last executing test programs: 3m3.383262676s ago: executing program 0 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sync_file_range(r0, 0x9, 0xec, 0xd) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0x0) 3m2.714974603s ago: executing program 0 (id=42): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xf4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xac, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x437, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x6048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}]}, 0x40}}, 0x4048000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m2.335875972s ago: executing program 0 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x190, 0x0, 0x3, [{{0x4, 0xffffffffffffffff, 0x5cff5576, 0x7ffffffffffffdff, 0x1fff, 0x7ff, {0x3, 0xfffffffffffffffc, 0x3, 0x2, 0x5, 0x2, 0x2, 0x6, 0x7, 0x6000, 0x0, r2, r3, 0x1, 0x3}}, {0x0, 0x7, 0xe1, 0x300, '\x00\xb7\xcar\x02\xa9\xe0q%\x1db\xa06s\x90\x93\x0e\xd0\xbcN`f5\xa1\x04\xdf\xc3\xb94\xf6_\xd6\x9b\xef[x\x86\t\x82\xf4\x0fPs\x195\xcd\xdeh\xb2`*!\xa2\xe5S\x87\v$\xe8\xe5\x15tf\xa5Rx\x8eW\xbb\\ \xa0{[\xe6o\xeev\x9d\xc3\xfc\xaa\xdb\x18\xc9\xc1\xd3QP\x03\xa6\n\"\x0f\xaf\xc9\x04E\xcbf\xf2\xa0m\x83\x8c\xef\x0e\xe3|\xf4v\x14Ul\xd8\xb3\x05\xd0\xd7\xe6\x8e\xc7\xa9[\xa1\x8d\xa61\x93\"\xf9\xcb\n5O\xc2\xf4]\xfb\fB\x996\x13\xe0-\xef\xe8dU\v\x84\xc1H>1BK\x95`\x14\xf9\n\xbe\xbc\t\x05`\xa4\xa8\x1ePi\x11\xaa\xa0\x18\xfc\xc5 V\xdf]\x00\xcb\xf3~p\xdb/\x06\xa8\xc5*Y\x85S\xdb\xf6\xf49\xc6\xa5e\x9d\xee`\xe0\xb7\x84\x95\xd9\xe1$\xf8\xc6\xf5\xd0\xa9K\xd1v\x84-\xd7'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x2e) 3m1.255846518s ago: executing program 0 (id=48): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x808010, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0xc29, &(0x7f0000001940)="$eJzs3U9sHOd5B+D32yEtUm6ateMof5TDAg4QV44NUpQtFnIAKmKIGBBkwRRzMFCAK5FSFyaXFEkVclCkKpCgCNIWKnLIsQKcAL1VpxYIGkA9uUUQgOip6KFQW0dwb5sAaYsezGJ2vyWXtCSylkRS1vMI0m929p3db9Z8uTPrmZ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Eih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7SvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//fHez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fmOgfXs1Ir4YER+ulX8i/mdtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+v2Vu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9ufBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN/9/n2+fApDt713Piy7k8jxej/Hst11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfxYpjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/2+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zl59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/PlI8+3uba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/ZNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/r5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT48+tfynWd3jua73+m/e9G/38/UvzOpzbXvpJrn92oHd7pasFeKvv/HyPF6u1/Xv+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfI//O1gCfN8jvffrs+Nze7ZMKECRPrE3v9mwl41Mrt//+KFF+7XKTufmze/v+tzq2N/f///s7G9v+JLbluj7b/n+2ZdyLvtfT3RQyszC/2fy5iYPmdb7/UmK9fmr002xwZGT3+u8eGjx4f7n+qu3O/MbXj1w4ed2X/vx0pfvLX/7T+Ofbm/f+7f/53cEuu26P+/0zvOm3ar9nxSwFPnLL//ypS/MuND9b/f9P9Pv/rfs73wvObc7BbtEf9/1zPvFr+Z7Rn3gtFxMmdPhcAAAAAAAAAADwmDqYifhYp/qb1D+vXvN98/E98uVvbe/zfveyH6/8DAPdXvv9PRoqfH/xq6n6HzE6O/5/Zkuv26PjfQz3zZnbpvOYdv8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAxpSjiQKR49wetdLsob3cMnG40r1ydGp+4+2KDKVJUomjXl38Hho+OHHvl1eOj3bz/8g/bF+KNyXMna6cW5heXZpeXZ2dqU83GhYWZ2R0/woMuv9WR9gtQm3/7yszFi8u1oy+PbLr7avXOgacPVU+MHh55q1s7NT4xMdlT09f/sZ/9I9LDeyg+QZ6KIn4eKd576YP0b0VEJR68F7b53fGoDUZf2X/tlZgan2ivyFyj3lwp70yVXNUXUe1ZaKzbI7vQiw9kLOJaRFTKAR8pV29ysb5UPz83WztbX1pprDQWmqnSGW25PtWoxGiKWIyIVrHXg2e/6Y8i/jZS3Pl1K/17EVF0++DFM5NvDo1s/wB9uzDIezxttYhYjcegZ2GfOhBFPBcpfjg9FP9RdPqq3TbvR3ylzNciLpd5K8X1fDuVvyBGI37l/QQea31RxNlIsZBa6f0i9357u/L0t2qvNy8udMr+KNrbzvkd9XHfP9hNtk3YxwaiiF+2t/hb6ZfezwEAAAAAAAAAAABgnyvia5Hi5vwLqX1+6Po5pY3mpdq5+vm5zmH93WP/a3mptbW1tWrqZC3nUM6xnGdzTudczHkt5/WcN3LezHkr52rO2zlbOaOSnz9nLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5w3HSAAAAAAAAAAAAAAAAAAA8IpUo4nuR4ke/aaW1onN92eno5G3nucIn2v8FAAD//+X2R4U=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) getuid() mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 3m0.678243101s ago: executing program 0 (id=54): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x23, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x44, r3, 0xb7a006d1969b963b, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 3m0.057699337s ago: executing program 0 (id=58): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x125804, 0x4) 3m0.029085267s ago: executing program 32 (id=58): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x125804, 0x4) 2m27.279324656s ago: executing program 2 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5c, 0x0, &(0x7f0000000640)=[@increfs, @request_death, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x23, 0x0, &(0x7f0000000500)="0a00000100249eed0100000000000000cc1f14f62790590dd25bed76fe8c907eae11aa"}) 2m26.857170745s ago: executing program 2 (id=224): set_mempolicy(0x4005, 0x0, 0x80) unshare(0x26020480) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_init() mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) readahead(r0, 0x2, 0x0) 2m26.465639145s ago: executing program 2 (id=226): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x81, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) 2m23.386442979s ago: executing program 2 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m22.801675924s ago: executing program 2 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0xb}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x5, 0x6, 0x4, 0x804, 0x7, 0xf, 0x120002, 0x2, 0x2, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x800009, 0xffff], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x504c}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m20.729159163s ago: executing program 2 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000180)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x0, 0x0, 0x1, 0x18, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x9, 0x3]}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400102, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m20.571655407s ago: executing program 33 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000180)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x0, 0x0, 0x1, 0x18, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x9, 0x3]}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400102, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m45.228472888s ago: executing program 4 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x7ff}}, @dstopts={{0x20, 0x29, 0x37, {0x6, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdr={{0x18, 0x29, 0x39, {0x5c, 0x0, 0x0, 0x7}}}], 0x68}}], 0x1, 0x8881) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m44.803735048s ago: executing program 4 (id=445): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1m43.745130783s ago: executing program 4 (id=448): prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902"], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 1m40.690256517s ago: executing program 4 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x808812, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x1535, &(0x7f00000034c0)="$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") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_NOTIFY_RESEND(r2, &(0x7f00000000c0)={0x14}, 0x14) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1m40.439367533s ago: executing program 4 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0xa04018, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x7e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x243, 0x0) 1m38.505653119s ago: executing program 4 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x11, 0x10, r5, 0x1, 0x5, 0x6, @link_local}, 0x14) 1m38.198694177s ago: executing program 34 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x11, 0x10, r5, 0x1, 0x5, 0x6, @link_local}, 0x14) 1m0.67754041s ago: executing program 5 (id=734): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) 1m0.433530946s ago: executing program 5 (id=736): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 59.645486254s ago: executing program 5 (id=738): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x80000005, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x8, 0xac, 0x7d, 0x4}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 59.442455059s ago: executing program 5 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 58.340734136s ago: executing program 5 (id=745): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000 client\n', 0x96) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x1, @loopback}, 0x10) write(r2, &(0x7f0000000500)="80000060000000010000000000000002000186a0000000030000000000000006000000010000001800000001000000000000000400000001000000020000000401000000000000060000000000000000000000040000000000000020020100ff00"/124, 0x64) 55.100414614s ago: executing program 5 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) 40.072338825s ago: executing program 35 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) 6.694619789s ago: executing program 6 (id=1018): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/usb-serial/drivers/sierra/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1199 00', 0x7) 6.613475501s ago: executing program 1 (id=1019): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 5.779396331s ago: executing program 6 (id=1021): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x19a) socket$netlink(0x10, 0x3, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07cfc2e1c60de0"], 0x0) 5.721674572s ago: executing program 8 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) 4.55554651s ago: executing program 1 (id=1023): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r3, 0x0, 0xfffffffffffffda0, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) 4.553398751s ago: executing program 8 (id=1025): write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, 0x0, 0x0) 4.389787164s ago: executing program 8 (id=1027): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000009c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x7, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0xa1, 0x0, &(0x7f0000000840)="b828968b2eedcbc1feca7a588518e89ca3b6eec3cc581ad1ab5c58eec8ae9772c689a2d279582afaf202f26f5678b33849886651760eee6768a9706c65440bb759a21b7e0f2d4242b933b98639ebb5526e72baca54bfc5ce8d3c60212e0e7927185c3c177419f4e33da44413698990713f4ae044442ce17056cec44edc544c9cbc409f43122c6b2f1ee88c5d61446a509db0f00a634fd884b4ab44254e2e01a32a"}) 4.301489357s ago: executing program 8 (id=1028): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x1, 0x1, 0xa, 0x2, 0x1, 0x8, 0x1, 0x13, 0x8, 0x2, 0x6, 0x6, 0xe80}, {0x4fe, 0x6, 0x58, 0x40, 0xc, 0x4, 0xa0, 0xfc, 0x4, 0xf7, 0xc0, 0xff, 0x31}, {0x1, 0x1, 0x83, 0x9c, 0x5, 0xad, 0x6, 0x1, 0x3, 0xff, 0xe2, 0xd, 0xff}], 0x10008}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4048044) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xc2283, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f00000001c0)={[{@grpjquota}, {@jqfmt_vfsv0}]}, 0x1, 0x7b0, &(0x7f0000001c00)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x5, 0x1512, &(0x7f0000000740)="$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") ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0xfffffffd, 0x6, 0xef, 0x1, 0x0, "2f3718cb92da1eafff06f5d4dccb1f5b5de0ef"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.925771605s ago: executing program 7 (id=1030): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d8005"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000021c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, '\'*s', 0x44, 0x2f, 0x1, @local, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x3, 0x3, 0x0, 0x1, 0x4, 0x16}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x5, 0x3, 0x1, 0x0, 0x7, 0x5}, 0x2, {0x4d, 0x84f, 0x2, 0x6, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 3.677357892s ago: executing program 7 (id=1032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, 0xc, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}}, 0x4) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000002060500000000000000000000fffefc05000400000000000900020073797a310000000010000300686173683a69702c6d61630005000500020000000500010006"], 0x48}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 3.597622074s ago: executing program 8 (id=1033): r0 = socket$inet(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r1], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 3.597439723s ago: executing program 1 (id=1034): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.622358317s ago: executing program 7 (id=1035): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf7", 0x10}, {&(0x7f00000022c0)="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", 0x268}], 0x2}, 0x4000000) 2.265697386s ago: executing program 8 (id=1036): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000000)=ANY=[], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) creat(&(0x7f0000000140)='./bus\x00', 0x0) 2.201677707s ago: executing program 3 (id=1037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) flock(r3, 0x5) 2.201408897s ago: executing program 1 (id=1038): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file7\x00', 0x4000, &(0x7f0000000ac0)=ANY=[], 0x1, 0x1ff, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x181) mkdirat(0xffffffffffffff9c, 0x0, 0x180) 2.046965041s ago: executing program 6 (id=1039): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 1.892997334s ago: executing program 7 (id=1040): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r2, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x200000000622c, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd08, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x2000c010) 1.165577372s ago: executing program 3 (id=1041): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa0}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14400000000000fb40bf8ab24f3720002b00020700000000"], 0x14}, 0x40c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 805.621871ms ago: executing program 3 (id=1042): r0 = socket(0x1e, 0xa, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x400123a0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x40}, 0x8000) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}, @handle=@pci={{0x8}, {0x11}}]}, 0x34}}, 0x4044880) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'fo\x00', 0x11, 0x10000004, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x2a020400) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x0, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 755.320062ms ago: executing program 3 (id=1043): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(0xfffffffffffffffd, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r1, 0x1269, &(0x7f0000000200)={0x1}) 727.872763ms ago: executing program 6 (id=1044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffff8c05, 0x7, 0x6, 0x9, 0xfffffffa}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 641.612985ms ago: executing program 1 (id=1045): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000005c0), 0xffffffff, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) write$tun(r1, &(0x7f00000007c0)=ANY=[], 0xfdef) 618.912155ms ago: executing program 3 (id=1046): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 472.656458ms ago: executing program 6 (id=1047): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20001a, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x221100, 0x240, 0x806, 0x40, 0x548c, 0x0, 0x0, 0x40, 0x7f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000001c0)={0x0, 0xa}, 0x1001) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 425.55269ms ago: executing program 3 (id=1048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x803}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 180.331116ms ago: executing program 6 (id=1049): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c0000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8004) ptrace$cont(0x18, r2, 0x5, 0x1) r4 