmulticast mode [ 452.037689][ T7700] bridge_slave_1: entered promiscuous mode [ 452.401877][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.455345][ T7567] veth0_vlan: entered promiscuous mode [ 452.509499][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.553642][ T7567] veth1_vlan: entered promiscuous mode [ 452.576902][ T7773] FAULT_INJECTION: forcing a failure. [ 452.576902][ T7773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.590814][ T7773] CPU: 0 UID: 0 PID: 7773 Comm: syz.2.371 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 452.601728][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 452.612041][ T7773] Call Trace: [ 452.615527][ T7773] [ 452.618645][ T7773] dump_stack_lvl+0x216/0x2d0 [ 452.623632][ T7773] dump_stack+0x1e/0x24 [ 452.628073][ T7773] should_fail_ex+0x748/0x7f0 [ 452.633060][ T7773] should_fail+0x2a/0x40 [ 452.637581][ T7773] should_fail_usercopy+0x2e/0x40 [ 452.642895][ T7773] _copy_to_user+0x34/0x120 [ 452.647686][ T7773] simple_read_from_buffer+0x199/0x340 [ 452.653456][ T7773] proc_fail_nth_read+0x1e5/0x2c0 [ 452.658755][ T7773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 452.664567][ T7773] vfs_read+0x29d/0xf50 [ 452.669008][ T7773] ? stack_depot_save_flags+0x2c/0x750 [ 452.674750][ T7773] ? kmsan_get_metadata+0x13e/0x1c0 [ 452.680207][ T7773] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 452.686858][ T7773] ksys_read+0x240/0x4b0 [ 452.691378][ T7773] ? kmsan_get_metadata+0x13e/0x1c0 [ 452.696841][ T7773] __x64_sys_read+0x93/0xe0 [ 452.701639][ T7773] x64_sys_call+0x314c/0x3c30 [ 452.706611][ T7773] do_syscall_64+0xcd/0x1e0 [ 452.711362][ T7773] ? clear_bhb_loop+0x25/0x80 [ 452.716327][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.722513][ T7773] RIP: 0033:0x7f9ff078473c [ 452.727152][ T7773] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 452.747055][ T7773] RSP: 002b:00007f9ff14e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 452.755765][ T7773] RAX: ffffffffffffffda RBX: 00007f9ff0975fa0 RCX: 00007f9ff078473c [ 452.763981][ T7773] RDX: 000000000000000f RSI: 00007f9ff14e80a0 RDI: 0000000000000004 [ 452.772172][ T7773] RBP: 00007f9ff14e8090 R08: 0000000000000000 R09: 0000000000000000 [ 452.780363][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.788549][ T7773] R13: 0000000000000000 R14: 00007f9ff0975fa0 R15: 00007ffdee68f818 [ 452.796768][ T7773] [ 452.909560][ T7700] team0: Port device team_slave_0 added [ 452.975620][ T7700] team0: Port device team_slave_1 added [ 453.148009][ T5788] Bluetooth: hci0: command tx timeout [ 453.151083][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.161451][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.189323][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.254085][ T7489] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 453.315843][ T7567] veth0_macvtap: entered promiscuous mode [ 453.395393][ T7567] veth1_macvtap: entered promiscuous mode [ 453.417735][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.425712][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.455609][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.481865][ T7489] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 453.492818][ T7489] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.582408][ T7489] usb 7-1: config 0 descriptor?? [ 453.584321][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.373'. [ 453.732318][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.743318][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.753190][ T7785] loop8: detected capacity change from 0 to 512 [ 453.762798][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.774523][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.781340][ T7785] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 453.784588][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.784685][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.789028][ T7567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.995730][ T7785] EXT4-fs (loop8): orphan cleanup on readonly fs [ 454.016605][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.018063][ T7777] ERROR: device name not specified. [ 454.027934][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.028028][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.028117][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.028197][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.028285][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.068201][ T7785] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.374: