last executing test programs: 3m13.118102297s ago: executing program 1 (id=80): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) 3m12.983780509s ago: executing program 1 (id=82): r0 = syz_open_dev$sndpcmc(0x0, 0x1, 0x101000) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="20100200000008a9"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000140)=""/234, 0xea}], 0x1) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r7, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0xacfda59dfb3e524b}, 0x4000000) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r9, 0x5609, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) capset(0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3m10.44841589s ago: executing program 1 (id=91): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() 3m10.190100802s ago: executing program 1 (id=93): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@bsdgroups}, {@nogrpid}]}, 0x0, 0x506, &(0x7f00000023c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 3m8.657663389s ago: executing program 1 (id=99): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getdents64(r4, 0x0, 0x0) 3m7.708700588s ago: executing program 1 (id=101): r0 = syz_open_dev$sndpcmc(0x0, 0x1, 0x101000) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="20100200000008a9"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000140)=""/234, 0xea}], 0x1) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r7, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0xacfda59dfb3e524b}, 0x4000000) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r9, 0x5609, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) capset(0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3m7.247228177s ago: executing program 32 (id=101): r0 = syz_open_dev$sndpcmc(0x0, 0x1, 0x101000) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="20100200000008a9"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000140)=""/234, 0xea}], 0x1) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r7, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0xacfda59dfb3e524b}, 0x4000000) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r9, 0x5609, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) capset(0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m31.22086703s ago: executing program 0 (id=321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d0001070000000904000505030000000921000208012294030905810300000000000905"], 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)="a170b635002b70a233dea67878e10428ea0cb3f8fa26390f7ae26f00539d042fa5ec41cb5aeacfef78f69f722a7f886116e6a865f4e4742c54c1f12c395a7ef096da245d3cc71fb68ee2b8a77e47231d42087a723336d0f87cd855e643d1aeb009ce65ad33c10263a82a763507c6d1c2f68130078358a8cbc4fec43d4a10473dff3b704c1ea25803f6ea3dd0273298f9ad2b206b0a7c7685fba016fa4b548b5ca34bbfb29c0c912c", 0xa8}, {&(0x7f0000000180)="4df4a3d66292c826dea42b9d1bafc1be4cc565a005d02b66934c2d8b772d188e53df73c889646bb9c8a7b416d4", 0x2d}, {&(0x7f00000001c0)="09f368dc4456990593b0f8b4f46d89bd74fa0fd33e2b92cc61aad85ba29da42c647dd0930e2f4474b6145686d88e4d0ca30ea2cbce49f3d0cf5a0602e3275cfce3048d11dd229f35e74fe910ae749275f052bf5a5042493a9a17af5261c5a806fb94519d5878993db29ada6bdf2143b9bdf1c9f08e8be04c77c1cb505b5f07632ef8171ee233054952aa2c37e7fa78883d627aa76c755c170a7e3c38bd6b9a8a45329cc678dd6733c272bb1ca5bd4b8758f32c106fec783845f21b13e0da90a5", 0xc0}], 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x12) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x2, 0x6382, 0x7, 0x2a, 0x9}) 1m28.361735428s ago: executing program 0 (id=327): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd(0x401) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000881) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x9) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000240)={[0x80]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x478) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @private2}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x18, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getnetconf={0x14, 0x4e, 0x1}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b33, &(0x7f0000000000)={'wlan1\x00'}) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd700100800000340000000e0001006e657464657673696d0000000f0002006e657464657673696d300000f278b1ecd4125383ebfeb6f325b68c5b344d9d615c9c1623253150934c156fc50550b4c9de20dd3cb0fb43e0f9b2f0adecb6130b52b025ab9d7e4fb43e6e6a2c0d01decb53b6804be9844a106a3dd7deb0f7d32efb069ccc90f4c72cd34d37b98eae32ca2a630c1bdfdd41645fee9af9d18ff61cc8a083615ff699279cddde3cc4dbb827841278588c677c22a4eb940f6bedce7fe70fc91be2e0e3e465b2c93fa63c5a4c102c56bec8c527837aec2f"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) 1m25.673035892s ago: executing program 0 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004000000000006000600000000000600"], 0x4c}}, 0x0) shutdown(r0, 0x0) 1m25.534146173s ago: executing program 0 (id=335): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x44899}, 0x4000845) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xe) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsopen(&(0x7f00000000c0)='affs\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000"]) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x3c8, 0x0, 0xd0, 0xffffffff, 0x1e8, 0x0, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f0000000080), {[{{@ip={@loopback, @empty, 0xff, 0x0, 'nr0\x00', 'vlan0\x00', {}, {0xff}, 0x6c, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @gre_key=0x3, @port=0x4e21}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x3]}}, @common=@unspec=@mac={{0x30}, {@broadcast}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@private1, @ipv4=@remote, @port=0x4e22, @gre_key=0x8}}}, {{@ip={@empty, @rand_addr=0x64010102, 0x0, 0xffffff00, 'veth0_vlan\x00', 'batadv_slave_0\x00', {}, {}, 0x33}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @multicast2, @private=0xa010101, @port=0x4e21, @gre_key=0x8}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x2c}, 0xffffff00, 0xffffffff, 'pim6reg0\x00', 'wg2\x00', {}, {}, 0x89, 0x1, 0x66}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @icmp_id=0x66, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 1m20.741613993s ago: executing program 0 (id=344): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r1 = syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$FIONREAD(r1, 0x541b, 0x0) mkdir(0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) 1m20.541807989s ago: executing program 0 (id=345): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m4.44533076s ago: executing program 33 (id=345): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15.400554787s ago: executing program 6 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000800)={'ip6tnl0\x00', {0x2, 0x4e24, @broadcast}}) 11.507842911s ago: executing program 2 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 10.400659333s ago: executing program 5 (id=508): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_usbip_server_init(0xaa7f3cec63cbb9d) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r3, 0xffffffffffffffff, 0x0) 10.400149353s ago: executing program 2 (id=509): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000400)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000440)) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) r1 = socket(0x2a, 0x2, 0x0) r2 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e1f, 0x40, @mcast1, 0x5}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0x7, @empty, 0x4}], 0xa0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xc3, 0x1, 0x1, {0x22, 0x6c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x71, 0xa5, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) 10.316870211s ago: executing program 3 (id=510): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x202, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)={0x9, 0x6f, 0x1}, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) fallocate(r1, 0x12, 0x8, 0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000001c0)=@getsa={0x34, 0x12, 0x1, 0x70bd22, 0x25dfdbff, {@in6=@mcast2, 0x4d5, 0x2, 0xff}, [@mark={0xc, 0x15, {0x35075d, 0x213}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) 10.166362063s ago: executing program 3 (id=511): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 10.031434364s ago: executing program 3 (id=512): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x44899}, 0x4000845) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xe) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsopen(&(0x7f00000000c0)='affs\x00', 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x3c8, 0x0, 0xd0, 0xffffffff, 0x1e8, 0x0, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f0000000080), {[{{@ip={@loopback, @empty, 0xff, 0x0, 'nr0\x00', 'vlan0\x00', {}, {0xff}, 0x6c, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @gre_key=0x3, @port=0x4e21}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x3]}}, @common=@unspec=@mac={{0x30}, {@broadcast}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@private1, @ipv4=@remote, @port=0x4e22, @gre_key=0x8}}}, {{@ip={@empty, @rand_addr=0x64010102, 0x0, 0xffffff00, 'veth0_vlan\x00', 'batadv_slave_0\x00', {}, {}, 0x33}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @multicast2, @private=0xa010101, @port=0x4e21, @gre_key=0x8}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x2c}, 0xffffff00, 0xffffffff, 'pim6reg0\x00', 'wg2\x00', {}, {}, 0x89, 0x1, 0x66}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @icmp_id=0x66, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 9.00696829s ago: executing program 4 (id=514): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) shutdown(r0, 0x0) 8.940440615s ago: executing program 5 (id=515): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x6, 0x0, 0x30, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat(0xffffffffffffff9c, 0x0, 0xa00, 0x1c0) r7 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) connect$can_bcm(r1, &(0x7f0000000200), 0x24) 7.790850581s ago: executing program 5 (id=516): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 7.730094046s ago: executing program 2 (id=517): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000240)=0xffff, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x42000200) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000301010100000000ecffffff0a0000010c001980080002000c080000180002"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r9) 7.700044358s ago: executing program 4 (id=518): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000400)={{0x8, 0x0, 0x3720ab22, 0xfff, 'syz0\x00', 0xfffffffb}, 0x4, 0x2, 0x5, 0x0, 0x3, 0x400000, 'syz1\x00', &(0x7f00000000c0)=['gcm(aes)\x00', 'X\x0e-\x00', '\x00'], 0xe}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0x8, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000840)="88cf5c1e42aa7907253ebead27b3db2c", 0x10}], 0x1) io_submit(r4, 0x1, &(0x7f0000000580)=[0x0]) 6.408511866s ago: executing program 5 (id=519): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x19}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x503, &(0x7f0000000a00)="$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") r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 6.199916393s ago: executing program 2 (id=520): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x25, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x49e, &(0x7f0000000bc0)="$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") umount2(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 5.670020728s ago: executing program 5 (id=521): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") 4.988900855s ago: executing program 5 (id=522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socket(0x1000000010, 0x80002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 4.599505137s ago: executing program 34 (id=522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socket(0x1000000010, 0x80002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 4.587565778s ago: executing program 3 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@nodiscard}, {@nolazytime}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x180000c, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.287053003s ago: executing program 6 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf7, 0x0, 0x1, 0xbe, 0x6, @broadcast}, 0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xaa09}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20008811) nanosleep(&(0x7f0000000300), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a0104000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x410}, 0x0) unshare(0x2c020400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c000780080006400000004005000500020000"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a3100000000050001000700000010000780ff030180080001407f000001285e4e794f0d88404defcadde2cabacfa922a05e2744f4a43711c424dcbd606ed1cd1ef54f1727c7d0ea140b11a00ab07eb0dca7215931e7b679b6b57cbb272e97a663d65d4871f55d09a4c34fc1567ec941ce3d02f2b1d6c73a96f529648a15e0053304a40fd41b23add1610faa2ba68d8d20fe97621d7e83b686475e6cac48cfccb99ab6027b10157810fb1d1a8853ed20e37e8b8596960390050000"], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) 3.914523884s ago: executing program 4 (id=526): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") syz_usb_connect(0x0, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x18) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0xe432}) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000300)={0x2000000, 0x0, 0x0, 0x1, 0x7, r5, &(0x7f0000000180)="7617e84b332d8ab490d242b44600", 0xfffffdbf, 0x5}]) socket$inet6_udp(0xa, 0x2, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_pidfd_open(r9, 0x0) 3.877113447s ago: executing program 3 (id=527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') socket(0x11, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) preadv(r2, &(0x7f0000004300)=[{&(0x7f0000000040)=""/144, 0x90}], 0x1, 0x78, 0xc) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.322789383s ago: executing program 6 (id=528): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000400)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000440)) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket(0x2a, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e1f, 0x40, @mcast1, 0x5}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0x7, @empty, 0x4}], 0xa0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xc3, 0x1, 0x1, {0x22, 0x6c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x71, 0xa5, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) 2.600889323s ago: executing program 6 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.326546566s ago: executing program 4 (id=530): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 2.290162959s ago: executing program 6 (id=531): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x44899}, 0x4000845) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xe) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsopen(&(0x7f00000000c0)='affs\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000"]) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x3c8, 0x0, 0xd0, 0xffffffff, 0x1e8, 0x0, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f0000000080), {[{{@ip={@loopback, @empty, 0xff, 0x0, 'nr0\x00', 'vlan0\x00', {}, {0xff}, 0x6c, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @gre_key=0x3, @port=0x4e21}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x3]}}, @common=@unspec=@mac={{0x30}, {@broadcast}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@private1, @ipv4=@remote, @port=0x4e22, @gre_key=0x8}}}, {{@ip={@empty, @rand_addr=0x64010102, 0x0, 0xffffff00, 'veth0_vlan\x00', 'batadv_slave_0\x00', {}, {}, 0x33}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @multicast2, @private=0xa010101, @port=0x4e21, @gre_key=0x8}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x2c}, 