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) 132.608737ms ago: executing program 7 (id=1050): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) 49.560759ms ago: executing program 1 (id=1051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000001, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 7 (id=1052): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2a}, 0x94) kernel console output (not intermixed with test programs): T filesystem [ 144.027363][ T6007] CPU: 0 PID: 6007 Comm: syz.5.371 Not tainted syzkaller #0 [ 144.034760][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 144.044869][ T6007] Call Trace: [ 144.048191][ T6007] [ 144.051155][ T6007] dump_stack_lvl+0x188/0x250 [ 144.055874][ T6007] ? __rwlock_init+0x140/0x140 [ 144.060798][ T6007] ? show_regs_print_info+0x20/0x20 [ 144.066052][ T6007] ? load_image+0x410/0x410 [ 144.070604][ T6007] ? do_raw_spin_unlock+0x11d/0x230 [ 144.075853][ T6007] ? _raw_spin_unlock+0x24/0x40 [ 144.080769][ T6007] p9_client_clunk+0x2a9/0x380 [ 144.085585][ T6007] ? v9fs_statfs+0xb4/0x380 [ 144.090166][ T6007] v9fs_statfs+0x1b7/0x380 [ 144.094641][ T6007] ? v9fs_drop_inode+0x130/0x130 [ 144.099643][ T6007] ? ovl_mount_dir+0x1f6/0x2b0 [ 144.104462][ T6007] ? kfree+0xef/0x2a0 [ 144.108498][ T6007] vfs_statfs+0x13d/0x2c0 [ 144.112875][ T6007] ovl_get_upper+0x1c0/0x600 [ 144.117512][ T6007] ? ovl_fill_super+0x42a0/0x42a0 [ 144.122823][ T6007] ovl_fill_super+0x152c/0x42a0 [ 144.127774][ T6007] ? ovl_mount+0x30/0x30 [ 144.132059][ T6007] ? __lock_acquire+0x7b50/0x7b50 [ 144.137133][ T6007] ? rwsem_write_trylock+0x135/0x1c0 [ 144.142497][ T6007] ? clear_nonspinnable+0x60/0x60 [ 144.147573][ T6007] ? __lock_acquire+0x7b50/0x7b50 [ 144.152681][ T6007] ? __rwlock_init+0x140/0x140 [ 144.157498][ T6007] ? strlcpy+0x83/0xc0 [ 144.161632][ T6007] ? free_anon_bdev+0x20/0x20 [ 144.166359][ T6007] ? ovl_mount+0x30/0x30 [ 144.170677][ T6007] mount_nodev+0x52/0xe0 [ 144.174975][ T6007] legacy_get_tree+0xe6/0x180 [ 144.179690][ T6007] ? virtio_fs_zero_page_range+0x120/0x120 [ 144.185551][ T6007] vfs_get_tree+0x88/0x270 [ 144.190028][ T6007] do_new_mount+0x247/0xa40 [ 144.194585][ T6007] __se_sys_mount+0x2e3/0x3d0 [ 144.199318][ T6007] ? __x64_sys_mount+0xc0/0xc0 [ 144.204131][ T6007] ? lockdep_hardirqs_on+0x94/0x140 [ 144.209370][ T6007] ? __x64_sys_mount+0x1c/0xc0 [ 144.214179][ T6007] do_syscall_64+0x4c/0xa0 [ 144.218634][ T6007] ? clear_bhb_loop+0x30/0x80 [ 144.223349][ T6007] ? clear_bhb_loop+0x30/0x80 [ 144.228067][ T6007] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.234020][ T6007] RIP: 0033:0x7f74a086be99 [ 144.238478][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.258126][ T6007] RSP: 002b:00007f749eac4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.266619][ T6007] RAX: ffffffffffffffda RBX: 00007f74a0af3fa0 RCX: 00007f74a086be99 [ 144.274639][ T6007] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 144.282659][ T6007] RBP: 00007f74a0901eaf R08: 0000200000000200 R09: 0000000000000000 [ 144.290670][ T6007] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 144.298686][ T6007] R13: 00007f74a0af4038 R14: 00007f74a0af3fa0 R15: 00007ffd40928138 [ 144.306723][ T6007] [ 144.343255][ T6013] loop4: detected capacity change from 0 to 256 [ 144.350932][ T6007] overlayfs: statfs failed on './file0' [ 144.379955][ T6013] FAT-fs (loop4): bogus number of FAT sectors [ 144.386117][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 144.412816][ T6013] FAT-fs (loop4): Can't find a valid FAT filesystem [ 144.702919][ T6024] binder: BINDER_SET_CONTEXT_MGR already set [ 144.822884][ T6024] binder: 6023:6024 ioctl 4018620d 200000004a80 returned -16 [ 144.833584][ T6029] loop4: detected capacity change from 0 to 512 [ 144.887891][ T6029] EXT4-fs (loop4): Ignoring removed oldalloc option [ 144.963786][ T6029] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 144.986614][ T154] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 146.535678][ T6062] loop6: detected capacity change from 0 to 512 [ 146.595722][ T6062] EXT4-fs (loop6): Ignoring removed nobh option [ 146.623215][ T6062] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.757034][ T6062] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.384: invalid block [ 146.803128][ T6062] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.384: invalid indirect mapped block 4294967295 (level 1) [ 146.827455][ T6062] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.384: invalid indirect mapped block 4294967295 (level 1) [ 146.852592][ T6062] EXT4-fs (loop6): 2 truncates cleaned up [ 146.889867][ T6062] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,min_batch_time=0x0000000000000007,dioread_nolock,delalloc,,errors=continue. Quota mode: writeback. [ 147.011310][ T6083] validate_nla: 44 callbacks suppressed [ 147.011329][ T6083] netlink: 'syz.1.392': attribute type 13 has an invalid length. [ 147.052462][ T6083] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.066832][ T6083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.077782][ T6083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.122706][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 147.508331][ T26] audit: type=1326 audit(1785693582.009:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.1.397" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f473c4a9e99 code=0x0 [ 147.560556][ T6102] kvm: emulating exchange as write [ 147.775137][ T6106] loop4: detected capacity change from 0 to 32768 [ 147.801778][ T6105] loop6: detected capacity change from 0 to 1024 [ 147.854820][ T6106] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.399 (6106) [ 147.907966][ T6106] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 147.917729][ T6106] BTRFS info (device loop4): setting nodatasum [ 147.923967][ T6106] BTRFS info (device loop4): force zlib compression, level 3 [ 147.932880][ T6106] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 147.942598][ T6106] BTRFS info (device loop4): use lzo compression, level 0 [ 147.949969][ T6106] BTRFS info (device loop4): turning on flush-on-commit [ 147.952336][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 147.957133][ T6106] BTRFS info (device loop4): enabling auto defrag [ 147.972349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 147.972900][ T6106] BTRFS info (device loop4): max_inline at 4096 [ 147.982251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 147.987901][ T6106] BTRFS info (device loop4): using free space tree [ 148.002415][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 148.003430][ T6106] BTRFS info (device loop4): has skinny extents [ 148.161841][ T6106] BTRFS info (device loop4): enabling ssd optimizations [ 148.227773][ T26] audit: type=1800 audit(1785693582.730:12): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.399" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 148.385116][ T6126] BTRFS info (device loop4): scrub: started on devid 1 [ 148.550636][ T6126] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 148.928262][ T6134] block device autoloading is deprecated and will be removed. [ 149.117802][ T6143] loop3: detected capacity change from 0 to 128 [ 149.644080][ T6132] loop1: detected capacity change from 0 to 32768 [ 149.701781][ T4374] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (4374) [ 149.884152][ T6132] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.402 (6132) [ 149.965647][ T6161] binder: 6160:6161 ioctl c0306201 200000000180 returned -14 [ 150.104092][ T6174] loop3: detected capacity change from 0 to 256 [ 150.113659][ T6132] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 150.171246][ T6132] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 150.199320][ T6176] overlayfs: metacopy with no lower data found - abort lookup (/file0) [ 150.221408][ T6132] BTRFS info (device loop1): use zstd compression, level 3 [ 150.228799][ T6132] BTRFS info (device loop1): using free space tree [ 150.252121][ T6174] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04ab0af5, utbl_chksum : 0xe619d30d) [ 150.305717][ T6132] BTRFS info (device loop1): has skinny extents [ 150.617076][ T6132] BTRFS info (device loop1): enabling ssd optimizations [ 150.731061][ T6158] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.840942][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 150.944158][ T6217] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 151.153221][ T6158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.190924][ T6158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.211372][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.220915][ T6158] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.232536][ T21] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 151.263136][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.276408][ T6158] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.298797][ T21] usb 4-1: config 0 descriptor?? [ 151.326902][ T6158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.366476][ T6158] usb 5-1: config 0 descriptor?? [ 151.414295][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 151.830826][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 151.863533][ T6158] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 151.871335][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 151.893309][ T6158] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 151.910802][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 151.980848][ T21] pwc: recv_control_msg error -32 req 04 val 1000 [ 152.043871][ T21] pwc: recv_control_msg error -32 req 04 val 1300 [ 152.090552][ T21] pwc: recv_control_msg error -32 req 04 val 1400 [ 152.132470][ T21] pwc: recv_control_msg error -32 req 02 val 2000 [ 152.268850][ T6245] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 152.294136][ T6157] usb 5-1: USB disconnect, device number 8 [ 152.310962][ T6254] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -19 [ 152.400422][ T21] pwc: recv_control_msg error -71 req 04 val 1500 [ 152.430539][ T21] pwc: recv_control_msg error -71 req 02 val 2500 [ 152.450980][ T21] pwc: recv_control_msg error -71 req 02 val 2400 [ 152.470380][ T21] pwc: recv_control_msg error -71 req 02 val 2600 [ 152.500609][ T21] pwc: recv_control_msg error -71 req 02 val 2900 [ 152.527776][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 152.550564][ T6245] usb 2-1: Using ep0 maxpacket: 16 [ 152.571855][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 152.587373][ T6259] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 152.595779][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 152.609582][ T21] pwc: Registered as video103. [ 152.620876][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 152.630562][ T6259] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 152.682412][ T21] usb 4-1: USB disconnect, device number 9 [ 152.703560][ T6245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 152.920434][ T6245] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 152.941015][ T6245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.981553][ T6245] usb 2-1: Product: syz [ 152.997000][ T6245] usb 2-1: Manufacturer: syz [ 153.005400][ T6245] usb 2-1: SerialNumber: syz [ 153.059055][ T6245] usb 2-1: config 0 descriptor?? [ 153.102771][ T6245] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 153.144770][ T6245] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 153.330010][ T6243] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 153.564861][ T6307] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.630164][ T6243] usb 6-1: Using ep0 maxpacket: 8 [ 153.750993][ T6245] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 153.803006][ T6312] [ 153.940054][ T6243] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 153.962765][ T6243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.997480][ T6243] usb 6-1: Product: syz [ 154.006876][ T6243] usb 6-1: Manufacturer: syz [ 154.011979][ T6243] usb 6-1: SerialNumber: syz [ 154.032558][ T6243] usb 6-1: config 0 descriptor?? [ 154.289853][ T6243] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 154.434189][ T6335] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.509703][ T6245] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 154.519162][ T6245] em28xx 2-1:0.0: board has no eeprom [ 154.889627][ T6245] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 154.897516][ T6245] em28xx 2-1:0.0: dvb set to bulk mode. [ 154.926735][ T6245] usb 2-1: USB disconnect, device number 8 [ 154.953954][ T6245] em28xx 2-1:0.0: Disconnecting em28xx [ 154.997868][ T6158] em28xx 2-1:0.0: Binding DVB extension [ 155.111821][ T6158] em28xx 2-1:0.0: Registering input extension [ 155.122918][ T6245] em28xx 2-1:0.0: Closing input extension [ 155.159925][ T6245] em28xx 2-1:0.0: Freeing device [ 155.281303][ T6331] loop6: detected capacity change from 0 to 32768 [ 155.432195][ T6331] XFS (loop6): Mounting V5 Filesystem [ 155.617299][ T6331] XFS (loop6): Ending clean mount [ 155.819410][ T6245] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.856491][ T5403] XFS (loop6): Unmounting Filesystem [ 156.089449][ T6245] usb 2-1: Using ep0 maxpacket: 32 [ 156.229619][ T6245] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 156.237870][ T6245] usb 2-1: config 0 has no interface number 0 [ 156.249930][ T6245] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 156.262133][ T6245] usb 2-1: config 0 interface 89 has no altsetting 0 [ 156.283581][ T6400] file system registered [ 156.296662][ T6391] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 156.307196][ T6391] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 156.317972][ T6400] read descriptors [ 156.342508][ T4198] ffs_data_put(): freeing [ 156.394846][ T6243] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 156.414076][ T6243] dvbdev: DVB: registering new adapter (Terratec H7) [ 156.424440][ T6243] usb 6-1: media controller created [ 156.469357][ T6245] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 156.478662][ T6243] usb 6-1: dvb_usb_v2: MAC address: de:c4:d5:d6:00:00 [ 156.489618][ T6245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.508084][ T6245] usb 2-1: Product: syz [ 156.516023][ T6243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.528041][ T6245] usb 2-1: Manufacturer: syz [ 156.533378][ T6245] usb 2-1: SerialNumber: syz [ 156.570146][ T6245] usb 2-1: config 0 descriptor?? [ 156.713843][ T6245] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 156.838131][ T6245] em28xx 2-1:0.89: Video interface 89 found: [ 157.259279][ T6409] x_tables: ip_tables: osf match: only valid for protocol 6 [ 157.422259][ T6243] DVB: Unable to find symbol drxk_attach() [ 157.498764][ T6245] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 157.527299][ T6243] dvb_usb_az6007: probe of 6-1:0.0 failed with error -22 [ 157.601579][ T6243] usb 6-1: USB disconnect, device number 6 [ 157.898761][ T6158] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 158.144151][ T6430] loop6: detected capacity change from 0 to 512 [ 158.223888][ T6430] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.452: inode has both inline data and extents flags [ 158.239590][ T6430] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.452: couldn't read orphan inode 15 (err -117) [ 158.252973][ T6430] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 158.311623][ T6434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.453'. [ 158.328781][ T6158] usb 5-1: config 0 has no interfaces? [ 158.511385][ T6158] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 158.538683][ T6158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.567996][ T6158] usb 5-1: Product: syz [ 158.582919][ T6158] usb 5-1: Manufacturer: syz [ 158.587756][ T6158] usb 5-1: SerialNumber: syz [ 158.635660][ T6440] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.656720][ T6158] usb 5-1: config 0 descriptor?? [ 158.678431][ T6245] em28xx 2-1:0.89: AC97 command still being executed: not handled properly! [ 158.875568][ T6245] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 158.904811][ T6245] em28xx 2-1:0.89: board has no eeprom [ 159.021232][ T5403] ffs_data_put(): freeing [ 159.056708][ T6245] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 159.074437][ T6245] em28xx 2-1:0.89: analog set to bulk mode. [ 