last executing test programs: 30m1.995994504s ago: executing program 32 (id=107): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) socket$nl_rdma(0x10, 0x3, 0x14) fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) io_setup(0xf4, &(0x7f0000000200)) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) close_range(r3, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57}) 28m55.696069214s ago: executing program 33 (id=266): lsm_get_self_attr(0x65, 0x0, 0xfffffffffffffffc, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40942, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xb, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYBLOB="b35a5199e7308bf13f6918425492fcfd2dc240514c1616e0024db6307879677ccf3f788c03da72581295e610509baf9c5989d93a28f844762ad87bafccd689e6d289c69cb9a2104dbeb1f112cc2de93e641703f7bb002d8cc0230457999f41862dcff6fe9cf6da86ae", @ANYRES32=r0, @ANYRES8=r1, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r6 = request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='(\xff\xff\xff\xff\x00\x00\x00\x00\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, r6) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r7 = syz_socket_connect_nvme_tcp() fsetxattr(r7, &(0x7f0000000040)=@known='user.incfs.metadata\x00', &(0x7f0000000100)='([\x00', 0x3, 0x0) syz_usb_connect(0x4, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003c5c77790178eb3075ba89b082d48879f0882050900bf0901020301090209000008024000"], 0x0) 27m4.300535978s ago: executing program 5 (id=518): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 27m0.4983891s ago: executing program 5 (id=528): syz_usb_connect(0x6, 0x7a, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r6, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 26m56.447978006s ago: executing program 5 (id=535): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 26m55.257774078s ago: executing program 5 (id=539): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x849}) pipe2$9p(&(0x7f0000000140), 0x4080) dup3(r1, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x20040080}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}}, 0x0) getpid() 26m54.081048488s ago: executing program 5 (id=540): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0xc415, 0x40, 0x1, 0xe3, 0x3, [0xb4c, 0x7, 0x795fd568, 0x12]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x9, 0x13, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2, 0x7f, 0x5b, 0xd4, 0x3}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @private0}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x13, 0x12, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x20000000}, @sadb_address={0x3, 