0xffffff00, 0xffffffff, 'pim6reg0\x00', 'wg2\x00', {}, {}, 0x89, 0x1, 0x66}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @icmp_id=0x66, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c", 0x6f, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x24000814}, 0x0) 2.192940627s ago: executing program 2 (id=532): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1.972420286s ago: executing program 2 (id=533): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x44899}, 0x4000845) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xe) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsopen(&(0x7f00000000c0)='affs\x00', 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x3c8, 0x0, 0xd0, 0xffffffff, 0x1e8, 0x0, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f0000000080), {[{{@ip={@loopback, @empty, 0xff, 0x0, 'nr0\x00', 'vlan0\x00', {}, {0xff}, 0x6c, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @gre_key=0x3, @port=0x4e21}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x3]}}, @common=@unspec=@mac={{0x30}, {@broadcast}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@private1, @ipv4=@remote, @port=0x4e22, @gre_key=0x8}}}, {{@ip={@empty, @rand_addr=0x64010102, 0x0, 0xffffff00, 'veth0_vlan\x00', 'batadv_slave_0\x00', {}, {}, 0x33}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @multicast2, @private=0xa010101, @port=0x4e21, @gre_key=0x8}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x2c}, 0xffffff00, 0xffffffff, 'pim6reg0\x00', 'wg2\x00', {}, {}, 0x89, 0x1, 0x66}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @icmp_id=0x66, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 1.533329952s ago: executing program 3 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000800)={'ip6tnl0\x00', {0x2, 0x4e24, @broadcast}}) 1.137015875s ago: executing program 35 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000800)={'ip6tnl0\x00', {0x2, 0x4e24, @broadcast}}) 1.089402049s ago: executing program 6 (id=536): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@nodiscard}, {@io_bits={'io_bits', 0x3d, 0x68}}, {@acl}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@background_gc_on}, {@background_gc_on}, {@nolazytime}, {@fsync_mode_posix}, {@block_mode}, {@segment_mode}, {@heap}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f00000079c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") 900.901905ms ago: executing program 4 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf7, 0x0, 0x1, 0xbe, 0x6, @broadcast}, 0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xaa09}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20008811) nanosleep(&(0x7f0000000300), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a0104000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x410}, 0x0) unshare(0x2c020400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c000780080006400000004005000500020000"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a3100000000050001000700000010000780ff030180080001407f000001285e4e794f0d88404defcadde2cabacfa922a05e2744f4a43711c424dcbd606ed1cd1ef54f1727c7d0ea140b11a00ab07eb0dca7215931e7b679b6b57cbb272e97a663d65d4871f55d09a4c34fc1567ec941ce3d02f2b1d6c73a96f529648a15e0053304a40fd41b23add1610faa2ba68d8d20fe97621d7e83b686475e6cac48cfccb99ab6027b10157810fb1d1a8853ed20e37e8b8596960390050000"], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) 0s ago: executing program 4 (id=538): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000400)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000440)) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket(0x2a, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e1f, 0x40, @mcast1, 0x5}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0x7, @empty, 0x4}], 0xa0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xc3, 0x1, 0x1, {0x22, 0x6c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x71, 0xa5, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) kernel console output (not intermixed with test programs): [ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.482337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.492213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.500799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.509762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.549776][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.570716][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.586063][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.609811][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.622636][ T4183] device veth0_macvtap entered promiscuous mode [ 63.633892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.663636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.681198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.688712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.728649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.743172][ T4183] device veth1_macvtap entered promiscuous mode [ 63.790598][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.811106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.819247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.834926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.866224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.881709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.895289][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.906727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.923278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.937821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.948419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.963071][ T4184] device veth0_vlan entered promiscuous mode [ 63.977560][ T4184] device veth1_vlan entered promiscuous mode [ 63.997297][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.008215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.019257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.028414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.037830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.047604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.065337][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.075137][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.084456][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.094997][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.114367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.123539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.131924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.139542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.149344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.164723][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.192660][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.203060][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.212477][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.220421][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.248805][ T4182] device veth0_vlan entered promiscuous mode [ 64.261253][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.269631][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.280908][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.288807][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.311487][ T4193] device veth0_vlan entered promiscuous mode [ 64.322163][ T4184] device veth0_macvtap entered promiscuous mode [ 64.331993][ T4182] device veth1_vlan entered promiscuous mode [ 64.342970][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.357152][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.366191][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.375484][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.393464][ T4184] device veth1_macvtap entered promiscuous mode [ 64.432274][ T4193] device veth1_vlan entered promiscuous mode [ 64.455396][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.465057][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.497208][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.509647][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.525172][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.538534][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.549724][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.560656][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.578644][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.587587][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.596925][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.605834][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.615339][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.624067][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.633941][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.646108][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.656082][ T4185] device veth0_vlan entered promiscuous mode [ 64.674393][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.685171][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.689846][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.702627][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.711633][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.720736][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.741761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.749992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.759014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.768585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.779184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.804065][ T4193] device veth0_macvtap entered promiscuous mode [ 64.816406][ T4193] device veth1_macvtap entered promiscuous mode [ 64.832674][ T4182] device veth0_macvtap entered promiscuous mode [ 64.844773][ T4185] device veth1_vlan entered promiscuous mode [ 64.862801][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.893838][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.905057][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.918082][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.928445][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.939056][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.950385][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.961336][ T4182] device veth1_macvtap entered promiscuous mode [ 64.974502][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.982827][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.990953][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.998958][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.007955][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.018757][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.027084][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.036731][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.052775][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.068271][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.079931][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.091297][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.103286][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.149241][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.159433][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.168392][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.180677][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.197861][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.211029][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 65.224354][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 65.230588][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 65.236850][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.246058][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 65.248859][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.252314][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 65.277310][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.289028][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.299422][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.310572][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.321675][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.332443][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.344988][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.358329][ T4185] device veth0_macvtap entered promiscuous mode [ 65.373256][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.385055][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.387057][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.402953][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.404913][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.420791][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.429998][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.439869][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.470130][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.482383][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.493029][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.504287][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.515000][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.527805][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.540380][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.551153][ T4185] device veth1_macvtap entered promiscuous mode [ 65.569931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.578870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.595481][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.609270][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.621261][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.629993][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.662510][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.674348][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.674381][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.686676][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.705834][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.716691][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.729645][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.740138][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.753767][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.765301][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.777800][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.804537][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.813302][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.822304][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.839663][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.853946][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.866061][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.876920][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.887256][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.897971][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.908041][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.918924][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.932227][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.968129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.978118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.003359][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.014277][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.023664][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.032959][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.046389][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.086521][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.164884][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.196524][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.227222][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.285626][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.325872][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.334274][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.357007][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.361042][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.369155][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.419233][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.424743][ T4303] loop1: detected capacity change from 0 to 1024 [ 66.455347][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.471746][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.479810][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.504739][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.524014][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.558836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.285680][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 67.381917][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 67.418715][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 67.426263][ T4317] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.451609][ T4316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.519433][ T4318] loop2: detected capacity change from 0 to 1024 [ 67.522443][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 67.557079][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 67.831649][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.112149][ T4336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 68.817561][ T4328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.375674][ T4309] loop3: detected capacity change from 0 to 40427 [ 69.474549][ T4309] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 69.492607][ T4309] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 69.666442][ T4359] loop1: detected capacity change from 0 to 512 [ 70.296717][ T4309] F2FS-fs (loop3): invalid crc value [ 70.445063][ T4309] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 70.520859][ C0] sched: RT throttling activated [ 71.317785][ T4359] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 71.331422][ T4359] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.527423][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.535244][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.989940][ T4381] netlink: 116 bytes leftover after parsing attributes in process `syz.0.24'. [ 73.320379][ T2856] cfg80211: failed to load regulatory.db [ 73.534739][ T4385] loop2: detected capacity change from 0 to 256 [ 73.611723][ T4385] ======================================================= [ 73.611723][ T4385] WARNING: The mand mount option has been deprecated and [ 73.611723][ T4385] and is ignored by this kernel. Remove the mand [ 73.611723][ T4385] option from the mount to silence this warning. [ 73.611723][ T4385] ======================================================= [ 73.766614][ T4385] FAT-fs (loop2): Directory bread(block 64) failed [ 73.775125][ T4385] FAT-fs (loop2): Directory bread(block 65) failed [ 73.807778][ T4385] FAT-fs (loop2): Directory bread(block 66) failed [ 73.814639][ T2856] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.848123][ T4385] FAT-fs (loop2): Directory bread(block 67) failed [ 73.868347][ T4385] FAT-fs (loop2): Directory bread(block 68) failed [ 73.889819][ T4385] FAT-fs (loop2): Directory bread(block 69) failed [ 73.916673][ T4385] FAT-fs (loop2): Directory bread(block 70) failed [ 73.945410][ T4385] FAT-fs (loop2): Directory bread(block 71) failed [ 73.955174][ T4385] FAT-fs (loop2): Directory bread(block 72) failed [ 73.968260][ T4385] FAT-fs (loop2): Directory bread(block 73) failed [ 74.070996][ T2856] usb 4-1: Using ep0 maxpacket: 32 [ 74.102799][ T4374] loop4: detected capacity change from 0 to 40427 [ 74.218236][ T4374] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 74.261146][ T2856] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 74.722162][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.731141][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 74.740369][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 74.749337][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 74.758489][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 74.767460][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.776544][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.785599][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.794744][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.803983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.320687][ T4255] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.537948][ T2856] usb 4-1: config 0 has no interface number 0 [ 75.538323][ T4374] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 75.561399][ T2856] usb 4-1: New USB device found, idVendor=238b, idProduct=4c29, bcdDevice=96.1d [ 76.026744][ T2856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.040957][ T2856] usb 4-1: config 0 descriptor?? [ 76.092758][ T4374] F2FS-fs (loop4): invalid crc value [ 76.099165][ T4374] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 76.162908][ T2856] usb 4-1: bad CDC descriptors [ 76.215250][ T2856] usb 4-1: bad CDC descriptors [ 76.412255][ T2856] usb 4-1: USB disconnect, device number 2 [ 76.482666][ T4407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'. [ 76.574372][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.071152][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 77.401191][ T21] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 77.466323][ T4412] loop2: detected capacity change from 0 to 16 [ 77.575414][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.592130][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 77.609096][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 77.635425][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.685717][ T4412] erofs: (device loop2): mounted with root inode @ nid 36. [ 78.584051][ T21] usb 2-1: config 0 descriptor?? [ 79.677975][ T21] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 79.753178][ T4426] loop3: detected capacity change from 0 to 512 [ 79.776860][ T21] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 79.796528][ T21] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 79.806627][ T21] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 79.811032][ T4426] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.818300][ T21] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 79.835238][ T21] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 79.845177][ T21] apple 0003:05AC:026C.0001: unknown main item tag 0x0 [ 79.866570][ T21] apple 0003:05AC:026C.0001: hidraw0: USB HID v10.00 Device [HID 05ac:026c] on usb-dummy_hcd.1-1/input0 [ 79.932986][ T21] usb 2-1: USB disconnect, device number 2 [ 80.013188][ T4426] EXT4-fs (loop3): 1 orphan inode deleted [ 80.019078][ T4426] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.034628][ T4426] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.249840][ T4434] tmpfs: Bad value for 'nr_inodes' [ 81.851874][ T4255] usb 1-1: unable to read config index 0 descriptor/all [ 81.859839][ T4255] usb 1-1: can't read configurations, error -110 [ 82.191092][ T4255] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.402844][ T4255] usb 1-1: device descriptor read/64, error -32 [ 82.544127][ T4255] usb usb1-port1: attempt power cycle [ 84.681020][ T4255] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.760971][ T4255] usb 1-1: device descriptor read/8, error -32 [ 84.775887][ T4439] fido_id[4439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 84.784234][ T4455] Zero length message leads to an empty skb [ 85.041059][ T4255] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.181081][ T4255] usb 1-1: device descriptor read/8, error -71 [ 85.319621][ T4255] usb usb1-port1: unable to enumerate USB device [ 86.009015][ T4476] loop4: detected capacity change from 0 to 128 [ 86.751848][ T4469] loop3: detected capacity change from 0 to 8192 [ 86.900176][ T4486] raw_sendmsg: syz.0.50 forgot to set AF_INET. Fix it! [ 87.171248][ T4484] ipt_CLUSTERIP: Please specify destination IP [ 88.390983][ T3160] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.853246][ T3160] usb 5-1: config 0 has no interfaces? [ 89.091322][ T3160] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 89.101060][ T3160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.119626][ T3160] usb 5-1: Product: syz [ 89.124462][ T3160] usb 5-1: Manufacturer: syz [ 89.129084][ T3160] usb 5-1: SerialNumber: syz [ 89.191781][ T3160] usb 5-1: config 0 descriptor?? [ 89.713314][ T4514] loop2: detected capacity change from 0 to 1024 [ 89.847361][ T4514] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.644319][ T4333] usb 5-1: USB disconnect, device number 2 [ 92.699516][ T4527] netlink: 312 bytes leftover after parsing attributes in process `syz.1.62'. [ 93.180995][ T4333] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.021241][ T4333] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 95.042465][ T4333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.080930][ T4333] usb 5-1: Product: syz [ 95.085169][ T4333] usb 5-1: Manufacturer: syz [ 95.117828][ T4333] usb 5-1: SerialNumber: syz [ 95.153891][ T4333] usb 5-1: config 0 descriptor?? [ 95.931504][ T4333] usb 5-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1f, error -71 [ 95.954984][ T4333] usb 5-1: Firmware version (0.0) predates our first public release. [ 95.981023][ T4333] usb 5-1: Please update to version 0.2 or newer [ 96.003764][ T4333] usb 5-1: atusb_probe: initialization failed, error = -71 [ 96.041340][ T4333] atusb: probe of 5-1:0.0 failed with error -71 [ 96.072911][ T4333] usb 5-1: USB disconnect, device number 3 [ 96.165797][ T4557] loop2: detected capacity change from 0 to 512 [ 96.208969][ T4557] EXT4-fs (loop2): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 98.697133][ T26] audit: type=1326 audit(1753845096.108:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282939a9 code=0x7ffc0000 [ 98.817017][ T26] audit: type=1326 audit(1753845096.138:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282939a9 code=0x7ffc0000 [ 99.046070][ T26] audit: type=1326 audit(1753845096.138:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fa9282939a9 code=0x7ffc0000 [ 99.121796][ T26] audit: type=1326 audit(1753845096.138:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282939a9 code=0x7ffc0000 [ 99.181873][ T4333] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.210987][ T26] audit: type=1326 audit(1753845096.138:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9282939a9 code=0x7ffc0000 [ 99.721200][ T4333] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 99.735080][ T4333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.783916][ T4333] usb 2-1: Product: syz [ 99.840952][ T4333] usb 2-1: Manufacturer: syz [ 99.855946][ T4333] usb 2-1: SerialNumber: syz [ 99.880547][ T4333] usb 2-1: config 0 descriptor?? [ 100.621123][ T4333] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1f, error -71 [ 100.651010][ T4333] usb 2-1: Firmware version (0.0) predates our first public release. [ 100.689526][ T4333] usb 2-1: Please update to version 0.2 or newer [ 100.729669][ T4613] loop2: detected capacity change from 0 to 512 [ 100.751124][ T4333] usb 2-1: atusb_probe: initialization failed, error = -71 [ 100.777141][ T4333] atusb: probe of 2-1:0.0 failed with error -71 [ 100.819732][ T4333] usb 2-1: USB disconnect, device number 3 [ 100.957435][ T4613] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,user_xattr,min_batch_time=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 101.060581][ T4613] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.082569][ T4613] device bridge_slave_1 left promiscuous mode [ 101.089878][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.211449][ T4613] device bridge_slave_0 left promiscuous mode [ 101.252818][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.252917][ T4601] loop4: detected capacity change from 0 to 40427 [ 101.323991][ T26] audit: type=1326 audit(1753845098.738:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce5a159a9 code=0x7ffc0000 [ 101.431620][ T26] audit: type=1326 audit(1753845098.758:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce5a159a9 code=0x7ffc0000 [ 101.479127][ T4601] F2FS-fs (loop4): invalid crc value [ 101.482818][ T4627] loop1: detected capacity change from 0 to 512 [ 101.557164][ T4601] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.672430][ T4627] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nogrpid,,errors=continue. Quota mode: writeback. [ 101.738871][ T4627] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.750475][ T26] audit: type=1326 audit(1753845098.758:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fcce5a159a9 code=0x7ffc0000 [ 101.970095][ T4601] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 102.380089][ T26] audit: type=1326 audit(1753845098.758:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce5a159a9 code=0x7ffc0000 [ 102.956328][ T4645] fuse: Bad value for 'fd' [ 102.968391][ T4184] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 102.995664][ T4645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.97'. [ 103.014758][ T26] audit: type=1326 audit(1753845098.758:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce5a159a9 code=0x7ffc0000 [ 103.052147][ T4184] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 103.058326][ T4646] netlink: 'syz.2.97': attribute type 16 has an invalid length. [ 103.193175][ T4645] loop2: detected capacity change from 0 to 2048 [ 103.212454][ T4646] netlink: 'syz.2.97': attribute type 17 has an invalid length. [ 103.328328][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.364597][ T4645] loop2: p1 < > p4 [ 103.379715][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.411376][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.427222][ T4645] loop2: p4 size 8388608 extends beyond EOD, truncated [ 104.034865][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 104.052058][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 104.181014][ T4256] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 104.802632][ T4662] loop3: detected capacity change from 0 to 128 [ 104.952014][ T4256] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.039403][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.223317][ T4256] usb 5-1: Product: syz [ 105.310120][ T4256] usb 5-1: Manufacturer: syz [ 105.395746][ T4256] usb 5-1: SerialNumber: syz [ 105.442036][ T4256] usb 5-1: config 0 descriptor?? [ 105.721124][ T4256] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 106.182305][ T4256] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 107.115520][ T4241] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.127274][ T4674] chnl_net:caif_netlink_parms(): no params data found [ 107.176616][ T4233] usb 5-1: USB disconnect, device number 4 [ 107.380993][ T4241] usb 1-1: Using ep0 maxpacket: 16 [ 107.426992][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.435439][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.445511][ T4674] device bridge_slave_0 entered promiscuous mode [ 107.457494][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.465713][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.477652][ T4674] device bridge_slave_1 entered promiscuous mode [ 107.501176][ T4241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.521037][ T4241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.547223][ T4241] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.577094][ T4241] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.596693][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.654087][ T4241] usb 1-1: config 0 descriptor?? [ 107.687073][ T4674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.760778][ T4674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.903067][ T4687] udc-core: couldn't find an available UDC or it's busy [ 107.927748][ T4687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 107.952982][ T4674] team0: Port device team_slave_0 added [ 107.998355][ T4674] team0: Port device team_slave_1 added [ 108.080332][ T4706] netlink: 'syz.2.114': attribute type 3 has an invalid length. [ 109.943846][ T4256] Bluetooth: hci2: command 0x0409 tx timeout [ 110.964340][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.169260][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.211100][ T4241] usbhid 1-1:0.0: can't add hid device: -71 [ 111.228458][ T4241] usbhid: probe of 1-1:0.0 failed with error -71 [ 111.245260][ T4241] usb 1-1: USB disconnect, device number 6 [ 111.268804][ T4674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.001319][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 113.943571][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.950560][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.820951][ T4674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.962279][ T4408] Bluetooth: hci2: command 0x040f tx timeout [ 114.983910][ T4721] tipc: Started in network mode [ 115.005626][ T4721] tipc: Node identity 36415f1cba0a, cluster identity 4711 [ 115.095620][ T4721] tipc: Enabled bearer , priority 0 [ 115.151249][ T4722] device syzkaller0 entered promiscuous mode [ 115.223122][ T4674] device hsr_slave_0 entered promiscuous mode [ 115.286387][ T4674] device hsr_slave_1 entered promiscuous mode [ 115.298738][ T4674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.315898][ T4674] Cannot create hsr debugfs directory [ 115.325846][ T4721] tipc: Resetting bearer [ 115.376096][ T4719] tipc: Resetting bearer [ 115.395418][ T4719] tipc: Disabling bearer [ 115.495321][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.531072][ T4333] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 115.635834][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.739479][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.876773][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.051215][ T4333] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 116.060986][ T1107] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.078166][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.689798][ T4333] usb 1-1: Product: syz [ 117.695190][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 117.706256][ T4333] usb 1-1: Manufacturer: syz [ 117.716126][ T4333] usb 1-1: SerialNumber: syz [ 117.782682][ T4333] usb 1-1: config 0 descriptor?? [ 117.981244][ T1107] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.046399][ T1107] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 118.196795][ T4333] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 119.716657][ T4674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 119.749791][ T1107] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.752729][ T4674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 119.824319][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.834433][ T4333] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 119.864874][ T4333] usb 1-1: USB disconnect, device number 7 [ 119.874704][ T4674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.177875][ T4749] loop3: detected capacity change from 0 to 128 [ 120.882570][ T4674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.114054][ T4758] loop3: detected capacity change from 0 to 512 [ 121.125141][ T4755] xt_CT: No such helper "pptp" [ 121.246537][ T4758] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.347512][ T4758] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.127: bg 0: block 248: padding at end of block bitmap is not set [ 121.541333][ T4758] Quota error (device loop3): write_blk: dquota write failed [ 121.594035][ T4758] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 121.664982][ T4758] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.127: Failed to acquire dquot type 1 [ 121.710366][ T4674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.834017][ T4758] EXT4-fs (loop3): 1 truncate cleaned up [ 121.868421][ T4758] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.692405][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.774087][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.983371][ T4785] netlink: 116 bytes leftover after parsing attributes in process `syz.2.133'. [ 123.041104][ T4674] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.069576][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.086757][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.136714][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.143977][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.316850][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.351189][ T1107] usb 5-1: can't set config #27, error -71 [ 123.371145][ T1107] usb 5-1: USB disconnect, device number 5 [ 123.392348][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.402199][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.414944][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.422117][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.433690][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.446611][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.459988][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.470528][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.485818][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.542022][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.569146][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.661387][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.749526][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.829284][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.868473][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.927399][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.012581][ T1107] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.431219][ T1107] usb 5-1: config 0 has no interfaces? [ 124.621101][ T1107] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 124.648793][ T154] device hsr_slave_0 left promiscuous mode [ 124.656705][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.703585][ T154] device hsr_slave_1 left promiscuous mode [ 124.726292][ T1107] usb 5-1: Product: syz [ 124.770670][ T1107] usb 5-1: Manufacturer: syz [ 124.821234][ T1107] usb 5-1: SerialNumber: syz [ 124.936803][ T1107] usb 5-1: config 0 descriptor?? [ 124.954326][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.971438][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.023525][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.069955][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.120425][ T154] device bridge_slave_1 left promiscuous mode [ 125.165292][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.222610][ T154] device bridge_slave_0 left promiscuous mode [ 125.274089][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.395371][ T154] device veth1_macvtap left promiscuous mode [ 125.434779][ T154] device veth0_macvtap left promiscuous mode [ 125.467763][ T154] device veth1_vlan left promiscuous mode [ 125.505666][ T154] device veth0_vlan left promiscuous mode [ 127.298177][ T154] team0 (unregistering): Port device team_slave_1 removed [ 127.328011][ T154] team0 (unregistering): Port device team_slave_0 removed [ 127.370288][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.439448][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.589301][ T154] bond0 (unregistering): Released all slaves [ 127.711617][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.729482][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.758497][ T4824] netlink: 44 bytes leftover after parsing attributes in process `syz.0.141'. [ 127.815778][ T4674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.003449][ T4233] usb 5-1: USB disconnect, device number 6 [ 128.053082][ T4850] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.360938][ T2856] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 128.721528][ T2856] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.753047][ T2856] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.901112][ T2856] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.910614][ T2856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.941969][ T4870] netlink: 116 bytes leftover after parsing attributes in process `syz.3.148'. [ 128.952506][ T4852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 129.150758][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.198388][ T4852] netlink: 48 bytes leftover after parsing attributes in process `syz.2.144'. [ 129.250656][ T4852] udc-core: couldn't find an available UDC or it's busy [ 129.258131][ T4852] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 129.267541][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.300700][ T4674] device veth0_vlan entered promiscuous mode [ 129.468009][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.477461][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.487090][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.495228][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.513667][ T4674] device veth1_vlan entered promiscuous mode [ 129.748886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.774286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.867670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.931596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.975857][ T4674] device veth0_macvtap entered promiscuous mode [ 129.995341][ T4674] device veth1_macvtap entered promiscuous mode [ 130.101363][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.180304][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.241043][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.322919][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.360773][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.415989][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.465281][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.527118][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.622479][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.699386][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.726457][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.821703][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.867686][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.003537][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.026089][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.550897][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.610969][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.661116][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.713027][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.725233][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.742569][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.821160][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.859764][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.902241][ T4674] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.944866][ T1107] usb 3-1: USB disconnect, device number 2 [ 132.963426][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.969791][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.985939][ T4674] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.027940][ T4674] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.106282][ T4674] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.174898][ T4900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.154'. [ 133.441869][ T4367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.494175][ T4367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.587226][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.601831][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.630531][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.716184][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.781108][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.991109][ T1107] usb 3-1: config 0 has no interfaces? [ 134.171496][ T1107] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 134.204826][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.308990][ T1107] usb 3-1: Product: syz [ 134.339446][ T1107] usb 3-1: Manufacturer: syz [ 134.388351][ T1107] usb 3-1: SerialNumber: syz [ 134.446214][ T1107] usb 3-1: config 0 descriptor?? [ 134.740143][ T4906] udc-core: couldn't find an available UDC or it's busy [ 134.767774][ T4906] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.503001][ T4906] block device autoloading is deprecated and will be removed. [ 136.782889][ T4934] netlink: 116 bytes leftover after parsing attributes in process `syz.3.159'. [ 137.691108][ T1107] usb 3-1: USB disconnect, device number 3 [ 137.901061][ T4408] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.271144][ T4408] usb 5-1: config 0 has no interfaces? [ 138.276981][ T4408] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 138.398772][ T4408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.447482][ T4408] usb 5-1: config 0 descriptor?? [ 138.627877][ T4963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.165'. [ 138.718119][ T4408] usb 5-1: USB disconnect, device number 7 [ 139.027894][ T1107] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.561597][ T1107] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.642202][ T1107] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.580716][ T1107] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.602626][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.889947][ T4986] netlink: 116 bytes leftover after parsing attributes in process `syz.0.170'. [ 146.491009][ T1107] usb 4-1: can't set config #27, error -71 [ 146.509439][ T1107] usb 4-1: USB disconnect, device number 3 [ 146.728298][ T5049] kvm: emulating exchange as write [ 146.801025][ T4241] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 147.741538][ T4241] usb 5-1: config 0 has no interfaces? [ 147.747939][ T4241] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 148.157249][ T5058] netlink: 28 bytes leftover after parsing attributes in process `syz.5.184'. [ 148.166397][ T4241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.221691][ T4241] usb 5-1: config 0 descriptor?? [ 148.505775][ T4292] usb 5-1: USB disconnect, device number 8 [ 150.181014][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 150.470919][ T1107] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.811509][ T21] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 150.831305][ T1107] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.873801][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.918699][ T1107] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 150.981555][ T21] usb 6-1: Product: syz [ 151.017259][ T21] usb 6-1: Manufacturer: syz [ 151.037634][ T21] usb 6-1: SerialNumber: syz [ 151.037662][ T1107] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.098508][ T21] usb 6-1: config 0 descriptor?? [ 151.166843][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.281472][ T5095] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 151.517978][ T5095] netlink: 48 bytes leftover after parsing attributes in process `syz.0.192'. [ 151.569993][ T5095] udc-core: couldn't find an available UDC or it's busy [ 151.603316][ T5095] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 152.461106][ T21] usb 6-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1f, error -71 [ 152.471367][ T21] usb 6-1: Firmware version (0.0) predates our first public release. [ 152.555280][ T21] usb 6-1: Please update to version 0.2 or newer [ 152.611158][ T21] usb 6-1: atusb_probe: initialization failed, error = -71 [ 152.638875][ T21] atusb: probe of 6-1:0.0 failed with error -71 [ 152.695440][ T21] usb 6-1: USB disconnect, device number 2 [ 152.737128][ T5124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.197'. [ 153.216713][ T5133] tipc: Started in network mode [ 153.235676][ T5133] tipc: Node identity aab1e77d0749, cluster identity 4711 [ 153.243323][ T4408] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.286862][ T5133] tipc: Enabled bearer , priority 0 [ 153.338095][ T5134] device syzkaller0 entered promiscuous mode [ 153.391313][ T5132] tipc: Resetting bearer [ 153.461265][ T5132] tipc: Disabling bearer [ 153.621631][ T4408] usb 5-1: config 0 has no interfaces? [ 153.628893][ T4408] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 153.742131][ T4408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.760292][ T4408] usb 5-1: config 0 descriptor?? [ 153.870121][ T5145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.200'. [ 154.864605][ T4333] usb 5-1: USB disconnect, device number 9 [ 155.461116][ T4333] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 155.817553][ T4408] usb 1-1: USB disconnect, device number 8 [ 155.911213][ T4333] usb 6-1: config 0 has no interfaces? [ 156.092079][ T4333] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.142439][ T4333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.175066][ T4333] usb 6-1: Product: syz [ 156.179454][ T4333] usb 6-1: Manufacturer: syz [ 157.050965][ T4333] usb 6-1: SerialNumber: syz [ 157.070620][ T4333] usb 6-1: config 0 descriptor?? [ 157.156294][ T5182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.209'. [ 157.339755][ T5160] udc-core: couldn't find an available UDC or it's busy [ 157.387687][ T5160] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 157.642430][ T4256] usb 6-1: USB disconnect, device number 3 [ 157.670960][ T4333] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.081215][ T4333] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.168884][ T4333] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 158.371014][ T4333] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.606400][ T4333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.641423][ T5190] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 160.134708][ T5190] netlink: 48 bytes leftover after parsing attributes in process `syz.0.210'. [ 161.651091][ T4408] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 161.811028][ T4333] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 162.021005][ T4408] usb 3-1: config 0 has no interfaces? [ 162.026581][ T4408] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 162.077274][ T4408] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.124023][ T4408] usb 3-1: config 0 descriptor?? [ 162.281446][ T4333] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.368664][ T4408] usb 3-1: USB disconnect, device number 4 [ 162.403624][ T4333] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.489495][ T4333] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.577862][ T4333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.623926][ T4241] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 162.691415][ T5232] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.881106][ T4241] usb 4-1: Using ep0 maxpacket: 8 [ 162.924903][ T5232] netlink: 48 bytes leftover after parsing attributes in process `syz.5.217'. [ 162.993350][ T5232] udc-core: couldn't find an available UDC or it's busy [ 163.012507][ T5232] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.051045][ T4241] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.181221][ T4241] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 163.201204][ T4241] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 163.234966][ T4241] usb 4-1: config 1 interface 0 has no altsetting 0 [ 163.662856][ T4333] usb 6-1: USB disconnect, device number 4 [ 163.681593][ T4241] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 163.697087][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.746523][ T4241] usb 4-1: Product: syz [ 163.754946][ T4241] usb 4-1: Manufacturer: syz [ 163.759770][ T4241] usb 4-1: SerialNumber: syz [ 163.791527][ T5240] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 163.896843][ T4256] usb 1-1: USB disconnect, device number 9 [ 164.113797][ T4241] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 164.193973][ T3546] bcm5974 4-1:1.0: could not read from device [ 164.219216][ T4241] usb 4-1: USB disconnect, device number 4 [ 164.230932][ T3546] bcm5974 4-1:1.0: could not read from device [ 164.246645][ T3546] bcm5974 4-1:1.0: could not read from device [ 164.561030][ T4256] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.641942][ T21] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 164.932339][ T4256] usb 1-1: config 0 has no interfaces? [ 165.091223][ T4256] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 165.119049][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.181258][ T21] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 165.211284][ T5265] tipc: Enabled bearer , priority 0 [ 165.227415][ T5265] tipc: Resetting bearer [ 165.246892][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.263935][ T4256] usb 1-1: Product: syz [ 165.273531][ T5264] tipc: Disabling bearer [ 165.310966][ T4256] usb 1-1: Manufacturer: syz [ 165.329976][ T4256] usb 1-1: SerialNumber: syz [ 165.350913][ T21] usb 3-1: Product: syz [ 165.396224][ T21] usb 3-1: Manufacturer: syz [ 165.418822][ T4256] usb 1-1: config 0 descriptor?? [ 165.454343][ T21] usb 3-1: SerialNumber: syz [ 165.484387][ T21] usb 3-1: config 0 descriptor?? [ 165.728485][ T5255] udc-core: couldn't find an available UDC or it's busy [ 165.735687][ T21] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 165.744745][ T5255] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.011404][ T1107] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.381021][ T1107] usb 4-1: config 0 has no interfaces? [ 166.387680][ T1107] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 166.452172][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.471278][ T21] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 166.500341][ T1107] usb 4-1: config 0 descriptor?? [ 166.787920][ T1107] usb 4-1: USB disconnect, device number 5 [ 167.478186][ T4292] usb 3-1: USB disconnect, device number 5 [ 167.772726][ T5302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.233'. [ 168.812300][ T5306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.235'. [ 169.132337][ T4292] usb 1-1: USB disconnect, device number 10 [ 169.161143][ T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 169.417754][ T5321] netlink: 116 bytes leftover after parsing attributes in process `syz.0.237'. [ 169.491074][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 169.521168][ T4241] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.671193][ T21] usb 6-1: unable to get BOS descriptor or descriptor too short [ 169.821444][ T21] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 169.882600][ T21] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 169.941428][ T4241] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.990746][ T21] usb 6-1: config 1 interface 0 has no altsetting 0 [ 170.002393][ T4241] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.093615][ T4241] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.131828][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.271015][ T5316] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.301197][ T21] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 170.334159][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.386916][ T21] usb 6-1: Product: syz [ 170.422177][ T21] usb 6-1: Manufacturer: syz [ 170.426882][ T21] usb 6-1: SerialNumber: syz [ 170.485066][ T5316] netlink: 48 bytes leftover after parsing attributes in process `syz.2.236'. [ 170.534251][ T5316] udc-core: couldn't find an available UDC or it's busy [ 170.541613][ T5316] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 170.551188][ T5308] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 170.883836][ T21] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input6 [ 170.912020][ T4292] usb 3-1: USB disconnect, device number 6 [ 170.980973][ T3546] bcm5974 6-1:1.0: could not read from device [ 171.031075][ T21] usb 6-1: USB disconnect, device number 5 [ 171.081190][ T3546] bcm5974 6-1:1.0: could not read from device [ 171.428090][ T5113] udevd[5113]: Error opening device "/dev/input/event4": No such file or directory [ 171.523529][ T5113] udevd[5113]: Unable to EVIOCGABS device "/dev/input/event4" [ 171.704589][ T5113] udevd[5113]: Unable to EVIOCGABS device "/dev/input/event4" [ 171.814555][ T5113] udevd[5113]: Unable to EVIOCGABS device "/dev/input/event4" [ 171.841084][ T21] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 171.910281][ T5113] udevd[5113]: Unable to EVIOCGABS device "/dev/input/event4" [ 172.251367][ T21] usb 6-1: config 0 has no interfaces? [ 172.256907][ T21] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 172.266091][ T4233] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 172.314652][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.371447][ T21] usb 6-1: config 0 descriptor?? [ 172.674909][ T2856] usb 6-1: USB disconnect, device number 6 [ 172.852370][ T4233] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 172.861806][ T4241] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 172.877917][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.891256][ T4233] usb 1-1: Product: syz [ 172.895560][ T4233] usb 1-1: Manufacturer: syz [ 172.900257][ T4233] usb 1-1: SerialNumber: syz [ 172.907425][ T4233] usb 1-1: config 0 descriptor?? [ 173.161267][ T4233] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 173.281346][ T4241] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.299808][ T4241] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 173.321692][ T4241] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.386578][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.421481][ T5368] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 173.655053][ T5368] netlink: 48 bytes leftover after parsing attributes in process `syz.2.246'. [ 173.772831][ T21] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 173.922056][ T4233] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 174.181267][ T21] usb 6-1: config 0 has no interfaces? [ 174.342094][ T21] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 174.359209][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.379000][ T21] usb 6-1: Product: syz [ 174.396024][ T21] usb 6-1: Manufacturer: syz [ 174.409054][ T21] usb 6-1: SerialNumber: syz [ 174.436716][ T21] usb 6-1: config 0 descriptor?? [ 174.694933][ T5385] udc-core: couldn't find an available UDC or it's busy [ 174.708205][ T5385] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 174.983566][ T21] usb 3-1: USB disconnect, device number 7 [ 175.143928][ T2856] usb 1-1: USB disconnect, device number 11 [ 175.837296][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 177.250915][ T2856] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 177.407332][ T5456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.259'. [ 177.451915][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 178.481325][ T2856] usb 1-1: config 0 has no interfaces? [ 178.486919][ T2856] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 178.557858][ T2856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.561206][ T21] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 178.629164][ T21] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 178.629644][ T2856] usb 1-1: config 0 descriptor?? [ 178.680388][ T21] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 178.706356][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.761618][ T5442] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 178.925038][ T21] usb 4-1: USB disconnect, device number 6 [ 178.961175][ T4408] usb 1-1: USB disconnect, device number 12 [ 179.121019][ T1107] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 179.286769][ T2856] usb 6-1: USB disconnect, device number 7 [ 179.645950][ T1107] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 179.669368][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.677993][ T2856] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 180.608286][ T1107] usb 3-1: Product: syz [ 180.613033][ T1107] usb 3-1: Manufacturer: syz [ 180.617654][ T1107] usb 3-1: SerialNumber: syz [ 180.624613][ T1107] usb 3-1: config 0 descriptor?? [ 180.892473][ T1107] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 180.971083][ T2856] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.019911][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 181.132837][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 181.164892][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 181.180267][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 181.188884][ T2856] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.200703][ T4233] Bluetooth: hci1: command 0x0406 tx timeout [ 181.379694][ T2856] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.530876][ T2856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.571230][ T5485] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 181.691267][ T1107] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 181.825345][ T5485] netlink: 48 bytes leftover after parsing attributes in process `syz.5.265'. [ 181.934357][ T5525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.275'. [ 182.774022][ T1107] usb 3-1: USB disconnect, device number 8 [ 183.081370][ T4240] usb 6-1: USB disconnect, device number 8 [ 183.150948][ T4233] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.296970][ T5534] device syzkaller0 entered promiscuous mode [ 183.321056][ T1107] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 183.531189][ T4233] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.585403][ T4233] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 183.616843][ T4233] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.643320][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.711127][ T1107] usb 3-1: config 0 has no interfaces? [ 183.719038][ T1107] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 184.588898][ T5528] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 184.602283][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.614484][ T1107] usb 3-1: config 0 descriptor?? [ 184.867934][ T1107] usb 3-1: USB disconnect, device number 9 [ 185.740989][ T4233] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 186.155782][ T5566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.289'. [ 186.233187][ T1107] usb 4-1: USB disconnect, device number 7 [ 186.331283][ T4233] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 186.384525][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.395699][ T5570] device syzkaller0 entered promiscuous mode [ 186.420978][ T4233] usb 3-1: Product: syz [ 186.431207][ T4233] usb 3-1: Manufacturer: syz [ 186.441116][ T4233] usb 3-1: SerialNumber: syz [ 186.461289][ T4233] usb 3-1: config 0 descriptor?? [ 186.500969][ T4242] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 186.741133][ T4233] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.750952][ T4242] usb 1-1: Using ep0 maxpacket: 8 [ 186.911066][ T4242] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.971059][ T4256] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 187.001203][ T4242] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 187.049916][ T4242] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 187.106238][ T4242] usb 1-1: config 1 interface 0 has no altsetting 0 [ 187.240862][ T4256] usb 5-1: Using ep0 maxpacket: 16 [ 187.281168][ T4242] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 187.318082][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.342268][ T4242] usb 1-1: Product: syz [ 187.378700][ T4242] usb 1-1: Manufacturer: syz [ 187.434566][ T4242] usb 1-1: SerialNumber: syz [ 187.501018][ T4256] usb 