Block bitmap for bg 0 marked uninitialized [ 454.082841][ T7567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.261745][ T7785] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 454.319020][ T7785] EXT4-fs (loop8): 1 orphan inode deleted [ 454.327116][ T7785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 454.338934][ T7567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.339288][ T7567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.357940][ T7567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.367511][ T7567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.440427][ T7700] hsr_slave_0: entered promiscuous mode [ 454.449842][ T7489] ath6kl: Failed to submit usb control message: -71 [ 454.456945][ T7489] ath6kl: unable to send the bmi data to the device: -71 [ 454.464362][ T7489] ath6kl: Unable to send get target info: -71 [ 454.479506][ T7700] hsr_slave_1: entered promiscuous mode [ 454.489017][ T7489] ath6kl: Failed to init ath6kl core: -71 [ 454.500438][ T7489] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 454.521162][ T7489] usb 7-1: USB disconnect, device number 3 [ 454.531989][ T7700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.540602][ T7700] Cannot create hsr debugfs directory [ 454.972197][ T7335] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.227586][ T5788] Bluetooth: hci0: command tx timeout [ 455.455152][ T7489] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 455.654977][ T7489] usb 3-1: Using ep0 maxpacket: 16 [ 455.686068][ T7489] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.697761][ T7489] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.710310][ T7489] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.724424][ T7489] usb 3-1: config 0 interface 0 has no altsetting 0 [ 455.731363][ T7489] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 455.740982][ T7489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.800564][ T7700] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 455.898664][ T7489] usb 3-1: config 0 descriptor?? [ 455.915652][ T7700] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 456.037586][ T7700] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 456.095737][ T7700] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 456.368677][ T7489] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 456.378486][ T7489] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 456.386017][ T7489] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 456.393207][ T7489] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 456.400620][ T7489] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 456.548648][ T7489] wacom 0003:056A:002A.0008: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 456.605796][ T7489] wacom 0003:056A:002A.0008: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.2-1/input0 [ 456.626202][ T7489] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:002A.0008/input/input6 [ 456.649527][ T7798] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 457.023030][ T7824] loop8: detected capacity change from 0 to 256 [ 457.090980][ T7824] exfat: Deprecated parameter 'namecase' [ 457.201311][ T7824] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 457.311178][ T7489] usb 3-1: USB disconnect, device number 22 [ 457.528558][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.799921][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.840413][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.381'. [ 457.932030][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.381'. [ 457.952700][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.960508][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.979964][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.987819][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.076915][ T7706] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 458.516744][ T7845] FAULT_INJECTION: forcing a failure. [ 458.516744][ T7845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.530490][ T7845] CPU: 1 UID: 0 PID: 7845 Comm: syz.6.383 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 458.541406][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 458.551731][ T7845] Call Trace: [ 458.555209][ T7845] [ 458.558333][ T7845] dump_stack_lvl+0x216/0x2d0 [ 458.563335][ T7845] dump_stack+0x1e/0x24 [ 458.567808][ T7845] should_fail_ex+0x748/0x7f0 [ 458.572818][ T7845] should_fail+0x2a/0x40 [ 458.577363][ T7845] should_fail_usercopy+0x2e/0x40 [ 458.582724][ T7845] _copy_to_user+0x34/0x120 [ 458.587543][ T7845] simple_read_from_buffer+0x199/0x340 [ 458.593354][ T7845] proc_fail_nth_read+0x1e5/0x2c0 [ 458.598694][ T7845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.604532][ T7845] vfs_read+0x29d/0xf50 [ 458.608997][ T7845] ? stack_depot_save_flags+0x2c/0x750 [ 458.614761][ T7845] ? kmsan_get_metadata+0x13e/0x1c0 [ 458.620251][ T7845] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 458.626952][ T7845] ksys_read+0x240/0x4b0 [ 458.631506][ T7845] ? kmsan_get_metadata+0x13e/0x1c0 [ 458.636994][ T7845] __x64_sys_read+0x93/0xe0 [ 458.641808][ T7845] x64_sys_call+0x314c/0x3c30 [ 458.646818][ T7845] do_syscall_64+0xcd/0x1e0 [ 458.651617][ T7845] ? clear_bhb_loop+0x25/0x80 [ 458.656626][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.662852][ T7845] RIP: 0033:0x7fd29198473c [ 458.667498][ T7845] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 458.687401][ T7845] RSP: 002b:00007fd2927fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 458.696117][ T7845] RAX: ffffffffffffffda RBX: 00007fd291b75fa0 RCX: 00007fd29198473c [ 458.704326][ T7845] RDX: 000000000000000f RSI: 00007fd2927fd0a0 RDI: 0000000000000005 [ 458.712519][ T7845] RBP: 00007fd2927fd090 R08: 0000000000000000 R09: 0000000000000000 [ 458.720725][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.728919][ T7845] R13: 0000000000000000 R14: 00007fd291b75fa0 R15: 00007ffc53811678 [ 458.737143][ T7845] [ 458.740361][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.785387][ T7706] usb 9-1: Using ep0 maxpacket: 8 [ 459.297932][ T7706] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 459.307388][ T7706] usb 9-1: config 0 has no interface number 0 [ 459.314313][ T7706] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 459.325664][ T7706] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 459.337787][ T7706] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 459.349443][ T7706] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 459.359803][ T7706] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.390834][ T7850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 459.428374][ T7706] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 459.438307][ T7706] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.446757][ T7706] usb 9-1: Product: syz [ 459.451241][ T7706] usb 9-1: Manufacturer: syz [ 459.456189][ T7706] usb 9-1: SerialNumber: syz [ 459.506365][ T7706] usb 9-1: config 0 descriptor?? [ 459.735132][ T7706] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 459.753575][ T44] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 459.934958][ T7706] usb 9-1: USB disconnect, device number 4 [ 459.989454][ T44] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 459.999803][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.029221][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.080672][ T44] usb 7-1: config 0 descriptor?? [ 460.505557][ T7857] ERROR: device name not specified. [ 460.833675][ T7489] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 460.839995][ T44] ath6kl: Failed to submit usb control message: -71 [ 460.848974][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 460.856323][ T44] ath6kl: Unable to send get target info: -71 [ 460.865018][ T44] ath6kl: Failed to init ath6kl core: -71 [ 460.878187][ T44] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 460.929907][ T44] usb 7-1: USB disconnect, device number 4 [ 461.158463][ T7489] usb 3-1: Using ep0 maxpacket: 8 [ 461.265686][ T7489] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 461.276607][ T7489] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 461.344123][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.352221][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.388037][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.390213][ T7489] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.397290][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.405394][ T7489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.405543][ T7489] usb 3-1: Product: ј [ 461.405654][ T7489] usb 3-1: Manufacturer: 輩읃ᶔ뗡菧芹퐓﹏㳂캗ꯃ㲐蠼욗氢䅏ိ䄗︍嵲옂ꕶꈻ鮎ꝉ癌컯৚珱퉷읹ꥻꐱ梓谁ΰ져칖ⴶⰬꩾ㝎䗠ᮧ꫿虠貄ꋏ옄꒐蔳 [ 461.405822][ T7489] usb 3-1: SerialNumber: 䍉扱탔渶亹⌦﷧큔䢹ꖓ✣၃쉎阔鋀괷풨᤬㍼緾胶ﻓ﮽ꇱ⒤꬐年鴭颷冁⒋霞㐘닲톇伝쬹૰т⃃叧鵱ผ⣱묮옅雧銭核븸렷‿䋞ன⮚꜃ꀺ鋑ࢠ鶋໧韀ẛțꝒ [ 461.886136][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.387'. [ 461.896069][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.387'. [ 461.939788][ T7870] dummy0: entered promiscuous mode [ 462.065466][ T7870] batadv_slave_1: entered promiscuous mode [ 462.174327][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.387'. [ 