0x7, 0x33, 0x80, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x98}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000007c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xcd\xbd\xb4\xb8G:Y\x05\f\x8f0k\xd0\x15\f\xa4\xe1Xb&\x95\xf1\xa6\xf9\xbef\xa8n\xceI\x04\x11\x19\xe2\xaa-yW\x8f3\xcaq\xdb\x9b\xff\\\x95\x9a\x94\xf2A(-\xd6\xa2\x0e\x7f\x8f\xf2#\x12\xc6\x1fL\xbd\x16p\bL(\xbc7xKIb)F\xa0J\xd6\xce\x05\xbe^\xd4>\xdb\x80G|\x00\x18Y\xc7\xf9\x81\xa5\xe7\x1f\xee\xc3\xfd\x88\x17\xcab\x1b\xc0O\x10\r\xa2\x06[\xbb\x02\xacW\xba\xed\x8e\xa6\xfa\x13\x8a\xf2\ad\xa7\xe1`m\xc4\xe1\xaa\x99\t\xb4\xf1OX\xf7\xc0\x9f\x7f\x9a\x15-M\xd5\x8e\x06z\xb5\x97\xa2xu!\x87\fXr&(\x9b\x17\t\x17\x94\'\xb3\xfe\x9b\xdf\x82\xbf2\r_x\x03\b\xc1\xd0~\f4\xae\xce@\xc1\xd2\xab(\x85\xdea\xf1cS\xc4\xe7\x986\xa6w\x1c\x92\xf4\x8c(\xb5\f\n#\x0fb\xa4t\xee3@\x81\xdf\x1d6z+|\xce \x81{\x15\"p#\xdb\xb7', 0x0, 0x0) request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000280)="a9d6a9", 0x3, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 26m52.635270709s ago: executing program 5 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x100, &(0x7f0000001340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x828101, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r2, 0x4b45, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4009}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x101, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") 26m36.795659115s ago: executing program 34 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x100, &(0x7f0000001340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x828101, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r2, 0x4b45, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4009}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x101, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$eJzs3b9PHFceAPA3Az6Dz/ZhnwufdNKtdJbudHdC4OoSLAVjbAw2ceTELtKsF1jbJAtrwRKlcEE6S6kipYhSWImUjspCSu38CWlSOrWlpEgTKZIVop2dxcywGzaEhdj6fIod5v2G78zbN8Xw4lTt7vxyYX65UFosVGdvL58tvFetrCyUQ7xPWvZ/aP/6pzPduE5+rc0v92zktHLtwqU3b54N4au5b55ubGxshLre0NLwlp9//OH+7NZjU5yrU2+3dWt75e0Qwqlt46rrCSH0hRCiEML5NG0sPfaHEI6leTfvf3irsEejefSkfK74bPrB+siZqbWH6+1/9yiETyt/+9+dhe/+2TPy7X/2qHsAAAAAAAAAAAAAAAAAAF5wE9ev3XhjaDg8jkLvWrT9fd2J9Nju/diNPfOP7v+yAAAAAAAAAAAAAAAAAAAA8Af1/P3/QnSyxfv/4+lxtE39jde6P0a6Z/L1a+MXh4bT/d+jbfn/T5O+P98TTrTY9z2///v5XP3W+79v72e3muNr9jsQongwcx7Hg4MhfJ5u/H46OhJXqsu1/96urizO7dkwXljZ+Dd2789EJ93Qv8P4x2O59ru///9ft11N9fNbe3eJvdSy8e9pW+6LD6KO7v8LuXr7EX92Lxv/3iStf2uB0cYEUI//R707x38813634n88hFCI6mMtZGaA+hqmnt5uvUJWNv6HkrTM1Jn+Idvd/z/l4n8x1/5Bzf+r+S8iWsrG/09