159.124986][ T6245] usb 2-1: USB disconnect, device number 9 [ 159.154404][ T6245] em28xx 2-1:0.89: Disconnecting em28xx [ 159.195523][ T6153] em28xx 2-1:0.89: Registering V4L2 extension [ 159.276401][ T6153] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 159.286977][ T6153] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 159.310136][ T6153] em28xx 2-1:0.89: No AC97 audio processor [ 159.342486][ T6153] usb 2-1: Decoder not found [ 159.361936][ T6153] em28xx 2-1:0.89: failed to create media graph [ 159.378261][ T6153] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 159.398798][ T6153] em28xx 2-1:0.89: Registering snapshot button... [ 159.432085][ T6153] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input14 [ 159.532485][ T6153] em28xx 2-1:0.89: Remote control support is not available for this card. [ 159.561601][ T6245] em28xx 2-1:0.89: Closing input extension [ 159.570046][ T6245] em28xx 2-1:0.89: Deregistering snapshot button [ 159.650895][ T6245] em28xx 2-1:0.89: Freeing device [ 159.811969][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 160.071836][ T6461] loop5: detected capacity change from 0 to 256 [ 160.114779][ T6461] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.127725][ T6461] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 160.146889][ T6461] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 160.326996][ T6468] VFS: Mount too revealing [ 160.550175][ T6157] usb 5-1: USB disconnect, device number 9 [ 160.650215][ T6480] loop4: detected capacity change from 0 to 256 [ 160.722385][ T6480] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 160.922419][ T6483] loop1: detected capacity change from 0 to 1024 [ 160.967418][ T6483] EXT4-fs (loop1): Ignoring removed bh option [ 161.036795][ T6483] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,max_dir_size_kb=0x0000000000000003,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 161.384751][ T26] audit: type=1800 audit(1785693595.884:13): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.467" name="/" dev="fuse" ino=9 res=0 errno=0 [ 161.406536][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.509982][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.636932][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.747479][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.807628][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 161.827643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 161.837615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 162.180817][ T144] tipc: Disabling bearer [ 162.203094][ T144] tipc: Left network mode [ 162.463556][ T6500] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 162.482207][ T6500] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 163.155956][ T144] device hsr_slave_0 left promiscuous mode [ 163.186449][ T144] device hsr_slave_1 left promiscuous mode [ 163.202943][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.223123][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.250373][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.273189][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.302879][ T144] device bridge_slave_1 left promiscuous mode [ 163.325908][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.362288][ T144] device bridge_slave_0 left promiscuous mode [ 163.376979][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.541754][ T144] device veth1_macvtap left promiscuous mode [ 163.590861][ T144] device veth0_macvtap left promiscuous mode [ 163.652869][ T144] device veth1_vlan left promiscuous mode [ 163.678247][ T144] device veth0_vlan left promiscuous mode [ 163.909436][ T6526] loop1: detected capacity change from 0 to 128 [ 163.981512][ T6526] kvm: pic: non byte write [ 164.270373][ T6157] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 164.304065][ T6538] binder: 6537:6538 unknown command 0 [ 164.334087][ T6538] binder: 6537:6538 ioctl c0306201 200000004a40 returned -22 [ 164.478668][ T6542] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 164.533469][ T144] team0 (unregistering): Port device team_slave_1 removed [ 164.584679][ T144] team0 (unregistering): Port device team_slave_0 removed [ 164.628462][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.657435][ T6157] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.701766][ T6157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.713337][ T6157] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.730741][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.915198][ T6157] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 164.925796][ T6157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.934570][ T6157] usb 7-1: Product: syz [ 164.947299][ T6157] usb 7-1: Manufacturer: syz [ 164.952322][ T6157] usb 7-1: SerialNumber: syz [ 164.987809][ T6157] usb 7-1: config 0 descriptor?? [ 165.009772][ T144] bond0 (unregistering): Released all slaves [ 165.642928][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 165.651215][ T6566] overlayfs: filesystem on './file0' not supported as upperdir [ 165.757002][ T6153] Bluetooth: hci1: command 0x0409 tx timeout [ 165.788507][ T6153] usb 7-1: USB disconnect, device number 3 [ 166.995499][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.009022][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.023614][ T6517] device bridge_slave_0 entered promiscuous mode [ 167.097054][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.124641][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.146187][ T6517] device bridge_slave_1 entered promiscuous mode [ 167.315763][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.344493][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.489776][ T6517] team0: Port device team_slave_0 added [ 167.530107][ T6517] team0: Port device team_slave_1 added [ 167.611637][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.629614][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.701482][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.826682][ T6153] Bluetooth: hci1: command 0x041b tx timeout [ 168.067161][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.080619][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.150130][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.320601][ T6517] device hsr_slave_0 entered promiscuous mode [ 168.382911][ T6517] device hsr_slave_1 entered promiscuous mode [ 168.395162][ T6517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.406582][ T6517] Cannot create hsr debugfs directory [ 168.414696][ T6633] ffs_data_put(): freeing [ 168.582537][ T6636] loop6: detected capacity change from 0 to 8 [ 168.658359][ T6636] squashfs image failed sanity check [ 168.872651][ T6517] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 168.891761][ T6517] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 168.913474][ T6517] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 168.947437][ T6517] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 169.136541][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.204619][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.271796][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.296276][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.329917][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.396977][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.427164][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.434295][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.462869][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.551171][ T6661] device bond1 entered promiscuous mode [ 169.597567][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.628920][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.677046][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.684175][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.795638][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.844798][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.906834][ T6245] Bluetooth: hci1: command 0x040f tx timeout [ 169.981893][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.056965][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.108019][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.170473][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.240451][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.293144][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.343424][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.413966][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.470189][ T6517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.524357][ T6058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.552917][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.579212][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.673833][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.984870][ T6709] pit: kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 171.994185][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 172.016459][ T6157] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 172.056858][ T6709] pit: kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 172.096707][ T6709] pit: kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 172.134233][ T6709] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 172.149319][ T6709] pit: kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 172.166795][ T6709] pit: kvm: requested 41066 ns i8254 timer period limited to 200000 ns [ 172.186477][ T6709] pit: kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 172.211280][ T6709] pit: kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 172.248378][ T6709] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 172.276554][ T6709] pit: kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 172.478152][ T6157] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.568737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.577499][ T6157] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 172.605448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.663404][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.688151][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.730926][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.773093][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.907020][ T6517] device veth0_vlan entered promiscuous mode [ 172.926253][ T6157] usb 2-1: string descriptor 0 read error: -22 [ 172.938029][ T6157] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 173.108119][ T6157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.333653][ T6517] device veth1_vlan entered promiscuous mode [ 173.596675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.841440][ T6157] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 173.900845][ T6760] loop5: detected capacity change from 0 to 256 [ 173.966712][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.976152][ T6157] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 174.034107][ T6771] binder: 6770:6771 ioctl c0306201 200000000080 returned -14 [ 174.052513][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.078133][ T6517] device veth0_macvtap entered promiscuous mode [ 174.079763][ T6771] binder: 6770:6771 ioctl c0306201 2000000003c0 returned -14 [ 174.092797][ T6760] FAT-fs (loop5): Directory bread(block 64) failed [ 174.102313][ T6760] FAT-fs (loop5): Directory bread(block 65) failed [ 174.131505][ T6760] FAT-fs (loop5): Directory bread(block 66) failed [ 174.139700][ T6517] device veth1_macvtap entered promiscuous mode [ 174.144046][ T6157] usb 2-1: USB disconnect, device number 10 [ 174.174140][ T6760] FAT-fs (loop5): Directory bread(block 67) failed [ 174.223053][ T6760] FAT-fs (loop5): Directory bread(block 68) failed [ 174.234361][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.259699][ T6760] FAT-fs (loop5): Directory bread(block 69) failed [ 174.289152][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.319752][ T6760] FAT-fs (loop5): Directory bread(block 70) failed [ 174.345933][ T6760] FAT-fs (loop5): Directory bread(block 71) failed [ 174.353885][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.378769][ T6760] FAT-fs (loop5): Directory bread(block 72) failed [ 174.395590][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.415154][ T6760] FAT-fs (loop5): Directory bread(block 73) failed [ 174.424625][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.446038][ T4374] udevd[4374]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.475889][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.541577][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.583266][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.607964][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.626001][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.653041][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.666589][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.687042][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.700869][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.752012][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.779296][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.801766][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.814250][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.835844][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.860815][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.886029][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.907837][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.930228][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.947470][ T6054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.030930][ T6517] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.065781][ T6517] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.091014][ T6517] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.118469][ T6517] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.467956][ T6054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.501313][ T6829] loop6: detected capacity change from 0 to 512 [ 176.521901][ T6054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.546280][ T6058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.554154][ T6058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.567470][ T6831] binder: 6825:6831 ioctl c0306201 2000000003c0 returned -14 [ 176.600975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.621017][ T6829] EXT4-fs (loop6): inline encryption not supported [ 176.635025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.643162][ T6829] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 176.743998][ T6829] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 176.760346][ T6829] EXT4-fs (loop6): 1 truncate cleaned up [ 176.766467][ T6829] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000003,discard,,errors=continue. Quota mode: none. [ 177.828111][ T6887] device syzkaller0 entered promiscuous mode [ 178.315876][ T6880] loop7: detected capacity change from 0 to 32768 [ 178.453752][ T6880] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 178.593750][ T6920] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 178.613133][ T26] audit: type=1800 audit(1785693613.116:14): pid=6880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.558" name="file1" dev="loop7" ino=17060 res=0 errno=0 [ 178.653903][ T6890] loop6: detected capacity change from 0 to 32768 [ 178.694096][ T26] audit: type=1800 audit(1785693613.156:15): pid=6880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.558" name="file1" dev="loop7" ino=17060 res=0 errno=0 [ 178.789525][ T6920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.836077][ T6890] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 178.903187][ T6927] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.949475][ T6890] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 178.979393][ T6517] ocfs2: Unmounting device (7,7) on (node local) [ 179.005901][ T6922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.041785][ T6922] bond1: (slave bond2): Enslaving as a backup interface with a down link [ 179.997301][ T6890] syz.6.559 (6890) used greatest stack depth: 18304 bytes left [ 180.480029][ T5403] ocfs2: Unmounting device (7,6) on (node local) [ 182.358714][ T6987] overlayfs: failed to clone upperpath [ 182.541392][ T4269] usb 1-1: USB disconnect, device number 3 [ 182.673825][ T6994] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 182.702001][ T6994] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 182.741366][ T6245] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 183.035459][ T6245] usb 2-1: Using ep0 maxpacket: 16 [ 183.156637][ T6245] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.192323][ T6245] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.385513][ T6245] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.405332][ T6245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.441016][ T6245] usb 2-1: Product: syz [ 183.463833][ T6245] usb 2-1: Manufacturer: syz [ 183.477978][ T6245] usb 2-1: SerialNumber: syz [ 183.866376][ T6245] usb 2-1: 0:2 : does not exist [ 183.908707][ T7048] kvm: pic: non byte write [ 183.932730][ T6245] usb 2-1: USB disconnect, device number 11 [ 184.157028][ T7053] dummy_hcd dummy_hcd.0: remove, state 4 [ 184.184641][ T7053] usb usb1: USB disconnect, device number 1 [ 184.286783][ T4374] udevd[4374]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.331431][ T7053] dummy_hcd dummy_hcd.0: stopped [ 184.357111][ T7053] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 184.379081][ T7054] loop7: detected capacity change from 0 to 4096 [ 184.459780][ T7066] device syzkaller0 entered promiscuous mode [ 184.473458][ T7057] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 184.615013][ T7057] dummy_hcd dummy_hcd.0: Dummy host controller [ 184.656557][ T7054] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 184.757642][ T7057] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 184.834796][ T7057] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.15 [ 184.860992][ T7082] loop5: detected capacity change from 0 to 512 [ 184.880651][ T7057] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 184.906967][ T7057] usb usb1: Product: Dummy host controller [ 184.939421][ T7082] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.956776][ T7057] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 184.963737][ T7057] usb usb1: SerialNumber: dummy_hcd.0 [ 184.984803][ T7082] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 185.015563][ T7057] hub 1-0:1.0: USB hub found [ 185.032359][ T7057] hub 1-0:1.0: 1 port detected [ 185.109796][ T7082] EXT4-fs (loop5): 1 truncate cleaned up [ 185.135304][ T7082] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 185.156617][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.244195][ T6517] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 185.309308][ T7103] overlayfs: failed to clone upperpath [ 185.763926][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.7.610'. [ 186.108930][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'. [ 186.125957][ T7129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.836665][ T7195] kvm: pic: single mode not supported [ 187.839847][ T7195] kvm: pic: single mode not supported [ 187.845468][ T7195] kvm: pic: level sensitive irq not supported [ 187.864594][ T7195] kvm: pic: level sensitive irq not supported [ 187.881986][ T7195] kvm: pic: single mode not supported [ 187.888359][ T7195] kvm: pic: level sensitive irq not supported [ 187.910687][ T7195] kvm: pic: level sensitive irq not supported [ 187.947032][ T7195] kvm: pic: single mode not supported [ 187.953249][ T7195] kvm: pic: level sensitive irq not supported [ 187.968646][ T7195] kvm: pic: level sensitive irq not supported [ 187.975692][ T7195] kvm: pic: single mode not supported [ 187.982622][ T7195] kvm: pic: single mode not supported [ 187.988324][ T7195] kvm: pic: level sensitive irq not supported [ 188.012543][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.630'. [ 188.016035][ T7195] kvm: pic: single mode not supported [ 188.028033][ T7195] kvm: pic: level sensitive irq not supported [ 188.044710][ T7195] kvm: pic: single mode not supported [ 188.051062][ T7195] kvm: pic: level sensitive irq not supported [ 188.067578][ T7195] kvm: pic: single mode not supported [ 188.073779][ T7195] kvm: pic: level sensitive irq not supported [ 188.466422][ T7211] overlayfs: failed to verify origin (13/file1, ino=114, err=-116) [ 188.531977][ T7211] overlayfs: failed to verify origin (13/file1, ino=114, err=-116) [ 189.144288][ T7231] device syzkaller0 entered promiscuous mode [ 189.506222][ T7235] Illegal XDP return value 4294967274, expect packet loss! [ 189.539920][ T7237] loop5: detected capacity change from 0 to 512 [ 189.597418][ T7237] EXT4-fs (loop5): Test dummy encryption mode enabled [ 189.644291][ T7237] EXT4-fs (loop5): Ignoring removed oldalloc option [ 189.681045][ T7239] device syzkaller0 entered promiscuous mode [ 189.693607][ T7237] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 189.818502][ T7237] EXT4-fs (loop5): Cannot change journaled quota options when quota turned on [ 189.965487][ T7247] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.192116][ T7251] loop7: detected capacity change from 0 to 512 [ 190.724986][ T5559] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 190.785341][ T6245] Bluetooth: hci4: command 0x0406 tx timeout [ 190.832361][ T7276] netlink: 10 bytes leftover after parsing attributes in process `syz.1.657'. [ 191.105090][ T5559] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 191.114019][ T5559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.124463][ T5559] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 191.947018][ T5559] usb 6-1: config 1 has no interface number 0 [ 191.964426][ T5559] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 192.084895][ T5559] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 192.255222][ T5559] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.284900][ T5559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.315169][ T5559] usb 6-1: Product: syz [ 192.319405][ T5559] usb 6-1: Manufacturer: syz [ 192.324033][ T5559] usb 6-1: SerialNumber: syz [ 192.768803][ T7318] create_pit_timer: 25 callbacks suppressed [ 192.768820][ T7318] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 193.458474][ T5559] usb 6-1: USB disconnect, device number 7 [ 193.837823][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.844225][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.115792][ T7365] using random self ethernet address [ 194.139905][ T7365] using random host ethernet address [ 194.176010][ T7365] configfs-gadget gadget: uvc: uvc_function_bind() [ 194.190960][ T7362] netlink: 10 bytes leftover after parsing attributes in process `syz.5.680'. [ 194.199958][ T7365] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 194.200897][ T7365] udc dummy_udc.0: failed to start g1: -22 [ 194.271513][ T7369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.392124][ T7376] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.406891][ T7376] loop5: detected capacity change from 0 to 128 [ 194.476688][ T7376] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 194.902910][ T7398] IPVS: rr: FWM 3 0x00000003 - no destination available [ 195.124079][ T7410] loop1: detected capacity change from 0 to 512 [ 195.220368][ T7410] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 195.353298][ T7410] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,quota,quota,stripe=0x0000000000000004,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 195.453368][ T7410] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.474221][ T26] audit: type=1800 audit(1785693629.977:16): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.700" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 195.570151][ T26] audit: type=1804 audit(1785693630.077:17): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.700" name="/newroot/126/bus/file1" dev="loop1" ino=15 res=1 errno=0 [ 195.606244][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'. [ 196.123357][ T7428] loop5: detected capacity change from 0 to 32768 [ 196.618023][ T26] audit: type=1800 audit(1785693631.117:18): pid=7442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.704" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 197.288800][ T7457] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 197.383584][ T7451] blk_update_request: I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 197.401291][ T7451] EXT4-fs (loop6): unable to read superblock [ 198.476512][ T7470] kvm: pic: non byte write [ 198.728545][ T7478] device bond0 entered promiscuous mode [ 198.805879][ T7478] device bond_slave_0 entered promiscuous mode [ 198.859555][ T7478] device bond_slave_1 entered promiscuous mode [ 198.910450][ T7478] device batadv0 entered promiscuous mode [ 198.943836][ T7478] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 199.023111][ T7478] device bond0 left promiscuous mode [ 199.048936][ T7478] device bond_slave_0 left promiscuous mode [ 199.065081][ T7478] device bond_slave_1 left promiscuous mode [ 199.082982][ T7478] device batadv0 left promiscuous mode [ 200.593699][ T7528] device ip6gre1 entered promiscuous mode [ 200.928238][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 201.985503][ T6158] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 202.692912][ T7564] input: syz0 as /devices/virtual/input/input15 [ 202.810588][ T7564] input: failed to attach handler leds to device input15, error: -6 [ 203.065600][ T6158] usb 7-1: Using ep0 maxpacket: 32 [ 203.185289][ T6158] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 203.236698][ T6158] usb 7-1: config 0 has no interface number 0 [ 203.328092][ T6158] usb 7-1: config 0 interface 184 has no altsetting 0 [ 203.625302][ T6158] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 203.680232][ T6158] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.830543][ T6158] usb 7-1: Product: syz [ 203.899750][ T6158] usb 7-1: Manufacturer: syz [ 203.958000][ T6158] usb 7-1: SerialNumber: syz [ 204.016919][ T6158] usb 7-1: config 0 descriptor?? [ 204.085656][ T6158] smsc75xx v1.0.0 [ 204.129947][ T7599] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 204.162324][ T7599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.182790][ T7599] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 204.282739][ T7599] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 204.306286][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 204.334387][ T7599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.384865][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 204.514941][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 204.536063][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 204.711370][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 204.775057][ T6158] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 204.786288][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 204.793914][ T6158] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 204.897574][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 204.989145][ T144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 205.228277][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 205.260694][ T144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 205.509164][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 205.521690][ T144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 205.583029][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.762'. [ 205.654904][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 205.663094][ T144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 205.809048][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 205.855303][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 206.026594][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 206.134608][ T144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 206.370957][ T6158] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 206.929909][ T6158] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 206.997582][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 207.019897][ T6158] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 207.044612][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.063177][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 207.067444][ T6158] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 207.140945][ T6158] usb 7-1: USB disconnect, device number 4 [ 207.192857][ T7680] loop6: detected capacity change from 0 to 512 [ 207.200017][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.276987][ T7680] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 207.351710][ T7680] EXT4-fs (loop6): 1 truncate cleaned up [ 207.357717][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.378034][ T7680] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.540114][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.815637][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.837198][ T7680] EXT4-fs warning (device loop6): ext4_dirblock_csum_set:427: inode #2: comm syz.6.772: No space for directory leaf checksum. Please run e2fsck -D. [ 208.034820][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 208.194685][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 208.315817][ T4374] udevd[4374]: incorrect ext4 checksum on /dev/loop6 [ 208.454732][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 208.493086][ T4374] udevd[4374]: incorrect ext4 checksum on /dev/loop6 [ 208.564918][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 208.585316][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 208.675086][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 208.788864][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 208.924665][ T6243] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 208.929393][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 209.025165][ T4229] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 209.075062][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 209.212232][ T6243] usb 7-1: Using ep0 maxpacket: 32 [ 209.236003][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 209.264845][ T4229] usb 2-1: Using ep0 maxpacket: 16 [ 209.364862][ T6243] usb 7-1: config index 0 descriptor too short (expected 3659, got 75) [ 209.365366][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 209.384699][ T4229] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 209.404729][ T4229] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.405386][ T6243] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.421703][ T4229] usb 2-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 209.434974][ T7058] net_ratelimit: 13 callbacks suppressed [ 209.434993][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 209.462169][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.533413][ T4229] usb 2-1: config 0 descriptor?? [ 209.587219][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 209.609474][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 209.624933][ T6243] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 209.643670][ T6243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.676281][ T6243] usb 7-1: Product: syz [ 209.680541][ T6243] usb 7-1: Manufacturer: syz [ 209.714000][ T6243] usb 7-1: SerialNumber: syz [ 209.740461][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 209.751828][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 209.761464][ T6243] usb 7-1: config 0 descriptor?? [ 209.827005][ T6243] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 209.896826][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 209.915182][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 210.044668][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.061551][ T4229] smartjoyplus 0003:6666:8802.0006: hidraw0: USB HID v10.01 Device [HID 6666:8802] on usb-dummy_hcd.1-1/input0 [ 210.073584][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 210.093736][ T4229] smartjoyplus 0003:6666:8802.0006: no output reports found [ 210.194728][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.202549][ T7056] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 210.264876][ T4269] usb 2-1: USB disconnect, device number 12 [ 210.371562][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.384639][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 210.393606][ T7754] fido_id[7754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 