5-1: config 0 has no interfaces? [ 187.501195][ T5568] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 187.507052][ T4256] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 187.567877][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.619753][ T4256] usb 5-1: config 0 descriptor?? [ 187.834024][ T4242] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 188.761149][ T3546] bcm5974 1-1:1.0: could not read from device [ 188.828276][ T4242] usb 1-1: USB disconnect, device number 13 [ 189.230960][ T1107] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 189.441057][ T4233] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 189.479518][ T4233] usb 3-1: USB disconnect, device number 10 [ 189.601196][ T1107] usb 6-1: config 0 has no interfaces? [ 189.761335][ T1107] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 189.792401][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.859191][ T1107] usb 6-1: Product: syz [ 189.877407][ T1107] usb 6-1: Manufacturer: syz [ 189.893879][ T1107] usb 6-1: SerialNumber: syz [ 189.945169][ T1107] usb 6-1: config 0 descriptor?? [ 190.257790][ T5590] udc-core: couldn't find an available UDC or it's busy [ 190.281931][ T5590] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 190.730934][ T1107] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 191.101351][ T1107] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.142330][ T1107] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.213418][ T1107] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.272000][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.361472][ T5605] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 191.415445][ T4233] usb 5-1: USB disconnect, device number 10 [ 191.590898][ T5605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.300'. [ 194.406296][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.413498][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.640868][ T1107] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 194.743512][ T4233] usb 6-1: USB disconnect, device number 9 [ 195.231076][ T1107] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 195.254510][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.323735][ T4233] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 195.466960][ T1107] usb 1-1: Product: syz [ 195.510890][ T1107] usb 1-1: Manufacturer: syz [ 195.560024][ T1107] usb 1-1: SerialNumber: syz [ 195.592424][ T4233] usb 6-1: Using ep0 maxpacket: 16 [ 195.619143][ T4333] usb 3-1: USB disconnect, device number 11 [ 195.647415][ T1107] usb 1-1: config 0 descriptor?? [ 195.711110][ T4233] usb 6-1: config 0 has no interfaces? [ 195.716845][ T4233] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 195.771109][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.956685][ T4233] usb 6-1: config 0 descriptor?? [ 196.003726][ T1107] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 196.465252][ T5649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.313'. [ 197.520287][ T5657] loop2: detected capacity change from 0 to 1024 [ 199.100157][ T4233] usb 6-1: USB disconnect, device number 10 [ 199.111070][ T1107] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 199.155755][ T1107] usb 1-1: USB disconnect, device number 14 [ 201.396555][ T5686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.322'. [ 201.521353][ T4292] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 201.720995][ T4333] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.921097][ T4292] usb 1-1: config 0 has no interfaces? [ 202.010888][ T4333] usb 5-1: Using ep0 maxpacket: 8 [ 202.081601][ T4292] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 202.173518][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.182172][ T4333] usb 5-1: unable to get BOS descriptor or descriptor too short [ 202.190126][ T4292] usb 1-1: Product: syz [ 202.250926][ T4292] usb 1-1: Manufacturer: syz [ 202.261473][ T4292] usb 1-1: SerialNumber: syz [ 202.293759][ T4292] usb 1-1: config 0 descriptor?? [ 202.301247][ T4333] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 202.319082][ T4333] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 202.333156][ T4333] usb 5-1: config 1 interface 0 has no altsetting 0 [ 202.492881][ T5696] netlink: 116 bytes leftover after parsing attributes in process `syz.5.325'. [ 202.591089][ T4333] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 202.604514][ T4333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.625480][ T4333] usb 5-1: Product: syz [ 202.632003][ T4333] usb 5-1: Manufacturer: syz [ 202.636983][ T4333] usb 5-1: SerialNumber: syz [ 202.648076][ T5681] udc-core: couldn't find an available UDC or it's busy [ 202.665236][ T5681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 202.684066][ T5690] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 202.765195][ T21] usb 1-1: USB disconnect, device number 15 [ 203.007808][ T4333] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8 [ 203.051085][ T3546] bcm5974 5-1:1.0: could not read from device [ 203.080954][ T3546] bcm5974 5-1:1.0: could not read from device [ 203.115341][ T4333] usb 5-1: USB disconnect, device number 11 [ 203.141370][ T3546] bcm5974 5-1:1.0: could not read from device [ 203.509055][ T5704] netlink: 20 bytes leftover after parsing attributes in process `syz.5.326'. [ 204.660893][ T21] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 205.251211][ T21] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 205.271769][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.309322][ T21] usb 5-1: Product: syz [ 205.345125][ T21] usb 5-1: Manufacturer: syz [ 205.370965][ T21] usb 5-1: SerialNumber: syz [ 205.431048][ T21] usb 5-1: config 0 descriptor?? [ 205.691127][ T21] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 205.771327][ T5713] device syzkaller0 entered promiscuous mode [ 206.381091][ T5729] netlink: 116 bytes leftover after parsing attributes in process `syz.2.336'. [ 206.840984][ T4241] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 207.242294][ T4241] usb 4-1: config 0 has no interfaces? [ 207.356043][ T5737] loop2: detected capacity change from 0 to 1024 [ 207.491128][ T4241] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 207.500600][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.523399][ T4241] usb 4-1: Product: syz [ 207.527722][ T4241] usb 4-1: Manufacturer: syz [ 207.606571][ T4241] usb 4-1: SerialNumber: syz [ 207.629203][ T4241] usb 4-1: config 0 descriptor?? [ 208.017059][ T21] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 208.044414][ T21] usb 5-1: USB disconnect, device number 12 [ 208.168716][ T5733] udc-core: couldn't find an available UDC or it's busy [ 209.139216][ T5733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 209.611058][ T21] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 209.861028][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 209.981979][ T21] usb 5-1: config 0 has no interfaces? [ 209.987990][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 210.049404][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.154513][ T21] usb 5-1: config 0 descriptor?? [ 211.378994][ T5768] device syzkaller0 entered promiscuous mode [ 211.560374][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.347'. [ 211.910074][ T5776] netlink: 116 bytes leftover after parsing attributes in process `syz.5.348'. [ 212.234864][ T4241] usb 4-1: USB disconnect, device number 8 [ 212.304725][ T21] usb 5-1: USB disconnect, device number 13 [ 212.344016][ T5781] loop4: detected capacity change from 0 to 1024 [ 215.300580][ T5803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 215.431215][ T4256] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 217.418669][ T5811] tipc: Started in network mode [ 217.447288][ T5811] tipc: Node identity ae4bceb1edf, cluster identity 4711 [ 217.485842][ T5811] tipc: Enabled bearer , priority 0 [ 217.492968][ T4256] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 217.525543][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.541279][ T5814] device syzkaller0 entered promiscuous mode [ 217.564522][ T5811] tipc: Resetting bearer [ 217.588220][ T5810] tipc: Resetting bearer [ 217.605161][ T5810] tipc: Disabling bearer [ 217.627670][ T4256] usb 3-1: Product: syz [ 217.755430][ T4256] usb 3-1: config 0 descriptor?? [ 217.806003][ T4256] usb 3-1: can't set config #0, error -71 [ 217.861117][ T4256] usb 3-1: USB disconnect, device number 12 [ 218.100952][ T1107] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 218.491289][ T1107] usb 4-1: config 0 has no interfaces? [ 218.701584][ T1107] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 218.731461][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.769047][ T1107] usb 4-1: Product: syz [ 218.790322][ T1107] usb 4-1: Manufacturer: syz [ 218.820268][ T1107] usb 4-1: SerialNumber: syz [ 218.862856][ T1107] usb 4-1: config 0 descriptor?? [ 219.110896][ T4292] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 219.127828][ T5818] udc-core: couldn't find an available UDC or it's busy [ 219.199955][ T5818] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 219.323458][ T4256] usb 4-1: USB disconnect, device number 9 [ 219.390967][ T4292] usb 6-1: Using ep0 maxpacket: 16 [ 219.511042][ T4292] usb 6-1: config 0 has no interfaces? [ 219.516553][ T4292] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 219.571015][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.620991][ T4292] usb 6-1: config 0 descriptor?? [ 219.875902][ T5829] netlink: 116 bytes leftover after parsing attributes in process `syz.4.362'. [ 219.890703][ T5829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.362'. [ 220.326455][ T5835] loop2: detected capacity change from 0 to 1024 [ 221.264305][ T5844] loop4: detected capacity change from 0 to 128 [ 224.930900][ T4292] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 225.400370][ T4233] usb 6-1: USB disconnect, device number 11 [ 225.531106][ T4292] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 225.556483][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.630824][ T4292] usb 3-1: Product: syz [ 225.664539][ T4292] usb 3-1: Manufacturer: syz [ 225.680939][ T4292] usb 3-1: SerialNumber: syz [ 225.712338][ T4292] usb 3-1: config 0 descriptor?? [ 225.980882][ T1107] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 225.991149][ T4292] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 226.367907][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.375'. [ 227.181269][ T1107] usb 6-1: config 0 has no interfaces? [ 227.387343][ T1107] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 227.409298][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.425214][ T1107] usb 6-1: Product: syz [ 227.429412][ T1107] usb 6-1: Manufacturer: syz [ 227.436612][ T1107] usb 6-1: SerialNumber: syz [ 227.469336][ T1107] usb 6-1: config 0 descriptor?? [ 227.739499][ T5864] udc-core: couldn't find an available UDC or it's busy [ 227.783078][ T5864] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 227.862953][ T1107] usb 6-1: USB disconnect, device number 12 [ 228.591138][ T4292] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 228.630059][ T4292] usb 3-1: USB disconnect, device number 13 [ 230.143604][ T4233] Bluetooth: hci5: command 0x0409 tx timeout [ 230.518641][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 230.885695][ T5908] loop3: detected capacity change from 0 to 1024 [ 231.341565][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.369825][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.382170][ T5879] device bridge_slave_0 entered promiscuous mode [ 231.462486][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.507948][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.554804][ T5879] device bridge_slave_1 entered promiscuous mode [ 231.676805][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.760323][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.966021][ T5879] team0: Port device team_slave_0 added [ 231.993324][ T5879] team0: Port device team_slave_1 added [ 232.171722][ T4256] Bluetooth: hci5: command 0x041b tx timeout [ 232.234760][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.301369][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.327995][ T4292] Bluetooth: hci2: command 0x0406 tx timeout [ 232.462941][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.544824][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.575123][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.702753][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.780995][ T4292] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 232.831750][ T4664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.946657][ T4664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.969577][ T5879] device hsr_slave_0 entered promiscuous mode [ 232.985741][ T5879] device hsr_slave_1 entered promiscuous mode [ 233.007223][ T5879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.019927][ T5879] Cannot create hsr debugfs directory [ 233.048957][ T4664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.201625][ T4292] usb 3-1: config 0 has no interfaces? [ 233.223338][ T4664] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.278535][ T5936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.391'. [ 233.382611][ T4292] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 233.402196][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.434218][ T4292] usb 3-1: Product: syz [ 233.438522][ T4292] usb 3-1: Manufacturer: syz [ 233.474107][ T4292] usb 3-1: SerialNumber: syz [ 233.511815][ T4292] usb 3-1: config 0 descriptor?? [ 233.701081][ T4333] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 235.194545][ T4233] Bluetooth: hci5: command 0x040f tx timeout [ 235.211278][ T5928] udc-core: couldn't find an available UDC or it's busy [ 235.262967][ T5928] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 235.281868][ T5879] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.344004][ T5879] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.366833][ T5879] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.404454][ T5879] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.421296][ T4333] usb 6-1: Using ep0 maxpacket: 8 [ 235.440195][ T4292] usb 3-1: USB disconnect, device number 14 [ 235.591132][ T4233] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 235.641208][ T4333] usb 6-1: unable to get BOS descriptor or descriptor too short [ 235.732088][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.734981][ T4333] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 235.785954][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.805770][ T4333] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 235.829001][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.849109][ T4333] usb 6-1: config 1 interface 0 has no altsetting 0 [ 235.863153][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.926946][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.938258][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.001379][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.008620][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.051210][ T4333] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 236.080228][ T4333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.094019][ T4333] usb 6-1: Product: syz [ 236.098435][ T4333] usb 6-1: Manufacturer: syz [ 236.113680][ T4333] usb 6-1: SerialNumber: syz [ 236.126331][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.134306][ T4233] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 236.161561][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.170624][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.188205][ T4233] usb 4-1: Product: syz [ 236.193339][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.211247][ T4233] usb 4-1: Manufacturer: syz [ 