JWl+mxOHkM4l/vPP9fynX/kHEvz7+Vd//HcnGvxHr0JspkvwlO53/J3Ltt43/4d837htxOs7jUeYKWIsa6e3+Xx1Z2fj3bct//vwXd7T+u5yrv1/Pf81+m89/zen/31Hj+Y/WsvHvb1uu0/t/Mlev2/P/aLL+Y7ey8T+SpGXXzgPJZ6fxn8q13634J08lfc34P59Pfj7cSP/M+q8j2fj/uZEYby2xmnwm679o5/X/lVz7B7H+q49/Ne5ury+LbPyPti1Xj//XHXz/X83V6378Qxiy1t+1bPyPtS2X3P99O8d/Olev2/H/VzcbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgBjKXHgRDFg5nzOB4cDOFCen46HIlmSnPFmUp19t3lEMbT9EI4Gd2pVGdKleL8YnWuXCxVKtXZEC6m+adCX7RcqdaKC6V7lzbb6o/ulktLtZlyqRZCmEjT/x6ONduama8tlO6FEC5v5v0lri7du1taLM7NL706NDQ0FCY3x3AiKr9fKy/WGr03ckOY2qw7EG0ZXJJ9ZXMsR6N3qitLi6VKkn51S51KdbZU2VJnOs37OJyIaksri7OlWrlYqd5p9neQRtPj+OT1t65fHd6WfytqHMf2d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EaPR175JITQ2ziLQwijzR+iVuUfPSmfKz6bfrA+cmZq7eH603blAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgF3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8eoCQRRGIDfTIokXY6Rakm6tBsCISmyQfAEegwPo0fxEt7BwsLWQgTZRV13YRutvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY71E1/n97j0jxtH+MWE5X6/P8t67zz+77D3eYkdv5+au+Tn+YrvKP+mhT5mO6284m0VEbi9aetPfpss9z71x9+9Y3X9P3JVIuIqKs89eUc1EMewsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgwA4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA////gRtE") 22m34.480034606s ago: executing program 7 (id=1420): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x9}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 22m34.295435515s ago: executing program 7 (id=1422): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02008000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x60) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev, 0x0, r1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r4}) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x31c, 0x18c, 0x203, 0x31c, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {0xc}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000000000000000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00"], 0x0) 22m31.722298325s ago: executing program 7 (id=1429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x0, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 22m27.960597186s ago: executing program 7 (id=1433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r0) r4 = fcntl$dupfd(r1, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22m27.380233508s ago: executing program 7 (id=1438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0xff, 0x59d6, &(0x7f0000007200)="$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") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4096}, 0x1008, 0x3, 0x5800) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) 22m25.379572639s ago: executing program 7 (id=1439): socket$packet(0x11, 0x2, 0x300) fanotify_mark(0xffffffffffffffff, 0x409, 0x40001012, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000080)={0x10000000, 0x0, 0x3}) 22m10.04444715s ago: executing program 35 (id=1439): socket$packet(0x11, 0x2, 0x300) fanotify_mark(0xffffffffffffffff, 0x409, 0x40001012, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000080)={0x10000000, 0x0, 0x3}) 15m10.9847505s ago: executing program 9 (id=2593): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, 0x0, 0x0, 0x10122, 0x0) 15m10.112448849s ago: executing program 9 (id=2597): io_submit(0x0, 0x0, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x14, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x18) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000016c0)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) open$dir(&(0x7f0000000240)='./file0\x00', 0x20a40, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, 0x0, &(0x7f00000001c0), 0x800) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newtaction={0x14, 0x13, 0x53b, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 15m8.247655478s ago: executing program 9 (id=2603): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000040)='./file0/file0/..\x00', 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x3, @loopback}, 0x10) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) pipe2$watch_queue(0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r6], 0x48) socket$igmp(0x2, 0x3, 0x2) sync() r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000540)=""/167, 0xa7}], 0x2}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) rt_sigsuspend(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}}, 0x0) 14m55.830270685s ago: executing program 9 (id=2630): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x1400000000000000) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="743100002c00010026bd7000fcdbdf250400000060311180593701c1a2fd461b2d510766527345ab2f7b266c8708575184bc18d50f3a909eb3b723a4eae5c220d0d3cdd9c657e2"], 0x3174}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0600120c"], 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 14m54.289170288s ago: executing program 9 (id=2631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0xff, 