462.183644][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.387'. [ 463.000118][ T7893] loop8: detected capacity change from 0 to 256 [ 463.038977][ T4213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.301916][ T7489] cdc_ncm 3-1:1.0: bind() failure [ 463.319389][ T7489] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 463.327386][ T7489] cdc_ncm 3-1:1.1: bind() failure [ 463.355253][ T7700] veth0_vlan: entered promiscuous mode [ 463.390152][ T7700] veth1_vlan: entered promiscuous mode [ 463.478531][ T7489] usb 3-1: USB disconnect, device number 23 [ 463.740903][ T4213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.865982][ T5840] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 463.992835][ T4213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.212616][ T4213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.215161][ T5840] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 464.232847][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.241294][ T5840] usb 9-1: Product: syz [ 464.245935][ T5840] usb 9-1: Manufacturer: syz [ 464.250806][ T5840] usb 9-1: SerialNumber: syz [ 464.281637][ T5840] usb 9-1: config 0 descriptor?? [ 464.320626][ T7700] veth0_macvtap: entered promiscuous mode [ 464.422549][ T7700] veth1_macvtap: entered promiscuous mode [ 464.606868][ T5840] hso 9-1:0.0: Failed to find INT IN ep [ 464.617871][ T5840] usb-storage 9-1:0.0: USB Mass Storage device detected [ 464.697196][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.708959][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.725352][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.736146][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.741686][ T7901] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 464.746181][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.746279][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.746362][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.789312][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.804005][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.813007][ T4213] bridge_slave_1: left allmulticast mode [ 464.822430][ T4213] bridge_slave_1: left promiscuous mode [ 464.829746][ T4213] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.873616][ T4213] bridge_slave_0: left allmulticast mode [ 464.881331][ T4213] bridge_slave_0: left promiscuous mode [ 464.885044][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.888096][ T4213] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.078427][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.085273][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.172540][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 465.269284][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 465.367213][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 465.387743][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 465.397651][ T4213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.408761][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 465.571924][ T4213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.667173][ T4213] bond0 (unregistering): Released all slaves [ 466.218810][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.230535][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.240697][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.256223][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.270355][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.283579][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.293916][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.304782][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.319034][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.601917][ T7700] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.611225][ T7700] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.616853][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 466.620310][ T7700] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.638396][ T7700] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.730778][ T44] usb 9-1: USB disconnect, device number 5 [ 467.026344][ T5840] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 467.282628][ T5840] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 467.293214][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.302219][ T5840] usb 7-1: Product: syz [ 467.307404][ T5840] usb 7-1: Manufacturer: syz [ 467.312274][ T5840] usb 7-1: SerialNumber: syz [ 467.355705][ T5840] usb 7-1: config 0 descriptor?? [ 467.545686][ T5793] Bluetooth: hci3: command tx timeout [ 467.609194][ T1628] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 467.627629][ T7937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.396'. [ 467.834441][ T1628] usb 9-1: Using ep0 maxpacket: 8 [ 467.968065][ T1628] usb 9-1: config 9 has an invalid interface number: 210 but max is 0 [ 467.976995][ T1628] usb 9-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 467.986274][ T1628] usb 9-1: config 9 has no interface number 0 [ 467.995189][ T1628] usb 9-1: config 9 interface 210 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 468.007899][ T1628] usb 9-1: config 9 interface 210 altsetting 3 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 468.019540][ T1628] usb 9-1: config 9 interface 210 altsetting 3 bulk endpoint 0x5 has invalid maxpacket 1023 [ 468.030300][ T1628] usb 9-1: config 9 interface 210 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 468.041761][ T1628] usb 9-1: config 9 interface 210 altsetting 3 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 468.053561][ T1628] usb 9-1: config 9 interface 210 has no altsetting 0 [ 468.066583][ T5840] usb 7-1: f81604_read: reg: 105 failed: -EPIPE [ 468.073161][ T5840] f81604 7-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 468.080986][ T5840] f81604 7-1:0.0: probe with driver f81604 failed with error -32 [ 468.134526][ T1628] usb 9-1: New USB device found, idVendor=1110, idProduct=9022, bcdDevice=56.c6 [ 468.145240][ T1628] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.153616][ T1628] usb 9-1: Product: 䴀墙⋸푡粉阼ཚꦶ쎠蟛䙷僊ኆ顺ﳐ癄镹ꮚ饖뤹猂㖃穨抭傕睑馆探暅寲㺬嶾⺘䀇傂䜫䷸헥갘㳟ᇟ儛断筚뚨ڒꗌ䙖̍쩳꽢է鎯폇泾⏚矴멽ॠ땓媃㦵≣洓傮뗂팿ꈻ뚜䋶ጠ槟犅㓈⟽䃂䍬멖끢芓惺歺镭篆셯㺭ᣟ衤ౚ潳얊鮝ꅈ䩳⳱Džꥧ蚳딪鑪초踞ﯖ坽풢漑峥 [ 468.191172][ T1628] usb 9-1: Manufacturer: చ [ 468.198855][ T1628] usb 9-1: SerialNumber:  [ 468.207362][ T4213] hsr_slave_0: left promiscuous mode [ 468.251905][ T7935] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 468.270518][ T4213] hsr_slave_1: left promiscuous mode [ 468.294172][ T4213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.305299][ T4213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.347055][ T4213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.355124][ T4213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.407939][ T4213] veth1_macvtap: left promiscuous mode [ 468.414704][ T4213] veth0_macvtap: left promiscuous mode [ 468.420728][ T4213] veth1_vlan: left promiscuous mode [ 468.426606][ T4213] veth0_vlan: left promiscuous mode [ 468.887383][ T1628] usb 9-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9022) Rev (0X56C6): Eagle II [ 469.256365][ T4213] team0 (unregistering): Port device team_slave_1 removed [ 469.299425][ T4213] team0 (unregistering): Port device team_slave_0 removed [ 469.660948][ T5793] Bluetooth: hci3: command tx timeout [ 469.684702][ T44] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 469.872340][ T44] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 469.882581][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.033905][ T44] usb 3-1: config 0 descriptor?? [ 470.064181][ T25] usb 7-1: USB disconnect, device number 5 [ 470.306809][ T7905] chnl_net:caif_netlink_parms(): no params data found [ 470.493534][ T7957] ERROR: device name not specified. [ 470.610475][ T1628] usb 9-1: [ueagle-atm] pre-firmware device, uploading firmware [ 470.618683][ T1628] usb 9-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 470.673589][ T1628] usb 9-1: USB disconnect, device number 6 [ 470.690554][ T5840] usb 9-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 470.700190][ T5840] usb 9-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 471.034542][ T44] ath6kl: Failed to submit usb control message: -71 [ 471.041546][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 471.049052][ T44] ath6kl: Unable to send get target info: -71 [ 471.079854][ T44] ath6kl: Failed to init ath6kl core: -71 [ 471.091048][ T44] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 471.134192][ T1628] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 471.172146][ T44] usb 3-1: USB disconnect, device number 24 [ 471.701052][ T1628] usb 9-1: Using ep0 maxpacket: 8 [ 471.715980][ T5793] Bluetooth: hci3: command tx timeout [ 471.724506][ T1628] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 471.735112][ T1628] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 471.821728][ T1628] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.831266][ T1628] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.839703][ T1628] usb 9-1: Product: ј [ 471.844335][ T1628] usb 9-1: Manufacturer: 