210.564627][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.583085][ T144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 210.716685][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.737336][ T7060] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 210.871988][ T7784] loop1: detected capacity change from 0 to 1024 [ 210.878664][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.892934][ T7056] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 211.025029][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 211.152879][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 211.178435][ T7784] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.795: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 211.246365][ T7784] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.795: couldn't read orphan inode 11 (err -117) [ 211.267915][ T7784] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.344722][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 211.410574][ T7784] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.795: Invalid block bitmap block 0 in block_group 0 [ 211.454874][ T7784] Quota error (device loop1): write_blk: dquota write failed [ 211.463623][ T7784] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 211.474487][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 211.482893][ T7784] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.795: Failed to acquire dquot type 0 [ 211.503078][ T7809] Quota error (device loop1): write_blk: dquota write failed [ 211.549745][ T7809] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 211.567645][ T7809] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.795: Failed to acquire dquot type 0 [ 211.604599][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 211.661275][ T7058] Quota error (device loop1): remove_tree: Getting block too big (0 >= 10) [ 211.676989][ T7058] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:23: Failed to release dquot type 0 [ 211.728008][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 211.866873][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 211.994719][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.114682][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.224971][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.372286][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.552906][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.674628][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.784634][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.904611][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 213.024467][ C0] sched: RT throttling activated [ 213.029936][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 213.187714][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 213.314637][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 213.364769][ T6243] gspca_sunplus: reg_r err -71 [ 213.376711][ T6243] sunplus: probe of 7-1:0.0 failed with error -71 [ 213.431166][ T6243] usb 7-1: USB disconnect, device number 5 [ 213.437519][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 214.532286][ T4250] net_ratelimit: 18 callbacks suppressed [ 214.532306][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 214.912190][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 214.938115][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 216.034738][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.060576][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 216.078433][ T7866] overlayfs: failed to clone upperpath [ 216.332126][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.408679][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 216.442786][ T26] audit: type=1804 audit(1785693650.947:19): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.814" name="/newroot/107/file0" dev="fuse" ino=1 res=1 errno=0 [ 216.591642][ T26] audit: type=1804 audit(1785693650.987:20): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.814" name="/newroot/107/file0" dev="fuse" ino=1 res=1 errno=0 [ 216.614608][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.643467][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 216.753266][ T7864] process 'newroot/56/bus/file0' started with executable stack [ 216.814580][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.853502][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 217.064933][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 217.097821][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 217.315223][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 217.323029][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 217.550287][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 217.583892][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 217.784889][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 217.812597][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 218.014779][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.145226][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.315034][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.444579][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.565971][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.653650][ T7898] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 219.331644][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.484713][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.605221][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.613042][ T7058] net_ratelimit: 7 callbacks suppressed [ 219.613061][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 219.666940][ T6243] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 219.804697][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.812965][ T7060] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 219.879931][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.835'. [ 219.945695][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.953885][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 219.964753][ T6243] usb 7-1: Using ep0 maxpacket: 32 [ 220.022355][ T7937] overlayfs: failed to clone upperpath [ 220.065665][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.073596][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 220.197279][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.215648][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 220.260098][ T6243] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 220.268988][ T6243] usb 7-1: config 0 has no interface number 0 [ 220.275229][ T6243] usb 7-1: config 0 interface 184 has no altsetting 0 [ 220.346821][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.363262][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 220.524900][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.567713][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 220.794765][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.825191][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 221.038844][ T7947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.840'. [ 221.075392][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 221.098602][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 221.132613][ T7947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.840'. [ 221.186968][ T6243] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 221.204639][ T6243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.217443][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 221.234491][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 221.252772][ T6243] usb 7-1: Product: syz [ 221.264536][ T6243] usb 7-1: Manufacturer: syz [ 221.269206][ T6243] usb 7-1: SerialNumber: syz [ 221.322574][ T6243] usb 7-1: config 0 descriptor?? [ 221.374838][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 221.387915][ T6243] smsc75xx v1.0.0 [ 221.484915][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 221.644637][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 221.784730][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 221.914904][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.044748][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.185028][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.332742][ T7962] 9pnet: Insufficient options for proto=fd [ 222.354111][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.364680][ T6243] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 222.404453][ T6243] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 222.530805][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.558985][ T7969] device syzkaller0 entered promiscuous mode [ 222.574697][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.695938][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.735951][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.784773][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.911575][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.974601][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.005013][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.114694][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.154933][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.345662][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.556036][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.695794][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.736776][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.872585][ T7991] ffs_data_put(): freeing [ 223.884709][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.910734][ T7965] chnl_net:caif_netlink_parms(): no params data found [ 223.935128][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 223.994550][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.024692][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.045813][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.113617][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.126252][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.145123][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.175105][ T7965] device bridge_slave_0 entered promiscuous mode [ 224.186877][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.220519][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.244541][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.263658][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.284616][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.305033][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.316646][ T7965] device bridge_slave_1 entered promiscuous mode [ 224.324740][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.345321][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.384906][ T6243] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 224.408749][ T6243] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 224.429842][ T7965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.439145][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.454547][ T6243] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 224.471448][ T7965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.480865][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.489155][ T6243] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 224.524773][ T6243] usb 7-1: USB disconnect, device number 6 [ 224.526741][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.574871][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.602047][ T7965] team0: Port device team_slave_0 added [ 224.606963][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.646814][ T7965] team0: Port device team_slave_1 added [ 224.654562][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.685160][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.705502][ T6152] Bluetooth: hci5: command 0x0409 tx timeout [ 224.714669][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.762348][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.785566][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.798081][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.806266][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.864366][ T7965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.884544][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.909980][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.915263][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.924575][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.971111][ T7965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.975095][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.034569][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.054734][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.074775][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.094658][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.114867][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.146875][ T8010] loop1: detected capacity change from 0 to 16 [ 225.154944][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.192807][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.203677][ T7965] device hsr_slave_0 entered promiscuous mode [ 225.212200][ T8010] erofs: (device loop1): mounted with root inode @ nid 36. [ 225.225282][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 225.234834][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 225.243890][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 225.252888][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 225.261899][ T8010] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 225.270749][ T26] audit: type=1800 audit(1785693659.777:21): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.860" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 225.299721][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 89 [ 225.309216][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 30 @ nid 89 [ 225.318363][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 29 @ nid 89 [ 225.327448][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 28 @ nid 89 [ 225.336574][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 89 [ 225.345629][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 89 [ 225.354801][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 89 [ 225.363842][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 89 [ 225.373011][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 89 [ 225.382288][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 89 [ 225.391370][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 89 [ 225.400428][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 89 [ 225.409525][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 89 [ 225.418577][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 89 [ 225.427786][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 225.437181][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 225.446395][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 225.455464][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 89 [ 225.464822][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 89 [ 225.473866][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 89 [ 225.482930][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 225.492016][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 225.501075][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 225.510268][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 225.519258][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 225.528226][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 225.537194][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 225.546286][ T8010] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 225.555284][ T8010] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 225.563573][ T8010] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 225.572330][ T8010] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 225.580715][ T8010] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 225.674761][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.709949][ T7965] device hsr_slave_1 entered promiscuous mode [ 225.724598][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.774697][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.803576][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.824968][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.857216][ T7965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.894812][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.897547][ T7965] Cannot create hsr debugfs directory [ 225.978559][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 226.015795][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 226.048089][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 226.095316][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 226.103154][ T4240] net_ratelimit: 13 callbacks suppressed [ 226.103171][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 226.245834][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 226.266092][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 226.279209][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 226.465749][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.696510][ T6152] Bluetooth: hci5: command 0x041b tx timeout [ 227.799705][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.821222][ T7965] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 227.864590][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.897768][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.929146][ T7965] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 227.954691][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.970922][ T7965] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 227.984673][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.015850][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.030956][ T7965] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 228.070361][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.113386][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.138423][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 228.285826][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.402729][ T7965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.446214][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.485926][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.493724][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 228.641954][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.715147][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.737199][ T7965] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.778887][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.787861][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.809888][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.824542][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.844689][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.851485][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.859608][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.874831][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.924512][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.927615][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.944720][ T21] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 228.971696][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.002451][ T8094] netlink: 'syz.3.888': attribute type 11 has an invalid length. [ 229.012021][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.035021][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.056478][ T8091] netlink: 'syz.6.886': attribute type 1 has an invalid length. [ 229.090093][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.126357][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.138043][ T8091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.175329][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.198650][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.207402][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 229.216296][ T8095] bond2: (slave geneve2): making interface the new active one [ 229.334839][ T21] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 229.383807][ T21] usb 2-1: config 179 has no interface number 0 [ 229.414143][ T8095] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 229.424228][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.473197][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 229.545092][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.618481][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 229.666409][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.745149][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.756697][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.825264][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.843695][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 229.856731][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.884514][ T21] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 229.904705][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.943705][ T21] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 229.953205][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.975102][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.984930][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.006381][ T6243] Bluetooth: hci5: command 0x040f tx timeout [ 230.015830][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.049782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 230.063913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.072463][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.081042][ T8081] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.094570][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.102118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.123522][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.130748][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.134798][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.163799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.173885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.185027][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.199889][ T7060] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 230.335132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.347357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.355955][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.374504][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.383234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.394632][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.413246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.442917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.454549][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.469146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.484702][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.526012][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.574524][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.612528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.654727][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.674325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.700461][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.754813][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.801453][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.836039][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.845817][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.878144][ T4269] usb 2-1: USB disconnect, device number 13 [ 230.884346][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.894440][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 230.903618][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 230.944829][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.964992][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.976973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.014629][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.049810][ T144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 231.612189][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.654500][ T144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 231.813826][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.845606][ T144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 231.882876][ T8132] binder: BINDER_SET_CONTEXT_MGR already set [ 231.917748][ T8136] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 231.930498][ T8132] binder: 8131:8132 ioctl 4018620d 200000000140 returned -16 [ 231.954807][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.994549][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.015226][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.032874][ T8136] team0: Port device dummy0 added [ 232.057181][ T8146] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 232.068684][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.070380][ T6158] Bluetooth: hci5: command 0x0419 tx timeout [ 232.105759][ T8146] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.124560][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.157094][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.204974][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.233407][ T8146] team0: Failed to send options change via netlink (err -105) [ 232.241092][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.250605][ T8146] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.261369][ T8146] team0: Port device dummy0 removed [ 232.266911][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.283520][ T8146] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 232.294666][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.312442][ T7965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.324732][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.361438][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.368938][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.388637][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.390142][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.432278][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.465011][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 232.568470][ T8159] device lo entered promiscuous mode [ 232.591075][ T8159] device tunl0 entered promiscuous mode [ 232.597019][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.655568][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.677999][ T8159] device gre0 entered promiscuous mode [ 232.694896][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.754616][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.798149][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.881507][ T8159] device gretap0 entered promiscuous mode [ 232.915281][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.954637][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.985516][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.015725][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.064760][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.082336][ T8159] device erspan0 entered promiscuous mode [ 233.105720][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.151208][ T8159] device ip_vti0 entered promiscuous mode [ 233.229133][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.334816][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.394861][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.514670][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.575515][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.734649][ T8159] device ip6_vti0 entered promiscuous mode [ 233.765508][ T8159] device sit0 entered promiscuous mode [ 233.769913][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.804651][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.834872][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.863514][ T8159] device ip6tnl0 entered promiscuous mode [ 233.869849][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.894659][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.913069][ T8159] device ip6gre0 entered promiscuous mode [ 233.929531][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.953191][ T8159] bridge0: port 3(syz_tun) entered disabled state [ 233.961754][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.991098][ T8159] device ip6gretap0 entered promiscuous mode [ 233.998490][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.027355][ T8159] bridge0: port 4(batadv1) entered disabled state [ 234.029685][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.037543][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.051510][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.084689][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.096029][ T8159] device bond0 entered promiscuous mode [ 234.101636][ T8159] device bond_slave_0 entered promiscuous mode [ 234.108154][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.118464][ T8159] device bond_slave_1 entered promiscuous mode [ 234.145565][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.163098][ T8159] device team0 entered promiscuous mode [ 234.169169][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.177497][ T8159] device team_slave_0 entered promiscuous mode [ 234.184076][ T8159] device team_slave_1 entered promiscuous mode [ 234.188535][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.228700][ T8159] device dummy0 entered promiscuous mode [ 234.248141][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.267118][ T8159] device nlmon0 entered promiscuous mode [ 234.275153][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.285551][ T8159] device caif0 entered promiscuous mode [ 234.294769][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.313130][ T8159] device batadv0 entered promiscuous mode [ 234.315373][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.347113][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.366988][ T8159] device veth0 entered promiscuous mode [ 234.374669][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.404616][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.412844][ T8159] device veth1 entered promiscuous mode [ 234.424580][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.444555][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.462772][ T8159] device wg0 entered promiscuous mode [ 234.465212][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.492182][ T8159] device wg1 entered promiscuous mode [ 234.495334][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.520701][ T8159] device wg2 entered promiscuous mode [ 234.526712][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.549045][ T8159] device veth0_to_bridge entered promiscuous mode [ 234.555223][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.596077][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.612547][ T8159] device veth1_to_bridge entered promiscuous mode [ 234.618698][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.645621][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.678330][ T8159] device veth0_to_bond entered promiscuous mode [ 234.683534][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.715033][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.732908][ T8159] device veth1_to_bond entered promiscuous mode [ 234.735166][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.774626][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.787978][ T8159] device veth0_to_team entered promiscuous mode [ 234.794966][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.846270][ T8159] device veth1_to_team entered promiscuous mode [ 234.852733][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.896675][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.912137][ T8159] device veth0_to_batadv entered promiscuous mode [ 234.921084][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.940310][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.956763][ T8159] device batadv_slave_0 entered promiscuous mode [ 234.988628][ T8159] device veth1_to_batadv entered promiscuous mode [ 234.991921][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.006947][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.024876][ T8159] device batadv_slave_1 entered promiscuous mode [ 235.044516][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.074151][ T8159] device xfrm0 entered promiscuous mode [ 235.075296][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.110547][ T8159] device veth0_to_hsr entered promiscuous mode [ 235.114853][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.146928][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.169857][ T8159] device veth1_to_hsr entered promiscuous mode [ 235.175525][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.204604][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.237614][ T8159] device hsr0 entered promiscuous mode [ 235.238558][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.273995][ T8159] device veth1_virt_wifi entered promiscuous mode [ 235.281713][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.314835][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.314853][ T8159] device veth0_virt_wifi entered promiscuous mode [ 235.322052][ T8159] device virt_wifi0 entered promiscuous mode [ 235.335197][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.354547][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.374597][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.394620][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.425476][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.450491][ T8159] device vlan0 entered promiscuous mode [ 235.455264][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.464762][ T8159] device vlan1 entered promiscuous mode [ 235.484708][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.515200][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.523399][ T8159] device macvlan0 entered promiscuous mode [ 235.534478][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.565135][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.589151][ T8159] device macvlan1 entered promiscuous mode [ 235.600893][ T8159] device ipvlan0 entered promiscuous mode [ 235.606590][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.617999][ T8159] device ipvlan1 entered promiscuous mode [ 235.644826][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.664939][ T8159] device macsec0 entered promiscuous mode [ 235.674556][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.683039][ T8159] device geneve0 entered promiscuous mode [ 235.704532][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.712634][ T8159] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.722637][ T8159] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.724785][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.740426][ T8159] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.798276][ T8159] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.816883][ T8159] device geneve1 entered promiscuous mode [ 235.824723][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.846251][ T8159] device netdevsim0 entered promiscuous mode [ 235.855745][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.876013][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.904611][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.912559][ T8159] device netdevsim1 entered promiscuous mode [ 235.928063][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.958426][ T8159] device netdevsim2 entered promiscuous mode [ 235.974513][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.994491][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.008809][ T8159] device netdevsim3 entered promiscuous mode [ 236.024838][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.049107][ T8159] device wlan0 entered promiscuous mode [ 236.054955][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.067163][ T8159] device wlan1 entered promiscuous mode [ 236.094733][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.112195][ T8159] device gtp0 entered promiscuous mode [ 236.118115][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.129429][ T8159] device macsec1 entered promiscuous mode [ 236.144480][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.168333][ T8159] device ip6erspan0 entered promiscuous mode [ 236.182228][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.193040][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 236.324648][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.363982][ T144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 236.514661][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.532789][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 236.620044][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.657380][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.666014][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.718635][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.754541][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.765412][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.773869][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.787746][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.822742][ T7965] device veth0_vlan entered promiscuous mode [ 236.854213][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.863648][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.882877][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.910266][ T7965] device veth1_vlan entered promiscuous mode [ 236.918296][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.936495][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.945254][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.962128][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.972926][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.985118][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.044573][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.054162][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.064069][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.072433][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.092795][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.106941][ T7965] device veth0_macvtap entered promiscuous mode [ 237.117038][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.143872][ T7965] device veth1_macvtap entered promiscuous mode [ 237.155024][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.176012][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.209982][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.223387][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.241376][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.255832][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.264766][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.275400][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.277774][ T8217] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 237.294764][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.310683][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.330793][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.345995][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.358642][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.379616][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.391655][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.408813][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.431697][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.446565][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.454796][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.478234][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.486398][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.502903][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.511491][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.530826][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.552253][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.572104][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.614908][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.635565][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.644643][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.655550][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.674962][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.697266][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.707519][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.742291][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.756374][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.804634][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.835943][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.850751][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.868257][ T8237] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 237.905485][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.913585][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.958879][ T8236] loop6: detected capacity change from 0 to 1764 [ 237.965792][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.980483][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.014509][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.030811][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.044638][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.080793][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.113606][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.248639][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.369091][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.526029][ T7965] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.574696][ T144] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.684307][ T7965] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.693275][ T7965] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.702240][ T7965] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.724604][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.774620][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.795861][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.804480][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 238.857151][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.885879][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.925386][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.951634][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.981183][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.000522][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.027944][ T4240] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 239.037406][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.057107][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.164546][ T7037] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.182947][ T7037] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 239.337016][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.394892][ T7056] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.403149][ T7056] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 239.574541][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.613169][ T7060] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 239.754763][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.773615][ T4250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 239.914806][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 240.805160][ T7058] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 240.914751][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 240.922834][ T7060] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 241.095919][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.103731][ T7060] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 241.205250][ T8318] bond0: (slave dummy0): Releasing backup interface [ 241.238501][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.275480][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.299752][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.310739][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.354546][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.386961][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.429926][ T8318] device bridge_slave_0 left promiscuous mode [ 241.445865][ T7058] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.478465][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.494614][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.519212][ T8318] device bridge_slave_1 left promiscuous mode [ 241.534795][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.542951][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.594593][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.624617][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.635070][ T8318] bond0: (slave bond_slave_0): Releasing backup interface [ 241.644526][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.665313][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.714617][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.735130][ T7060] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.739130][ T8318] bond0: (slave bond_slave_1): Releasing backup interface [ 241.764600][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.804964][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.825356][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.864450][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.884753][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.914062][ T8318] team0: Port device team_slave_0 removed [ 241.924458][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.964539][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.981989][ T8318] team0: Port device team_slave_1 removed [ 241.994860][ T7043] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.007300][ T8318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.044485][ T8318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.054502][ T7043] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.074202][ T8318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.096450][ T7043] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.125093][ T8318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.134678][ T7043] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.182781][ T4250] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.203257][ T8318] device wlan1 left promiscuous mode [ 242.213773][ T8318] bridge0: port 3(wlan1) entered disabled state [ 242.226953][ T7043] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.249447][ T8318] bond1: (slave bond2): Releasing backup interface [ 242.264453][ T4240] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.288344][ T8318] bond3: (slave ip6gretap1): Releasing active interface [ 242.329131][ T8327] device syzkaller0 left promiscuous mode [ 242.370399][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.945'. [ 244.528475][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.955'. [ 244.828269][ T8398] tipc: Enabling of bearer rejected, failed to enable media [ 244.964466][ T8403] device syzkaller0 entered promiscuous mode [ 244.984218][ T8403] tipc: Started in network mode [ 244.989354][ T8403] tipc: Node identity 12d86325f60d, cluster identity 4711 [ 245.006426][ T8403] tipc: Enabled bearer , priority 0 [ 245.019573][ T8401] tipc: Resetting bearer [ 245.089675][ T4231] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 245.108527][ T8401] tipc: Disabling bearer [ 245.217932][ T8413] capability: warning: `syz.1.965' uses 32-bit capabilities (legacy support in use) [ 245.319717][ T8418] device syzkaller0 entered promiscuous mode [ 245.468677][ T8423] loop1: detected capacity change from 0 to 1024 [ 245.542589][ T8423] EXT4-fs (loop1): Ignoring removed orlov option [ 245.615817][ T8423] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 245.644552][ T4231] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 245.657110][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.671737][ T4231] usb 7-1: Product: syz [ 245.676515][ T4231] usb 7-1: Manufacturer: syz [ 245.681194][ T4231] usb 7-1: SerialNumber: syz [ 246.184772][ T4231] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 247.108781][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.8.981'. [ 247.114763][ T6245] Bluetooth: hci3: command 0x0406 tx timeout [ 247.131253][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.8.981'. [ 248.444547][ T4231] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 248.494577][ T4231] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 248.596076][ T4231] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 