0x59d6, &(0x7f0000007200)="$eJzs3X+MHNWdIPBX3T2e8Yx/jA0sDoTxYPAuC5t4zC+RsNp493aTFbDIEass5pzAgMesE9tY/rGAYRezBzksICIRUUKSP0hEuCM4ERJcgoNC+HE2l5BYXHLoRNAldyR/5EQ4rAA+FOUyp5mu19Nd0zXV09PjH/D5yJ7qev36W69eva6u7+ue6QAAAMC7wv7btx269KS/+eG/jrx1y99+d9Otoa88Xt4TK/SnyxuOVAs5nLorS8aX2XHxJzd941eD1/zVDx7p/frb+9aduv5nf33cNU988qK993356TfnP/aHV4rixvF05sR68loSQs/3Dn7+0/ueP3GsLFkw9rO0K4RFyeKnFyWZEEO/CyGsS1eWZO589K1z1o8tb72zu6F8Yaae8f7uNnacxwbWzkPXnxV+/pdrbvvx0m99s2vPq7smqiQ9deMphAVX1T++K4QwN/0/Jo62OB7joF0dQuite9wFBe06rcX2r8hZPzldzkmXfQVx4v3LMuulTL3setSVWfYWbG+m8trRbr0i8zLr2ZPRTOW1M5YvSpffSZdnTjN+Od2HchJKSajUmr8xmRgjoe64JSEZP5Y9tfVS7diGdP8z60lmvZRZL3dl9mt8u+lAKydJY3mslymPp+NKWn5q/bm6ictyyt+TLnvSJ+rbcT1kb1T1TbpR269xsV0Hp2jL4VCqOwc1K68d+PRg9KVlfcniSY8ZbSLet2/NXcvLa5/Z35/TjuSRJI2ftBV/548WzfvEw7t3ZF/Xa/GvKqXxS23F/8XFB16/YvfXvpQb/54Yv9xW/LOf7H3t4mdvX5bbPwdj/1Taij/8ynN3Lz3+6j257b8/xu9pK/6qvQe65x968qnc9g/F/pnbVvyXL/zwLx968fFXc+OHGL+3rfhr9275TPfAoTNy4z8V+6evvfHzxp7zXxoY+PVgXvwXYvz5bcV/cNd9H3xg4Z0X5R7f1bF/+tuKf8npT9w279Djp+SdO5P7O/XKCfDudFx6jXVHut5unjlTdfnCFwcr1Wu+een/+Z3cUObic2w7CzoZHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABCCCec9V8+8r8+1v9aJV3vTm+8XKouY/mcEJK5IYRt24e3bt+w+drBT163Y+vm4Y2Dw9sHRzZv33rj4Ll/Nrh1ZMvG4RvH7h163znVxy0OSXWZnDJp292jo6Ol/sayuL1/c/qeny+/4H//JoShE346UMlt/4r7Nj1wfJOfGcmq0Q9t2nHpT8/7arpf/Wm7+pu0a3R0dDTktOv/XP77Bz538FdnhDD0R1O167mX/+L7DQ0aL5iIkyp1h2qDupPepu2otTptT+yvyvoNG0eGpu7fsceXc/bj39706u/W3/DZ31f7tyd3P1rs37mrRjeWvrDmkv/3hZurBUXtOlLHvai/417E9sX+60n7e0G6Xwty9quSs1+3//ipF7930u43d4WhyhtLJ2+7aL+60gHQlbynpe3GLfQmixrKe9L68YjHx63YvmnLim037nzfhk3D145cO7L5AyvPXXn+0Hnnn7difM9XdHj/4/b/uMX9PzzjaeE/7fpO/NnaeGps15xp98dYu4r7o75Fec+/3ss+fe8H7nv20mpB0TiPtWvnk3TZO3acV4a68Ta5r5rtV9HxCSEMNuuH19+8KJz43zfcVnQeqj8y9T8zklWjzy/77Vcv+MqSP68WHJbzfH2D2jzP11o90Z7x/upJj8foUdq/3aGc7ldf03atfP7Zrrv2/+afa+2bMyfcMLx9+9aV1Z/z0pbOS05u2q5sadyvpeM/yyHtllAbpk3G65iuUG1f9vwZq2d7tS+9ry9Z3HS/suJ9+9bctby89pn9eT2dPFLd4twwv7pM3ptTc2PmgeVag5tt/2h9/hWNj4GPfOWxjz327XMnjY+zqz+L9ivJ2a9vvfjgvV//7L//duf26yN/caD/t//jH5dXC47680q52pBaq9P2JPXnlbNDKHr+LQ3N9yP3+Vdqvj9Fz7/sdibqN483mFnvC+W2nq9nP9n72sXP3r4s9/l6cKrna/3O3tzwuHLB8/VoGT/Z51dSaWzH7D2/GgZKsmr0B3cct+vpW1afVC0oer2s1W42rs9pIf/I2a/vX/HSwHWD/+6/de688Y0/e/TKnw2v+pdqQfvHPbalM8e9J+3fnpz+rbU65p31/fv+a67buK5aXtTPR+76N10W5D/xVLLtxp2fGt64cWTrttb2q9XX07idbC+3+3oaz26LC/arNGm/Zu9GK/3V6vMttn9d2/3V+HzrC0lbrws7f7Ro3ice3r2jf9Kj0g1dVUrjl9qK/4uLD7x+xe6vfSk3/j0xfqWt+MOvPHf30uOv3pMb//4kjd/TVvxVew90zz/05FO58Ydi++e2Ff/lCz/8y4defPzV3Pghxu9rr//f2HP+SwMDv86N/0KSbmfsGimER986Z311PQld6fMttqOroV0hu55k1kuZ9XL9einOIqQbKCdJY3msl5afWteWZv4hpzxehfUsqS7fjushe2Pq8qNNqe7c36y86DoVAOCdLr7/H69B4/v/I+mFUv5MA0yYaR62JCduzMMm5nMa32NdksaPj4/zgAPvD0Njy1sHqxf6030fIT4fsvOccTtnnNYYo3Cec3R8+5PmOYvm35dl1mO7qvPllbo8NDU5r6mEFubfJ29n6vn3zO4Xv581eMekZg3WzVtlj19XOmPW7PMOmfZWxiLkjY/svFj8PMfAgrB6fHstjo/s52jicch+jiZu56TMibPdz9HkjY/+yf3Q0K44PmK9KcbHeJOL34+cfPzCFP07cfyaR8sev2kc756x+rP9/mwH5g2bntIO37zh7L4fZl4yJ376BDva5w1jedyPSovziR/LKe/UfGI8XcR2HZyiLYeD+UTgnSrm//E1Yiz/H7sA/7+ZekV5SvaqMcbL/ZxQuXl7ivKOyZ/T623rdXzt3i2f6R44dEbudc5TrX5Ob0vDWm/B536K+nF5Zr2wH3MmaIryvex2ivo9+7mMvjC/rX5/cNd9H3xg4Z0X5fb76uoLaXG/39uwNr+g34+BfKF5fPnCuyJfmO35syOWj6QffJqtfOTvc8qnm4/0TrpR269xR28+MvFC2pCPdB3edgEAx46Y/9feP0vz//8ZK6TXEUV565mZ9RgvN2/NuT7Jy1v/Ll3ekKnfl/5GxXSvmy85/Ynb5h16/JTcvOX+VvPQ/9iw1l+Yh84sb87NI1Z35vPiuXlELc+aWZ6Y2/5anjizPD3nbdq6PH1meXRu/9Ty6MZ5gHsPtBY/zgPkxq/NA3Qwz/3DRKXDl+cWzNdlNhZXW52vOyJ59ILG/ZyVPDr99dnZyqMvyymfbh7dN+lGbb/GHb15dGO5PBoAeKeK+X+8jIv5/7OZejN9nz03L+jQdXv274HU4r8wK3nlRPwOvf9bnPfNdt4623n9bM9LHOvv/872vFD/+B/wnK15siP2/vLRkhenG5UXAwBwNIv5/9x0PT//n1l+Mil/66peQk7kJ8defl5fT36eE/8dk58f6/Nfs/s5mXd9/h/X09VR+T8AAEehmP/HX3uMf//vP6fr2b9bfyzm6cH76PL0YyZP7/A8W4xf/zkA8wCH9/PxcyfqmwcAAOBI6BrPlCb/nv3H02X29+zzfi//ipz6raqkl8dXb986MnLlji3rhrePXLn5unUj2668fuuG7dtHNlfrzTRvzM1b0ryxK1TS/mheL5u3LUz/HsLCnL+HkK0fw548fmPy30PIbnZuwd8RmDh+rbU37/iVpqjfbHzkHe+8+P+QUz+qHf9r/vHsK9dvu3LD5g3bNwxv3LBzpLHeWNbaO43vzUzS/9P6vtTMj0lK0//+znh4ZtaO0qR2dKX9kff97EmmHYvSlizK+/6DnHb/8L9+7p9OH/39QyEMnVB+74z6L1k1+p8uH/m77ft/umWs/aUp21+rmbar6PtKs/Xj/lQ2Xrdt+1nrr9uxOfuNku2J8xml2voszWekT/9yi/MTa3PKp/v7++VJN45OLc9PAADQIL7/H69n4/uHn00voGJ563n6zN4/zs3Th1rL07PfS1aUp2frx/1tNU/vmWGent1+UZ7erH6zPD0v786L//c59aer9XHSxuc8Yvr58O4duePkqtbGSfb7DIrGSbb+dMdJMsNxkt1+0ThpVr/ZOMk77nnxP5pTP0/ReKjUxsPMPpeTOx7uaW08/GlmvWg8ZOtPdzyUZjgestsvGg/N6jcbD3nHNy/+pTn1W9U4PsYGxvi4GLny+uu2fqqu3mx//0WY/JGMVto3Z+Kxs/v9H+1qvX9n93NfM29/CKvGS/LaP7ufK5t5+4v6fxqfK1sQJn2uLLf9L8xsJqz19s/u97tk5FWf/PjDNV+bngmKPn9WNI+7Jqd8uvO4cybdODqZx4UjJ+b/8e2emP/fmS47/TbQsf89ab7HrGn8Dn2PWdF1zLvu9Tz7lrvXcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB3hO7KkvHl/tu3Hbr0pL/54b+OvHXL3353061/ctM3fjV4zV/94JHer7+9b92p63/218dd88QnL9p735effnP+Y394pTBw//jPypnpak8IyWtJCD3fO/j5T+97/sSxsiSEUE76d4WwKFn89KIkE2HodyGEdbV2Nt756FvnrB9b3npnd0P5wkyQ7H6FvnJsT307Q7ihcI84BvWk42znoevPCj//yzW3/Xjpt77ZtefVXRNVkp668RTCgqvqH98VQpib/h8TR9uS+OB0uTqE0Fv3uAsK2nVai+1fkbN+crqcky77CuLE+5dl1kuZetn1qCuz7C3Y3kzltaPdekXmZdazJ6OZymtnLF+ULr+TLs+cZvxy/J+EUhIqteZvTCbGSKg7bklIxo9lT229VDu2Id3/zHqSWS9l1stdmf0a32460MpJ0lge62XK4+m4kpafWn+ubuKynPL3pMue9In6dlwP2RtVfZNu1PZrXGzXwSnakvoPxVXaV6o7BzUrrx349GD0pWV9yeJJjxltIt63b81dy8trn9nfn9OO5JEkjZ+0FX/njxbN+8TDu3csyYt/VSmNX2or/i8uPvD6Fbu/9qXc+PfE+OW24p/9ZO9rFz97+7Lc/jkY+6fSVvzhV567e+nxV+/Jbf/9MX5PW/FX7T3QPf/Qk0/ltn8o9s/ctuK/fOGHf/nQi4+/mhs/xPi9bcVfu3fLZ7oHDp2RG/+p2D997Y2fN/ac/9LAwK8H8+K/EOPPbyv+g7vu++ADC++8KPf4ro79099W/EtOf+K2eYcePyXv3Jnc36lXToB3p+PSa6w70vV288yZqssXvjhYqV7zzUv/z+/khjLGtrNgFuMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDO9JObz/345R/66JpKEkKSU2e0iXhfec6qVYNtbHf4lefuXnr81Xvqy5a0EQcAAAAoFvPwUq2kJywJ1ydzw8lN68c5gpPjWtJYnp1DiHGycwTtxik1iVNqI065Q