輩읃ᶔ뗡菧芹퐓﹏㳂캗ꯃ㲐蠼욗氢䅏ိ䄗︍嵲옂ꕶꈻ鮎ꝉ癌컯৚珱퉷읹ꥻꐱ梓谁ΰ져칖ⴶⰬꩾ㝎䗠ᮧ꫿虠貄ꋏ옄꒐蔳 [ 471.864926][ T1628] usb 9-1: SerialNumber: 䍉扱탔渶亹⌦﷧큔䢹ꖓ✣၃쉎阔鋀괷풨᤬㍼緾胶ﻓ﮽ꇱ⒤꬐年鴭颷冁⒋霞㐘닲톇伝쬹૰т⃃叧鵱ผ⣱묮옅雧銭核븸렷‿䋞ன⮚꜃ꀺ鋑ࢠ鶋໧韀ẛțꝒ [ 471.970761][ T7988] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 472.017385][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.029690][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.037647][ T7905] bridge_slave_0: entered allmulticast mode [ 472.047175][ T7905] bridge_slave_0: entered promiscuous mode [ 472.193336][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.204837][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.215376][ T7905] bridge_slave_1: entered allmulticast mode [ 472.228618][ T7905] bridge_slave_1: entered promiscuous mode [ 472.378694][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.8.401'. [ 472.388202][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.8.401'. [ 472.555337][ T7973] dummy0: entered promiscuous mode [ 472.564571][ T7987] can: request_module (can-proto-3) failed. [ 472.630131][ T7973] batadv_slave_1: entered promiscuous mode [ 472.692350][ T7973] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 472.703547][ T7973] Cannot create hsr debugfs directory [ 472.823397][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.8.401'. [ 472.834190][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.8.401'. [ 473.129547][ T7905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.192553][ T1628] cdc_ncm 9-1:1.0: bind() failure [ 473.208995][ T1628] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 473.219723][ T1628] cdc_ncm 9-1:1.1: bind() failure [ 473.260743][ T7905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.359157][ T1628] usb 9-1: USB disconnect, device number 7 [ 473.493444][ T7905] team0: Port device team_slave_0 added [ 473.528446][ T7905] team0: Port device team_slave_1 added [ 473.741880][ T7905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.749450][ T7905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.775943][ T7905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.794398][ T5793] Bluetooth: hci3: command tx timeout [ 473.821127][ T6278] ===================================================== [ 473.831293][ T6278] BUG: KMSAN: uninit-value in bch2_xattr_validate+0x3bb/0x720 [ 473.840037][ T6278] bch2_xattr_validate+0x3bb/0x720 [ 473.845507][ T6278] bch2_bkey_val_validate+0x2b5/0x440 [ 473.851111][ T6278] validate_bset_keys+0x1531/0x2080 [ 473.857125][ T6278] validate_bset_for_write+0x142/0x290 [ 473.862823][ T6278] __bch2_btree_node_write+0x53df/0x6830 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 473.868884][ T6278] bch2_btree_node_write+0xa5/0x2e0 [ 473.874799][ T6278] __btree_node_flush+0x606/0x680 [ 473.880040][ T6278] bch2_btree_node_flush1+0x38/0x60 [ 473.885710][ T6278] journal_flush_pins+0xce6/0x1780 [ 473.891016][ T6278] __bch2_journal_reclaim+0xda8/0x1670 [ 473.896827][ T6278] bch2_journal_reclaim_thread+0x18e/0x760 [ 473.903671][ T6278] kthread+0x3e2/0x540 [ 473.908066][ T6278] ret_from_fork+0x6d/0x90 [ 473.912718][ T6278] ret_from_fork_asm+0x1a/0x30 [ 473.917999][ T6278] [ 473.920419][ T6278] Uninit was stored to memory at: [ 473.927551][ T6278] bch2_sort_keys_keep_unwritten_whiteouts+0x12d5/0x19d0 [ 473.937846][ T6278] __bch2_btree_node_write+0x3ae8/0x6830 [ 473.943718][ T6278] bch2_btree_node_write+0xa5/0x2e0 [ 473.951219][ T7905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.951674][ T6278] __btree_node_flush+0x606/0x680 [ 473.958950][ T7905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.963953][ T6278] bch2_btree_node_flush1+0x38/0x60 [ 473.964079][ T6278] journal_flush_pins+0xce6/0x1780 [ 473.990463][ T7905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.995425][ T6278] __bch2_journal_reclaim+0xda8/0x1670 [ 474.017214][ T6278] bch2_journal_reclaim_thread+0x18e/0x760 [ 474.023223][ T6278] kthread+0x3e2/0x540 [ 474.027628][ T6278] ret_from_fork+0x6d/0x90 [ 474.035092][ T6278] ret_from_fork_asm+0x1a/0x30 [ 474.040088][ T6278] [ 474.042512][ T6278] Uninit was created at: [ 474.048086][ T6278] ___kmalloc_large_node+0x22c/0x370 [ 474.053617][ T6278] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 474.059705][ T6278] __kmalloc_node_noprof+0xc96/0x1250 [ 474.065404][ T6278] __kvmalloc_node_noprof+0xc0/0x2d0 [ 474.070885][ T6278] btree_node_sort+0x78a/0x1d30 [ 474.076129][ T6278] bch2_btree_post_write_cleanup+0x1b0/0xf20 [ 474.082352][ T6278] bch2_btree_node_write+0x21c/0x2e0 [ 474.088021][ T6278] __btree_node_flush+0x606/0x680 [ 474.093260][ T6278] bch2_btree_node_flush0+0x35/0x60 [ 474.098797][ T6278] journal_flush_pins+0xce6/0x1780 [ 474.104325][ T6278] __bch2_journal_reclaim+0xda8/0x1670 [ 474.109967][ T6278] bch2_journal_reclaim_thread+0x18e/0x760 [ 474.116087][ T6278] kthread+0x3e2/0x540 [ 474.120348][ T6278] ret_from_fork+0x6d/0x90 [ 474.125055][ T6278] ret_from_fork_asm+0x1a/0x30 [ 474.130051][ T6278] [ 474.135326][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: bch-reclaim/loo Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 474.147643][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 474.158084][ T6278] ===================================================== [ 474.165374][ T6278] Disabling lock debugging due to kernel taint [ 474.171664][ T6278] Kernel panic - not syncing: kmsan.panic set ... [ 474.178227][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: bch-reclaim/loo Tainted: G B 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 474.191057][ T6278] Tainted: [B]=BAD_PAGE [ 474.195339][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 474.205538][ T6278] Call Trace: [ 474.208948][ T6278] [ 474.212007][ T6278] dump_stack_lvl+0x216/0x2d0 [ 474.216917][ T6278] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 474.222937][ T6278] dump_stack+0x1e/0x24 [ 474.227309][ T6278] panic+0x4e2/0xcf0 [ 474.231406][ T6278] ? kmsan_get_metadata+0xd1/0x1c0 [ 474.236715][ T6278] kmsan_report+0x2c7/0x2d0 [ 474.241393][ T6278] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 474.247408][ T6278] ? kmsan_get_metadata+0x13e/0x1c0 [ 474.252795][ T6278] ? __msan_warning+0x95/0x120 [ 474.257775][ T6278] ? bch2_xattr_validate+0x3bb/0x720 [ 474.263274][ T6278] ? bch2_bkey_val_validate+0x2b5/0x440 [ 474.269046][ T6278] ? validate_bset_keys+0x1531/0x2080 [ 474.274649][ T6278] ? validate_bset_for_write+0x142/0x290 [ 474.280506][ T6278] ? __bch2_btree_node_write+0x53df/0x6830 [ 474.286547][ T6278] ? bch2_btree_node_write+0xa5/0x2e0 [ 474.292148][ T6278] ? __btree_node_flush+0x606/0x680 [ 474.297546][ T6278] ? bch2_btree_node_flush1+0x38/0x60 [ 474.303127][ T6278] ? journal_flush_pins+0xce6/0x1780 [ 474.308604][ T6278] ? __bch2_journal_reclaim+0xda8/0x1670 [ 474.314423][ T6278] ? bch2_journal_reclaim_thread+0x18e/0x760 [ 474.320601][ T6278] ? kthread+0x3e2/0x540 [ 474.325025][ T6278] ? ret_from_fork+0x6d/0x90 [ 474.329809][ T6278] ? ret_from_fork_asm+0x1a/0x30 [ 474.334969][ T6278] ? kmsan_get_metadata+0x13e/0x1c0 [ 474.340359][ T6278] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 474.346367][ T6278] ? kmsan_get_metadata+0x13e/0x1c0 [ 474.351753][ T6278] ? kmsan_get_metadata+0x13e/0x1c0 [ 474.357232][ T6278] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 474.363233][ T6278] ? kmsan_get_metadata+0x13e/0x1c0 [ 474.368611][ T6278] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 474.374623][ T6278] ? kmsan_get_metadata+0x13e/0x1c0 [ 474.380007][ T6278] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 474.386022][ T6278] ? kmsan_get_metadata+0x13e/0x1c0 [ 474.391409][ T6278] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 474.397423][ T6278] __msan_warning+0x95/0x120 [ 474.402246][ T6278] bch2_xattr_validate+0x3bb/0x720 [ 474.407602][ T6278] ? __pfx_bch2_xattr_validate+0x10/0x10 [ 474.413470][ T6278] bch2_bkey_val_validate+0x2b5/0x440 [ 474.419095][ T6278] validate_bset_keys+0x1531/0x2080 [ 474.424576][ T6278] validate_bset_for_write+0x142/0x290 [ 474.430278][ T6278] __bch2_btree_node_write+0x53df/0x6830 [ 474.436158][ T6278] ? kmsan_get_metadata+0x13e/0x1c0 [ 474.441550][ T6278] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 474.447557][ T6278] ? __update_load_avg_cfs_rq+0x12f/0x1090 [ 474.453652][ T6278] bch2_btree_node_write+0xa5/0x2e0 [ 474.459082][ T6278] __btree_node_flush+0x606/0x680 [ 474.464329][ T6278] ? __btree_node_flush+0xd3/0x680 [ 474.469642][ T6278] ? __pfx_bch2_btree_node_flush1+0x10/0x10 [ 474.475747][ T6278] bch2_btree_node_flush1+0x38/0x60 [ 474.481154][ T6278] journal_flush_pins+0xce6/0x1780 [ 474.486488][ T6278] __bch2_journal_reclaim+0xda8/0x1670 [ 474.492155][ T6278] ? __try_to_del_timer_sync+0x3d3/0x420 [ 474.498048][ T6278] bch2_journal_reclaim_thread+0x18e/0x760 [ 474.504091][ T6278] kthread+0x3e2/0x540 [ 474.508343][ T6278] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 474.514882][ T6278] ? __pfx_kthread+0x10/0x10 [ 474.519659][ T6278] ret_from_fork+0x6d/0x90 [ 474.524268][ T6278] ? __pfx_kthread+0x10/0x10 [ 474.529051][ T6278] ret_from_fork_asm+0x1a/0x30 [ 474.534072][ T6278] [ 474.537486][ T6278] Kernel Offset: disabled [ 474.541934][ T6278] Rebooting in 86400 seconds..