248.655489][ T4231] lan78xx: probe of 7-1:1.0 failed with error -71 [ 248.744841][ T4231] usb 7-1: USB disconnect, device number 7 [ 250.608603][ T8498] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 250.628711][ T8506] loop1: detected capacity change from 0 to 512 [ 250.737464][ T8506] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.991: Unrecognised inode hash code 255 [ 250.789888][ T8506] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.991: Corrupt directory, running e2fsck is recommended [ 250.804903][ T8506] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 250.813922][ T8506] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.991: corrupted in-inode xattr [ 250.839625][ T8506] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.991: couldn't read orphan inode 15 (err -117) [ 250.926958][ T8506] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 251.134433][ T4269] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 251.394505][ T4269] usb 7-1: Using ep0 maxpacket: 32 [ 251.467061][ T8527] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 251.490222][ T8527] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 251.519311][ T4269] usb 7-1: config index 0 descriptor too short (expected 3659, got 75) [ 251.553851][ T4269] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.645130][ T8531] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.991: Unrecognised inode hash code 255 [ 251.659465][ T8531] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.991: Corrupt directory, running e2fsck is recommended [ 251.673423][ T8531] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 4: comm syz.1.991: path /185/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 251.701188][ T8531] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 64: comm syz.1.991: path /185/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 251.784653][ T4269] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 251.814195][ T4269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.842955][ T4269] usb 7-1: Product: syz [ 251.854580][ T4269] usb 7-1: Manufacturer: syz [ 251.863861][ T4269] usb 7-1: SerialNumber: syz [ 251.885852][ T4269] usb 7-1: config 0 descriptor?? [ 251.946830][ T4269] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 252.001600][ T8535] device syzkaller0 entered promiscuous mode [ 253.274781][ T4269] gspca_sunplus: reg_r err -110 [ 253.736187][ T8562] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 253.764061][ T8562] device syzkaller0 entered promiscuous mode [ 254.591498][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1017'. [ 254.604892][ T8589] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1017'. [ 254.825936][ T8589] tipc: Invalid UDP bearer configuration [ 254.828725][ T8589] tipc: Enabling of bearer rejected, failed to enable media [ 255.095496][ T4269] sunplus: probe of 7-1:0.0 failed with error -110 [ 255.279171][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.285712][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.412909][ T4269] usb 7-1: USB disconnect, device number 8 [ 256.834732][ T4269] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 257.022499][ T8629] loop8: detected capacity change from 0 to 2048 [ 257.067993][ T8629] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 257.077264][ T4269] usb 7-1: Using ep0 maxpacket: 16 [ 257.174766][ T8629] loop8: detected capacity change from 0 to 256 [ 257.192196][ T8629] exfat: Deprecated parameter 'namecase' [ 257.198775][ T4269] usb 7-1: config index 0 descriptor too short (expected 37359, got 202) [ 257.212743][ T4269] usb 7-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 257.232194][ T8629] exfat: Deprecated parameter 'namecase' [ 257.253835][ T4269] usb 7-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 257.264882][ T4269] usb 7-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 257.335841][ T8629] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x8300b014, utbl_chksum : 0xe619d30d) [ 257.371698][ T8641] bridge0: port 3(syz_tun) entered blocking state [ 257.401146][ T8641] bridge0: port 3(syz_tun) entered disabled state [ 257.417114][ T8641] device syz_tun entered promiscuous mode [ 257.434654][ T4269] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.449400][ T4269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.458039][ T8641] netlink: 'syz.7.1030': attribute type 12 has an invalid length. [ 257.467134][ T4269] usb 7-1: Product: syz [ 257.473614][ T4269] usb 7-1: Manufacturer: syz [ 257.478951][ T8641] netlink: 'syz.7.1030': attribute type 29 has an invalid length. [ 257.492566][ T4269] usb 7-1: SerialNumber: syz [ 257.497385][ T8641] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1030'. [ 258.637554][ T4269] usb 7-1: 0:2 : does not exist [ 258.757665][ T4269] usb 7-1: USB disconnect, device number 9 [ 259.100491][ T8181] udevd[8181]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.277658][ T8667] loop1: detected capacity change from 0 to 256 [ 260.458274][ T8685] IPVS: fo: FWM 3 0x00000003 - no destination available [ 260.540190][ T8690] device syzkaller0 entered promiscuous mode [ 260.973081][ T8706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.059094][ T8662] loop8: detected capacity change from 0 to 40427 [ 261.111819][ T8662] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 261.141591][ T8662] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 261.241840][ T8714] ================================================================== [ 261.251256][ T8714] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 261.259961][ T8714] Read of size 2 at addr ffff888040112dfb by task syz.1.1051/8714 [ 261.267808][ T8714] [ 261.270182][ T8714] CPU: 0 PID: 8714 Comm: syz.1.1051 Not tainted syzkaller #0 [ 261.277620][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 261.287723][ T8714] Call Trace: [ 261.291036][ T8714] [ 261.294000][ T8714] dump_stack_lvl+0x188/0x250 [ 261.298739][ T8714] ? show_regs_print_info+0x20/0x20 [ 261.303987][ T8714] ? _printk+0xda/0x130 [ 261.308190][ T8714] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 261.314486][ T8714] ? load_image+0x410/0x410 [ 261.319050][ T8714] print_address_description+0x60/0x2d0 [ 261.324649][ T8714] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 261.330938][ T8714] kasan_report+0xdf/0x130 [ 261.335415][ T8714] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 261.341723][ T8714] ieee80211_monitor_select_queue+0x23a/0x240 [ 261.347841][ T8714] ? ieee80211_recalc_smps_work+0x20/0x20 [ 261.353616][ T8714] netdev_core_pick_tx+0x12c/0x300 [ 261.358795][ T8714] __dev_queue_xmit+0x797/0x2e50 [ 261.363782][ T8714] ? __might_sleep+0xf0/0xf0 [ 261.368443][ T8714] ? dev_queue_xmit+0x20/0x20 [ 261.373173][ T8714] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 261.378782][ T8714] ? packet_cached_dev_get+0x270/0x270 [ 261.384315][ T8714] packet_sendmsg+0x3cf9/0x50b0 [ 261.389234][ T8714] ? place_entity+0x4f0/0x4f0 [ 261.393955][ T8714] ? __might_sleep+0xf0/0xf0 [ 261.398603][ T8714] ? aa_sk_perm+0x7dc/0x910 [ 261.403160][ T8714] ? packet_getsockopt+0x9a0/0x9a0 [ 261.408317][ T8714] ? unpack_trans_table+0xb76/0x1690 [ 261.413665][ T8714] ? apparmor_socket_sendmsg+0x88/0x230 [ 261.419264][ T8714] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 261.424592][ T8714] ? security_socket_sendmsg+0x7c/0xa0 [ 261.430130][ T8714] ? packet_getsockopt+0x9a0/0x9a0 [ 261.435289][ T8714] ____sys_sendmsg+0x5be/0x8f0 [ 261.440116][ T8714] ? __sys_sendmsg_sock+0x30/0x30 [ 261.445192][ T8714] ? import_iovec+0x6f/0xa0 [ 261.449749][ T8714] ___sys_sendmsg+0x236/0x2e0 [ 261.454516][ T8714] ? __sys_sendmsg+0x290/0x290 [ 261.459384][ T8714] __se_sys_sendmsg+0x1b7/0x2a0 [ 261.464297][ T8714] ? __x64_sys_sendmsg+0x80/0x80 [ 261.469285][ T8714] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 261.475331][ T8714] ? lockdep_hardirqs_on+0x94/0x140 [ 261.480585][ T8714] do_syscall_64+0x4c/0xa0 [ 261.485049][ T8714] ? clear_bhb_loop+0x30/0x80 [ 261.489770][ T8714] ? clear_bhb_loop+0x30/0x80 [ 261.494492][ T8714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.500462][ T8714] RIP: 0033:0x7f473c4a9e99 [ 261.504924][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.524574][ T8714] RSP: 002b:00007f473a702028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.533219][ T8714] RAX: ffffffffffffffda RBX: 00007f473c731fa0 RCX: 00007f473c4a9e99 [ 261.541241][ T8714] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 261.549258][ T8714] RBP: 00007f473c53feaf R08: 0000000000000000 R09: 0000000000000000 [ 261.557282][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.565301][ T8714] R13: 00007f473c732038 R14: 00007f473c731fa0 R15: 00007ffe65233038 [ 261.573335][ T8714] [ 261.576392][ T8714] [ 261.578753][ T8714] Allocated by task 3558: [ 261.583106][ T8714] __kasan_slab_alloc+0x92/0xc0 [ 261.588003][ T8714] slab_post_alloc_hook+0x4c/0x380 [ 261.593162][ T8714] kmem_cache_alloc+0x15d/0x280 [ 261.598053][ T8714] getname_flags+0xb7/0x4f0 [ 261.602595][ T8714] do_sys_openat2+0xdd/0x500 [ 261.607223][ T8714] __x64_sys_openat+0x135/0x160 [ 261.612119][ T8714] do_syscall_64+0x4c/0xa0 [ 261.616574][ T8714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.622519][ T8714] [ 261.624872][ T8714] Freed by task 3558: [ 261.628877][ T8714] kasan_set_track+0x4b/0x70 [ 261.633504][ T8714] kasan_set_free_info+0x1f/0x40 [ 261.638489][ T8714] ____kasan_slab_free+0xd5/0x110 [ 261.643555][ T8714] slab_free_freelist_hook+0xec/0x170 [ 261.649015][ T8714] kmem_cache_free+0x8f/0x210 [ 261.653733][ T8714] do_sys_openat2+0x213/0x500 [ 261.658486][ T8714] __x64_sys_openat+0x135/0x160 [ 261.663376][ T8714] do_syscall_64+0x4c/0xa0 [ 261.667837][ T8714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.673778][ T8714] [ 261.676148][ T8714] The buggy address belongs to the object at ffff888040112200 [ 261.676148][ T8714] which belongs to the cache names_cache of size 4096 [ 261.690329][ T8714] The buggy address is located 3067 bytes inside of [ 261.690329][ T8714] 4096-byte region [ffff888040112200, ffff888040113200) [ 261.703824][ T8714] The buggy address belongs to the page: [ 261.709505][ T8714] page:ffffea0001004400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40110 [ 261.719707][ T8714] head:ffffea0001004400 order:3 compound_mapcount:0 compound_pincount:0 [ 261.728079][ T8714] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 261.736114][ T8714] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016ddd500 [ 261.744742][ T8714] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 261.753357][ T8714] page dumped because: kasan: bad access detected [ 261.759846][ T8714] page_owner tracks the page as allocated [ 261.765594][ T8714] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6517, ts 245932129687, free_ts 245930628640 [ 261.786448][ T8714] get_page_from_freelist+0x24f6/0x2670 [ 261.792200][ T8714] __alloc_pages+0x1ee/0x480 [ 261.796845][ T8714] new_slab+0xc0/0x4b0 [ 261.800959][ T8714] ___slab_alloc+0x807/0xdd0 [ 261.805592][ T8714] kmem_cache_alloc+0xf0/0x280 [ 261.810399][ T8714] getname_flags+0xb7/0x4f0 [ 261.814973][ T8714] do_sys_openat2+0xdd/0x500 [ 261.819738][ T8714] __x64_sys_openat+0x135/0x160 [ 261.824636][ T8714] do_syscall_64+0x4c/0xa0 [ 261.829098][ T8714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.835044][ T8714] page last free stack trace: [ 261.839752][ T8714] free_unref_page_prepare+0x637/0x6c0 [ 261.845298][ T8714] free_unref_page+0x8f/0x2a0 [ 261.850018][ T8714] do_exit+0x16d6/0x2110 [ 261.854297][ T8714] do_group_exit+0x12c/0x2f0 [ 261.858933][ T8714] get_signal+0x7eb/0x12e0 [ 261.863387][ T8714] arch_do_signal_or_restart+0xe6/0x12a0 [ 261.869065][ T8714] exit_to_user_mode_loop+0x9e/0x130 [ 261.874391][ T8714] exit_to_user_mode_prepare+0xee/0x180 [ 261.879976][ T8714] syscall_exit_to_user_mode+0x16/0x40 [ 261.885480][ T8714] do_syscall_64+0x58/0xa0 [ 261.889948][ T8714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.895889][ T8714] [ 261.898245][ T8714] Memory state around the buggy address: [ 261.903908][ T8714] ffff888040112c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.912117][ T8714] ffff888040112d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.920224][ T8714] >ffff888040112d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.928324][ T8714] ^ [ 261.936339][ T8714] ffff888040112e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.944442][ T8714] ffff888040112e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.952571][ T8714] ================================================================== [ 261.960664][ T8714] Disabling lock debugging due to kernel taint [ 261.967019][ T8714] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 261.974247][ T8714] CPU: 0 PID: 8714 Comm: syz.1.1051 Tainted: G B syzkaller #0 [ 261.977946][ T8662] F2FS-fs (loop8): Failed to start F2FS issue_checkpoint_thread (-12) [ 261.983044][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 261.983060][ T8714] Call Trace: [ 261.983067][ T8714] [ 261.983076][ T8714] dump_stack_lvl+0x188/0x250 [ 262.012306][ T8714] ? show_regs_print_info+0x20/0x20 [ 262.017584][ T8714] ? load_image+0x410/0x410 [ 262.022148][ T8714] panic+0x2f8/0x850 [ 262.026092][ T8714] ? bpf_jit_dump+0xd0/0xd0 [ 262.031159][ T8714] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 262.037094][ T8714] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 262.043030][ T8714] ? _raw_spin_unlock+0x40/0x40 [ 262.047924][ T8714] ? print_memory_metadata+0x314/0x400 [ 262.053426][ T8714] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 262.059758][ T8714] check_panic_on_warn+0x80/0xa0 [ 262.064751][ T8714] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 262.071097][ T8714] end_report+0x6d/0xf0 [ 262.075313][ T8714] kasan_report+0x102/0x130 [ 262.079878][ T8714] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 262.086192][ T8714] ieee80211_monitor_select_queue+0x23a/0x240 [ 262.092363][ T8714] ? ieee80211_recalc_smps_work+0x20/0x20 [ 262.098135][ T8714] netdev_core_pick_tx+0x12c/0x300 [ 262.103311][ T8714] __dev_queue_xmit+0x797/0x2e50 [ 262.108317][ T8714] ? __might_sleep+0xf0/0xf0 [ 262.112978][ T8714] ? dev_queue_xmit+0x20/0x20 [ 262.117714][ T8714] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 262.123328][ T8714] ? packet_cached_dev_get+0x270/0x270 [ 262.128846][ T8714] packet_sendmsg+0x3cf9/0x50b0 [ 262.133762][ T8714] ? place_entity+0x4f0/0x4f0 [ 262.138507][ T8714] ? __might_sleep+0xf0/0xf0 [ 262.143280][ T8714] ? aa_sk_perm+0x7dc/0x910 [ 262.147835][ T8714] ? packet_getsockopt+0x9a0/0x9a0 [ 262.153001][ T8714] ? unpack_trans_table+0xb76/0x1690 [ 262.158354][ T8714] ? apparmor_socket_sendmsg+0x88/0x230 [ 262.163948][ T8714] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 262.169292][ T8714] ? security_socket_sendmsg+0x7c/0xa0 [ 262.174916][ T8714] ? packet_getsockopt+0x9a0/0x9a0 [ 262.180088][ T8714] ____sys_sendmsg+0x5be/0x8f0 [ 262.184914][ T8714] ? __sys_sendmsg_sock+0x30/0x30 [ 262.189998][ T8714] ? import_iovec+0x6f/0xa0 [ 262.194579][ T8714] ___sys_sendmsg+0x236/0x2e0 [ 262.199319][ T8714] ? __sys_sendmsg+0x290/0x290 [ 262.204158][ T8714] __se_sys_sendmsg+0x1b7/0x2a0 [ 262.209085][ T8714] ? __x64_sys_sendmsg+0x80/0x80 [ 262.214087][ T8714] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 262.220126][ T8714] ? lockdep_hardirqs_on+0x94/0x140 [ 262.225379][ T8714] do_syscall_64+0x4c/0xa0 [ 262.229862][ T8714] ? clear_bhb_loop+0x30/0x80 [ 262.234592][ T8714] ? clear_bhb_loop+0x30/0x80 [ 262.239318][ T8714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.245268][ T8714] RIP: 0033:0x7f473c4a9e99 [ 262.249727][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.269384][ T8714] RSP: 002b:00007f473a702028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.277853][ T8714] RAX: ffffffffffffffda RBX: 00007f473c731fa0 RCX: 00007f473c4a9e99 [ 262.285882][ T8714] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 262.293990][ T8714] RBP: 00007f473c53feaf R08: 0000000000000000 R09: 0000000000000000 [ 262.302011][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.310032][ T8714] R13: 00007f473c732038 R14: 00007f473c731fa0 R15: 00007ffe65233038 [ 262.318101][ T8714] [ 262.321298][ T8714] Kernel Offset: disabled [ 262.325652][ T8714] Rebooting in 86400 seconds..