+2pdChOV4fizOlQnO4OxekpiNMTWoszd4o4lbER0GJ7eqdsT+tx+joUZ16H4szvUJwFHYqzsENx+qeM0/o4XNShOIs7FOe4DsU5vkNxTuhQnD/qUJwTOxQnO6c83XE4P615Ul6c8RvlwjiVpFy7o9l8+onpdk6Z4Xb6CrYzv+j1uMXtzG1xO6dlHlea5nZ6WtzOH89wO0mL2/nTGW6nVLCdOG5vyLYvbieutTj+b+xQnJ0dinNTh+Lc3KE4/9yhOP/SoTi3zDAOQKti/j+R7/WH7sqfh970jJOdBYj57tLxn5Nf7/JOSDHeezPlc4riZRP1TLyl021fdgIhE29ZpryrIV6llo9MEa+nPt7yzJ1T7e+Fq5q3rT7emZny7iniNewAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwGP7n53I9f/qGPrglJGPvX1GgT8b7ynFWrBtvY7r41dy0vr31mf31Zd6WNQAAAAEChmId31Up6QndlZehO5jTU60nnAXrS9XJ/dTmwIKweWyaDpfH13mTRlI+rpI9bsX3TlhXbbtz5vg2bhq8duXZk8wdWnrvy/KHzzj9vxfoNG0eGqj9D6C6IF0IYn37YduPOTw1v3DiydVu1MNv+JenjlqTrSfq4gfeHobHlrWn7FxdsrzRpe7N3o/joAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/2fX3kLkPMsHgL/fzOzMdNv8O396moZmM+RQolZN4lZSLd0PBAvNgSwFma2uJdgEi5smtEmJdWwDtjVBEVoCIZILI7HYWrzpwRaxBwKRGg24MUhbNBd6obRaSUsuJGVkd+ab08501qEkafz9Lr7D8z7v+3zvd7HwfDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1nRldLI8Nj4xHIUQ9cipdpGMpbNxXBqg7lde3P6D3MiZFa2xXGaAhQAAAIC+kj58qBHJh1wmHdLh2tm7JaFlIDT7fgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/PdGV0sjw2PnFpFELUI6faRTKWzsZxaYC6p959+rOvj4z8rTVWHGAdAAAAoL+kD081IvlQDEvDUHTtTOffiCbfBhZ2zK/lNSXrLJpnXue3g155S+eZd/088z7WJ29D/bwrAAAAwEdf0v9nGpFCyGUWzOmHk/6/X1+f5C3uyEvXz/P/rUB23pkAAADAB0v6/1wjUgy5TLHRr8+331/SkZfM7/d/+2T+8h7z+/0/f3397P/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDRMV0ZnSyPjU+koxCiHjnVLpKxdDaOSwPUXf3S8D/WHnlkSWsslxlgIQAAAKCvpA9vtt75kMsMh6Fw6WzfP3LrwWe/9OzzoyGEWpufzYZdm3bsuHd17ZjkrTp2ZOj7R9/+9py8VbXjedsgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwoZmujE6Wx8YnLolCiHrkVLtIxtLZOC4NUPfNz3/xL0+efOGt1lhxgHUAAACA/pI+vNn750MxZEM2XD1719rrz0h1zO/1zQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4eNz3zQe+sWlqavO9Ls7PRTUdwgXwGC5ctF+c779MAADAh21xiEL1v3TNxvP91AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIVgujI6WR4bn8hHIUQ9cqpdJGPpbByXBqgbv3g8t+DMS6+0xooDrAMAAAD0l/Thzd4/H4phKAyFq2bvun0TmO3/C+fwIQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIALynRldLI8Nj6xIAoh6pFT7SIZS2fjuDRA3Sd2H/jc4cu/d1trLJcZYCEAAACgr6QPzzYi+ZDLfDzkwnX1+6n2CVG6fu7+XaA5b3vbtOF5z6u0zUvPe96ejp1l6rupzcsn6xVq58a8UnNeqj6v1DKvGBrlS415sy9rX1u1BX2ec+6bBwAAgHMn6f9zjUgh5DK5lv7/p235BX0uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDDdGV0sjw2PhFFIUQ9cqpdJGPpbByXBqj7wG///7Kv/mzvztZYcYB1AAAAgP6SPrzZ++dDMSwK/xcWzfb9odCen+T9s3z28OP/+uuKEFZefWIk07nsj5KLX795y8udhxBS7dmpEC6v14t61PvN7x+/f1n17JMhrLwqfd2ceuGD67UvGVefK29ev+Poie19Xg4AAABcJJL+f6gRKYRc5p6e/X/Seffp/xtmG/DL79/9iyvrx3pH3jEjVajXS/Wo94VlT/95+Zq/vz3T/8+t98nG1acPbD18ZVvBWqRDFFfHtu7ccOLGQ6lk17X66Y76yXv58rfe+veWXY+drdXPh3w9vrDjUWrV5h47yoe4OpXaP7Hu/f2