236.224195][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.231396][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.241590][ T4333] usb 6-1: can't set config #1, error -71 [ 236.259164][ T4233] usb 4-1: SerialNumber: syz [ 236.270504][ T4333] usb 6-1: USB disconnect, device number 13 [ 236.285279][ T4233] usb 4-1: config 0 descriptor?? [ 236.308310][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.337309][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.330427][ T1107] Bluetooth: hci5: command 0x0419 tx timeout [ 237.351234][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.360605][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.369310][ T4233] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 237.417308][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.496105][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.581610][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.620652][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.656525][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.758001][ T5879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.814344][ T5879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.850140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.861313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.980871][ T4408] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 238.003269][ T4664] device hsr_slave_0 left promiscuous mode [ 238.024728][ T4664] device hsr_slave_1 left promiscuous mode [ 238.076930][ T4664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.137533][ T4664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.196195][ T4664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.254804][ T4664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.312127][ T4664] device bridge_slave_1 left promiscuous mode [ 238.329509][ T4664] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.344995][ T4664] device bridge_slave_0 left promiscuous mode [ 238.352178][ T4408] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.379490][ T4664] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.390696][ T4408] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.440288][ T4408] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.479269][ T4408] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.518208][ T4664] device veth1_macvtap left promiscuous mode [ 238.525363][ T5984] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 238.539963][ T4664] device veth0_macvtap left promiscuous mode [ 238.608431][ T4664] device veth1_vlan left promiscuous mode [ 238.642810][ T4664] device veth0_vlan left promiscuous mode [ 238.755817][ T5984] netlink: 48 bytes leftover after parsing attributes in process `syz.5.399'. [ 238.776048][ T5984] udc-core: couldn't find an available UDC or it's busy [ 238.807188][ T5984] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 239.401087][ T4233] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 239.440292][ T4233] usb 4-1: USB disconnect, device number 10 [ 240.040862][ T4664] team0 (unregistering): Port device team_slave_1 removed [ 240.083733][ T4664] team0 (unregistering): Port device team_slave_0 removed [ 240.139255][ T4664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.189170][ T4664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.361172][ T4664] bond0 (unregistering): Released all slaves [ 240.675492][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.736602][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.787867][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.889207][ T6044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.406'. [ 243.145278][ T4241] usb 6-1: USB disconnect, device number 14 [ 243.221752][ T4240] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 243.373476][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.423453][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.471158][ T4240] usb 5-1: Using ep0 maxpacket: 8 [ 243.517708][ T5879] device veth0_vlan entered promiscuous mode [ 243.553906][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.588618][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.641034][ T4240] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.666938][ T5879] device veth1_vlan entered promiscuous mode [ 243.701671][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.725588][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.751171][ T4240] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 243.784682][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.798321][ T4240] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 243.878734][ T4240] usb 5-1: config 1 interface 0 has no altsetting 0 [ 243.902181][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.955476][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.003191][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.073503][ T5879] device veth0_macvtap entered promiscuous mode [ 244.081333][ T4240] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 244.102710][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.157265][ T4240] usb 5-1: Product: syz [ 244.167214][ T4240] usb 5-1: Manufacturer: syz [ 244.171486][ T5879] device veth1_macvtap entered promiscuous mode [ 244.187628][ T4240] usb 5-1: SerialNumber: syz [ 244.241576][ T6047] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 244.283652][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.306548][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.351074][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.399576][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.431479][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.443245][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.453197][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.466807][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.492477][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.564313][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.408'. [ 244.613393][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.755199][ T4240] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input9 [ 244.764432][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.791756][ T4240] usb 5-1: USB disconnect, device number 14 [ 244.799163][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.990493][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.001301][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.015548][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.025890][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.048108][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.075657][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.096176][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.124539][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.159037][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.208269][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.291302][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.366493][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.434151][ T5879] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.487051][ T5879] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.511036][ T5879] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.570631][ T5879] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.894291][ T6087] tipc: Enabled bearer , priority 0 [ 245.939210][ T1392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.946708][ T6087] tipc: Resetting bearer [ 245.980955][ T1392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.052101][ T6085] tipc: Disabling bearer [ 246.122479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.227474][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.258405][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.376696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 248.113304][ T6112] netlink: 116 bytes leftover after parsing attributes in process `syz.6.376'. [ 248.137370][ T6112] netlink: 40 bytes leftover after parsing attributes in process `syz.6.376'. [ 248.580973][ T1107] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 248.981235][ T1107] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.067199][ T1107] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.176101][ T1107] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.261071][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.310892][ T4233] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 249.391403][ T6121] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 249.622143][ T6121] netlink: 48 bytes leftover after parsing attributes in process `syz.3.416'. [ 249.693148][ T6121] udc-core: couldn't find an available UDC or it's busy [ 249.711635][ T4233] usb 7-1: config 0 has no interfaces? [ 249.745691][ T6121] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 249.873969][ T4233] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 249.903979][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.959450][ T4233] usb 7-1: Product: syz [ 249.994051][ T4233] usb 7-1: Manufacturer: syz [ 250.381641][ T4233] usb 7-1: SerialNumber: syz [ 250.402447][ T4233] usb 7-1: config 0 descriptor?? [ 250.687577][ T6132] udc-core: couldn't find an available UDC or it's busy [ 250.762495][ T6132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 251.515171][ T6165] netlink: 44 bytes leftover after parsing attributes in process `syz.2.426'. [ 252.305442][ T4233] usb 4-1: USB disconnect, device number 11 [ 252.701684][ T21] usb 7-1: USB disconnect, device number 2 [ 255.032587][ T6232] netlink: 44 bytes leftover after parsing attributes in process `syz.2.437'. [ 255.576482][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.439'. [ 255.843835][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.850183][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.925400][ T4256] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 256.241139][ T4256] usb 6-1: Using ep0 maxpacket: 8 [ 256.421366][ T4256] usb 6-1: unable to get BOS descriptor or descriptor too short [ 256.429293][ T4233] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 256.521265][ T4256] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 256.595103][ T4256] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 256.727972][ T4256] usb 6-1: config 1 interface 0 has no altsetting 0 [ 256.831149][ T4233] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.893000][ T4233] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 257.037304][ T4233] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.046981][ T4256] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 257.076317][ T4256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.112751][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.136015][ T4256] usb 6-1: Product: syz [ 257.165949][ T4256] usb 6-1: Manufacturer: syz [ 257.205628][ T4256] usb 6-1: SerialNumber: syz [ 257.221230][ T6251] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 257.241045][ T1107] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 257.291098][ T6241] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 257.468680][ T6251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.440'. [ 257.506469][ T6251] udc-core: couldn't find an available UDC or it's busy [ 257.534478][ T6251] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.604168][ T4256] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input10 [ 257.621218][ T1107] usb 7-1: config 0 has no interfaces? [ 257.681236][ T3546] bcm5974 6-1:1.0: could not read from device [ 257.711605][ T4256] usb 6-1: USB disconnect, device number 15 [ 257.739900][ T4874] bcm5974 6-1:1.0: could not read from device [ 257.781305][ T1107] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 257.818424][ T1107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.870821][ T1107] usb 7-1: Product: syz [ 257.898065][ T1107] usb 7-1: Manufacturer: syz [ 257.930866][ T1107] usb 7-1: SerialNumber: syz [ 257.981614][ T1107] usb 7-1: config 0 descriptor?? [ 258.035284][ T4874] udevd[4874]: Error opening device "/dev/input/event4": No such file or directory [ 258.087598][ T4874] udevd[4874]: Unable to EVIOCGABS device "/dev/input/event4" [ 258.167438][ T4874] udevd[4874]: Unable to EVIOCGABS device "/dev/input/event4" [ 258.326571][ T6270] udc-core: couldn't find an available UDC or it's busy [ 258.344081][ T4874] udevd[4874]: Unable to EVIOCGABS device "/dev/input/event4" [ 258.366593][ T6282] netlink: 116 bytes leftover after parsing attributes in process `syz.5.445'. [ 258.393791][ T6282] netlink: 16 bytes leftover after parsing attributes in process `syz.5.445'. [ 258.406203][ T6270] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 258.427563][ T4874] udevd[4874]: Unable to EVIOCGABS device "/dev/input/event4" [ 259.309681][ T6298] netlink: 44 bytes leftover after parsing attributes in process `syz.5.448'. [ 259.619648][ T6303] loop5: detected capacity change from 0 to 128 [ 260.723021][ T4240] usb 7-1: USB disconnect, device number 3 [ 261.775280][ T4240] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 262.591127][ T2856] usb 4-1: USB disconnect, device number 12 [ 262.820147][ T6341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 262.833775][ T6344] netlink: 116 bytes leftover after parsing attributes in process `syz.3.458'. [ 262.846111][ T6344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.458'. [ 262.896525][ T6341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.191520][ T4240] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 263.214256][ T4240] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.225711][ T6353] netlink: 44 bytes leftover after parsing attributes in process `syz.4.459'. [ 263.266334][ T4240] usb 7-1: Product: syz [ 263.270552][ T4240] usb 7-1: Manufacturer: syz [ 263.326361][ T4240] usb 7-1: SerialNumber: syz [ 263.419600][ T4240] usb 7-1: config 0 descriptor?? [ 263.971733][ T2856] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 264.111190][ T4240] usb 7-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -71 [ 264.119258][ T4240] usb 7-1: Firmware version (0.0) predates our first public release. [ 264.189870][ T4240] usb 7-1: Please update to version 0.2 or newer [ 264.231359][ T4240] usb 7-1: atusb_probe: initialization failed, error = -71 [ 264.240619][ T4240] atusb: probe of 7-1:0.0 failed with error -71 [ 264.285807][ T4240] usb 7-1: USB disconnect, device number 4 [ 264.341265][ T2856] usb 4-1: config 0 has no interfaces? [ 264.377791][ T6378] loop5: detected capacity change from 0 to 8192 [ 264.619092][ T2856] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 264.640979][ T2856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.649028][ T2856] usb 4-1: Product: syz [ 264.700855][ T2856] usb 4-1: Manufacturer: syz [ 264.705503][ T2856] usb 4-1: SerialNumber: syz [ 265.584021][ T2856] usb 4-1: config 0 descriptor?? [ 265.974226][ T6364] udc-core: couldn't find an available UDC or it's busy [ 266.840921][ T6364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 266.868137][ T6395] loop6: detected capacity change from 0 to 1024 [ 266.896114][ T6397] netlink: 44 bytes leftover after parsing attributes in process `syz.2.470'. [ 267.363893][ T6405] netlink: 116 bytes leftover after parsing attributes in process `syz.2.471'. [ 267.395093][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.471'. [ 268.232199][ T4256] usb 4-1: USB disconnect, device number 13 [ 269.680892][ T4256] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 270.020893][ T4233] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 270.092012][ T4256] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.120990][ T4256] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.157811][ T4256] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 270.210847][ T4256] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.281596][ T4256] usb 7-1: config 0 descriptor?? [ 270.312847][ T6457] loop4: detected capacity change from 0 to 512 [ 270.478344][ T6457] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.481: inode #1: comm syz.4.481: iget: illegal inode # [ 270.569046][ T6457] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.481: error while reading EA inode 1 err=-117 [ 270.600690][ T6457] EXT4-fs (loop4): 1 orphan inode deleted [ 270.613248][ T6457] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 270.684856][ T4233] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 270.700981][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.719222][ T4233] usb 6-1: Product: syz [ 270.735819][ T4233] usb 6-1: Manufacturer: syz [ 270.740483][ T4233] usb 6-1: SerialNumber: syz [ 270.767936][ T4233] usb 6-1: config 0 descriptor?? [ 270.794186][ T4256] hid-steam 0003:28DE:1142.0002: unexpected long global item [ 270.811535][ T4256] hid-steam 0003:28DE:1142.0002: steam_probe:parse of hid interface failed [ 270.830644][ T4256] hid-steam: probe of 0003:28DE:1142.0002 failed with error -22 [ 271.049761][ T4408] usb 7-1: USB disconnect, device number 5 [ 271.192424][ T6471] process 'syz.4.481' launched './file0' with NULL argv: empty string added [ 272.118804][ T4233] usb 6-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -71 [ 272.141335][ T4233] usb 6-1: Firmware version (0.0) predates our first public release. [ 272.157170][ T4233] usb 6-1: Please update to version 0.2 or newer [ 272.181328][ T4233] usb 6-1: atusb_probe: initialization failed, error = -71 [ 272.199172][ T4233] atusb: probe of 6-1:0.0 failed with error -71 [ 272.208237][ T6477] loop4: detected capacity change from 0 to 1024 [ 272.241051][ T4233] usb 6-1: USB disconnect, device number 16 [ 275.038485][ T6526] loop2: detected capacity change from 0 to 512 [ 275.114605][ T6526] EXT4-fs (loop2): Ignoring removed nobh option [ 275.163469][ T6526] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 275.356527][ T6526] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.494: iget: bad i_size value: 38620345925642 [ 275.855537][ T6526] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.494: couldn't read orphan inode 15 (err -117) [ 276.255444][ T6526] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 276.894572][ T6552] loop2: detected capacity change from 0 to 128 [ 276.983902][ T6552] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.031121][ T6552] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.856422][ T6602] loop2: detected capacity change from 0 to 512 [ 279.907005][ T6602] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 279.974913][ T6602] EXT4-fs (loop2): group descriptors corrupted! [ 281.297747][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.509'. [ 281.366696][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.509'. [ 281.542755][ T26] audit: type=1326 audit(1753845278.958:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a843729a9 code=0x7ffc0000 [ 281.650962][ T26] audit: type=1326 audit(1753845278.978:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a843729a9 code=0x7ffc0000 [ 281.698380][ T26] audit: type=1326 audit(1753845278.978:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f3a843729a9 code=0x7ffc0000 [ 281.725054][ T4292] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 281.838233][ T26] audit: type=1326 audit(1753845278.978:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a843729a9 code=0x7ffc0000 [ 281.861419][ T26] audit: type=1326 audit(1753845278.978:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a843729a9 code=0x7ffc0000 [ 281.912877][ T6639] netlink: 116 bytes leftover after parsing attributes in process `syz.4.513'. [ 281.981220][ T4292] usb 3-1: Using ep0 maxpacket: 8 [ 282.141291][ T4292] usb 3-1: unable to get BOS descriptor or descriptor too short [ 282.230977][ T4292] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 282.249890][ T4292] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 282.262877][ T4292] usb 3-1: config 1 interface 0 has no altsetting 0 [ 282.421145][ T4292] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 282.434937][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.452844][ T4292] usb 3-1: Product: syz [ 282.463515][ T4292] usb 3-1: Manufacturer: syz [ 282.475680][ T4292] usb 3-1: SerialNumber: syz [ 282.515398][ T6620] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 282.791062][ T6653] netlink: 44 bytes leftover after parsing attributes in process `syz.4.514'. [ 282.874189][ T4292] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input11 [ 283.820902][ T3546] bcm5974 3-1:1.0: could not read from device [ 283.875848][ T4292] usb 3-1: USB disconnect, device number 15 [ 284.210102][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.517'. [ 285.156950][ T4874] udevd[4874]: Error opening device "/dev/input/event4": No such file or directory [ 285.231611][ T4874] udevd[4874]: Unable to EVIOCGABS device "/dev/input/event4" [ 285.251992][ T4874] udevd[4874]: Unable to EVIOCGABS device "/dev/input/event4" [ 285.259568][ T4874] udevd[4874]: Unable to EVIOCGABS device "/dev/input/event4" [ 285.276129][ T6698] loop5: detected capacity change from 0 to 128 [ 285.358207][ T4874] udevd[4874]: Unable to EVIOCGABS device "/dev/input/event4" [ 285.528157][ T6707] loop2: detected capacity change from 0 to 512 [ 285.540877][ T4874] udevd[4874]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 285.599737][ T3561] udevd[3561]: worker [4874] terminated by signal 6 (Aborted) [ 285.621002][ T3561] udevd[3561]: worker [4874] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input11/event4' [ 285.693850][ T6707] EXT4-fs (loop2): #blocks per group too big: 466944 [ 287.090970][ T4370] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.119143][ T6735] loop3: detected capacity change from 0 to 512 [ 287.227008][ T6735] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 287.236869][ T4370] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.258482][ T6735] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 287.287431][ T6735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 287.322377][ T6735] System zones: 1-12 [ 287.371383][ T6735] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.524: corrupted in-inode xattr [ 287.385630][ T6735] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.524: couldn't read orphan inode 15 (err -117) [ 287.398604][ T6735] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,noauto_da_alloc,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,nodiscard,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 287.435852][ T4370] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.598824][ T6749] netlink: 116 bytes leftover after parsing attributes in process `syz.6.525'. [ 287.629418][ T6735] overlayfs: upper fs needs to support d_type. [ 287.657865][ T4370] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.767626][ T4183] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 287.842908][ T4183] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 287.918040][ T4183] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 287.951443][ T4183] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 288.009857][ T4183] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 288.045482][ T4183] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 288.076316][ T4183] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 288.107554][ T4183] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 288.136866][ T4370] tipc: Left network mode [ 288.138661][ T4183] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 288.177318][ T4183] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 288.212299][ T6768] loop4: detected capacity change from 0 to 8192 [ 288.383415][ T6741] chnl_net:caif_netlink_parms(): no params data found [ 288.426578][ T6870] netlink: 28 bytes leftover after parsing attributes in process `syz.6.528'. [ 289.486630][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.521543][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.580637][ T6741] device bridge_slave_0 entered promiscuous mode [ 289.647398][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 289.824746][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.841337][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.870187][ T6741] device bridge_slave_1 entered promiscuous mode [ 290.059391][ T6741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.108596][ T4183] syz-executor (4183) used greatest stack depth: 20096 bytes left [ 290.153669][ T6741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.433005][ T6741] team0: Port device team_slave_0 added [ 290.538300][ T6741] team0: Port device team_slave_1 added [ 290.770707][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.904271][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.931984][ T7071] netlink: 116 bytes leftover after parsing attributes in process `syz.4.537'. [ 291.085257][ T6741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.204826][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.231179][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.259131][ T6741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.401543][ T4370] device hsr_slave_0 left promiscuous mode [ 291.432082][ T4370] device hsr_slave_1 left promiscuous mode [ 291.439911][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.449282][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.457652][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.465528][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.474472][ T4370] device bridge_slave_1 left promiscuous mode [ 291.481007][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.494373][ T4370] device bridge_slave_0 left promiscuous mode [ 291.500674][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.518086][ T4370] device veth1_macvtap left promiscuous mode [ 291.524712][ T4370] device veth0_macvtap left promiscuous mode [ 291.530928][ T4370] device veth1_vlan left promiscuous mode [ 291.536888][ T4370] device veth0_vlan left promiscuous mode [ 291.677704][ T7039] loop6: detected capacity change from 0 to 40427 [ 291.692017][ T1107] Bluetooth: hci1: command 0x041b tx timeout [ 291.726594][ T7039] ================================================================================ [ 291.751096][ T7039] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:904:5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 291.779052][ T7039] shift exponent 68 is too large for 32-bit type 'int' [ 291.839206][ T7039] CPU: 1 PID: 7039 Comm: syz.6.536 Not tainted 5.15.189-syzkaller #0 [ 291.847601][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.857702][ T7039] Call Trace: [ 291.861015][ T7039] [ 291.864304][ T7039] dump_stack_lvl+0x168/0x230 [ 291.869102][ T7039] ? show_regs_print_info+0x20/0x20 [ 291.874338][ T7039] ? load_image+0x3b0/0x3b0 [ 291.879646][ T7039] ? slab_free_freelist_hook+0xea/0x170 [ 291.885233][ T7039] ubsan_epilogue+0xa/0x30 [ 291.889765][ T7039] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 291.896300][ T7039] ? match_int+0x13c/0x190 [ 291.900758][ T7039] parse_options+0x4621/0x4630 [ 291.905625][ T7039] ? __kasan_kmalloc+0xb5/0xf0 [ 291.910503][ T7039] ? kstrdup+0x32/0x70 [ 291.914577][ T7039] ? f2fs_fill_super+0x201a/0x6f00 [ 291.919678][ T7039] ? vfs_get_tree+0x88/0x270 [ 291.924273][ T7039] ? default_options+0xb20/0xb20 [ 291.929202][ T7039] ? memcpy+0x3c/0x60 [ 291.933177][ T7039] f2fs_fill_super+0x204b/0x6f00 [ 291.938111][ T7039] ? vsnprintf+0x1905/0x1a00 [ 291.942720][ T7039] ? kill_f2fs_super+0x3a0/0x3a0 [ 291.947687][ T7039] ? set_blocksize+0x1f1/0x370 [ 291.952482][ T7039] ? sb_set_blocksize+0xa5/0xe0 [ 291.957358][ T7039] mount_bdev+0x287/0x3c0 [ 291.961724][ T7039] ? kill_f2fs_super+0x3a0/0x3a0 [ 291.966684][ T7039] legacy_get_tree+0xe6/0x180 [ 291.971410][ T7039] ? trace_raw_output_f2fs_fiemap+0x220/0x220 [ 291.977509][ T7039] vfs_get_tree+0x88/0x270 [ 291.982050][ T7039] do_new_mount+0x24a/0xa40 [ 291.986671][ T7039] __se_sys_mount+0x2d6/0x3c0 [ 291.991373][ T7039] ? __x64_sys_mount+0xc0/0xc0 [ 291.996181][ T7039] ? lockdep_hardirqs_on+0x94/0x140 [ 292.001519][ T7039] ? __x64_sys_mount+0x1c/0xc0 [ 292.006305][ T7039] do_syscall_64+0x4c/0xa0 [ 292.010741][ T7039] ? clear_bhb_loop+0x30/0x80 [ 292.015434][ T7039] ? clear_bhb_loop+0x30/0x80 [ 292.020117][ T7039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.026176][ T7039] RIP: 0033:0x7f4cbcdf114a [ 292.030584][ T7039] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.050190][ T7039] RSP: 002b:00007f4cbac56e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.058632][ T7039] RAX: ffffffffffffffda RBX: 00007f4cbac56ef0 RCX: 00007f4cbcdf114a [ 292.066723][ T7039] RDX: 0000200000000140 RSI: 00002000000001c0 RDI: 00007f4cbac56eb0 [ 292.074899][ T7039] RBP: 0000200000000140 R08: 00007f4cbac56ef0 R09: 0000000000000000 [ 292.082893][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 292.090998][ T7039] R13: 00007f4cbac56eb0 R14: 0000000000005505 R15: 0000200000000300 [ 292.099005][ T7039] [ 292.111886][ T7039] ================================================================================ [ 292.121525][ T7039] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 292.128739][ T7039] CPU: 1 PID: 7039 Comm: syz.6.536 Not tainted 5.15.189-syzkaller #0 [ 292.136915][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.146992][ T7039] Call Trace: [ 292.150288][ T7039] [ 292.153237][ T7039] dump_stack_lvl+0x168/0x230 [ 292.157943][ T7039] ? show_regs_print_info+0x20/0x20 [ 292.163166][ T7039] ? load_image+0x3b0/0x3b0 [ 292.167819][ T7039] panic+0x2c9/0x7f0 [ 292.172011][ T7039] ? bpf_jit_dump+0xd0/0xd0 [ 292.176560][ T7039] ? slab_free_freelist_hook+0xea/0x170 [ 292.182152][ T7039] check_panic_on_warn+0x80/0xa0 [ 292.187125][ T7039] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 292.193939][ T7039] ? match_int+0x13c/0x190 [ 292.198400][ T7039] parse_options+0x4621/0x4630 [ 292.203185][ T7039] ? __kasan_kmalloc+0xb5/0xf0 [ 292.207983][ T7039] ? kstrdup+0x32/0x70 [ 292.212085][ T7039] ? f2fs_fill_super+0x201a/0x6f00 [ 292.217196][ T7039] ? vfs_get_tree+0x88/0x270 [ 292.221793][ T7039] ? default_options+0xb20/0xb20 [ 292.226733][ T7039] ? memcpy+0x3c/0x60 [ 292.230888][ T7039] f2fs_fill_super+0x204b/0x6f00 [ 292.235989][ T7039] ? vsnprintf+0x1905/0x1a00 [ 292.240785][ T7039] ? kill_f2fs_super+0x3a0/0x3a0 [ 292.245931][ T7039] ? set_blocksize+0x1f1/0x370 [ 292.250736][ T7039] ? sb_set_blocksize+0xa5/0xe0 [ 292.255768][ T7039] mount_bdev+0x287/0x3c0 [ 292.260116][ T7039] ? kill_f2fs_super+0x3a0/0x3a0 [ 292.265084][ T7039] legacy_get_tree+0xe6/0x180 [ 292.269777][ T7039] ? trace_raw_output_f2fs_fiemap+0x220/0x220 [ 292.275860][ T7039] vfs_get_tree+0x88/0x270 [ 292.280268][ T7039] do_new_mount+0x24a/0xa40 [ 292.284783][ T7039] __se_sys_mount+0x2d6/0x3c0 [ 292.289573][ T7039] ? __x64_sys_mount+0xc0/0xc0 [ 292.294353][ T7039] ? lockdep_hardirqs_on+0x94/0x140 [ 292.299542][ T7039] ? __x64_sys_mount+0x1c/0xc0 [ 292.304300][ T7039] do_syscall_64+0x4c/0xa0 [ 292.308708][ T7039] ? clear_bhb_loop+0x30/0x80 [ 292.313371][ T7039] ? clear_bhb_loop+0x30/0x80 [ 292.318042][ T7039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.324009][ T7039] RIP: 0033:0x7f4cbcdf114a [ 292.328430][ T7039] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.348025][ T7039] RSP: 002b:00007f4cbac56e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.356450][ T7039] RAX: ffffffffffffffda RBX: 00007f4cbac56ef0 RCX: 00007f4cbcdf114a [ 292.364590][ T7039] RDX: 0000200000000140 RSI: 00002000000001c0 RDI: 00007f4cbac56eb0 [ 292.372562][ T7039] RBP: 0000200000000140 R08: 00007f4cbac56ef0 R09: 0000000000000000 [ 292.380538][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 292.388601][ T7039] R13: 00007f4cbac56eb0 R14: 0000000000005505 R15: 0000200000000300 [ 292.396586][ T7039] [ 292.399835][ T7039] Kernel Offset: disabled [ 292.404313][ T7039] Rebooting in 86400 seconds..