V9vqZHvt/5HevnPzVwr3vzdR/d/Fwo/71oVv92s4zPeuHS+Lq8O2P7rvpwJEN7fVDCKVu9d9577ZwzR/vfrhz/8MdC7e++dZj5wuIq8eWnD605mDx5vb6UUf95P3//OQT+37y2HefT+onvxVZsXS+9VMd9V/bc8XuVx/auLC9fqrH/l++4/WRbaXv/KFz/3e1rZrp+RRz9//UDc/c+cam+MHOIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvLdGV0sjw2PpGKQoh65FS7SMbS2TguDVD31Nrj79yx98c/bI0VB1gHAAAA6C/pw5u9fz4UQzZkw/Bs3/9cefP6HUdPbA+F2mhUP2emtt234xNbtu28567z9OQAAADAfJ1aG832/5lGpBBymWVhqN7/j23dueHEjYdSSf+fmjlHIYQtd09tXhkaea/tuWL3qw9tXNj4ThDC7M8C8jN5n2nm3XrL8cLpP319ede81c28Y0tOH1pzsHhzkhda81aFxveJp2545s43NsUPNp6vNe9TX9s2Vf88kaw7fPuj+246cGRDKvmOUT8P19dN8qZS+yfWvb+/kiqE3Mx4up6Xr+8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJhrujI6WR4bnwjpEKIeOdVW9UAyls7GcWmAuuuW/fLhy868sKg1lssMsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyHHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzXX4hUZR8H8OeZ2X13dmdXd/WFtqJ1taKwC6Ugom4qKkIjhK4MCUvzIgqCiMIuWkMjsaKbIOtGooJqC8EgN0m0WKN/0k0XFRRYF4FIC7WLdFExM88ZZ49zGp21oPp8YHj2ec453/M753nmzB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAfpa9ntN4e2fHQ3O0X3PzJE/fOPn7rew9su+yxN34Y33Tjx3sHXj05vXn5lq9vWrrpwH1rpna/dPiXoXd+O9Yx+NFGszJ1KyHEEzGEyvszzz85/el5tbEYQijH4YkQRuKSwyMxl7D61xDC5mad8zfum71qS63dtqtv3vjiXEj+ukK1nNXTMDy/Xv5dKmmdbZ175Irw7Q3rt3++7O23eiePT5zaJdb2Kaf1FMKija3H94YQ+tOnJltto9nBqV0XQhhoOe6aDnVdfIb1ryroX5ja/6W22iEn274i1y/l9sv3M725dqDD+RaqqI5u9+tkMNfPP4wWqlnnqvbjI6l9N7UrzzK/nH1iKMXQ0yz//nhqjYSWeYsh1uey0uyXmnMb0vXn+jHXL+X65d7cddXPmxZaOcb549l+ufHscdyTxpe3PqvbuKNg/PzUVtIX9WTWD/k/Gqqn/dG8rrqsrpk/qeXvUGp5BrUbb058moxqGqvGJacd83sb2bbp9U9fWt7wwZHhgjri3pjyY1f5Wz8bGbzrzZ0Pjxblbyyl/FJX+d+tPfrTnTtffrEw/7ksv9xV/pUHB06s/XDHisL7M5Pdn54zyo+pn227+9hHzyz7/z2T7ea6nr8ny690Vf/1U0f7huYOHiqsf3V2f/q7yv/mulu+f/3L/ccL80OWP9BV/oapB5/tG5u7vDD/UOOrUK2v0C7Wz8+TV381NvbjeFH+F9n9H2qTHzvmvzax+9pXFu9aU7g+12X3Zzjl959V/bddcmD74Nz+i4qenXHPufrlBPhvWpr+x3oq9Tu9Z+6bLbV9z1yolveFF8Z7Gr9Ag+kzdC5PlFM7z6K/MB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4gx04IAEAAAAQ9P91OwIFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnAgAA//83ayhl") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) 14m52.909640319s ago: executing program 9 (id=2636): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="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", 0xfc}, {&(0x7f00000000c0)="072752fd6477889873dbd509db654f4d90f0e22af95dd49b7fba5e75463491fadd95c168951861988219ad96779fe3f8e4000098b3bdaea5e5b7dfff2ab4bd391f6651bf062ce7f726f479b07e99baba231345bdff04cafb8d1419ceac45558f6d6f93c2a08a068c75302195d1c8b8b7d96ffa19", 0x74}], 0x2, 0x0, 0x0, 0x810}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10000) 14m37.330919358s ago: executing program 36 (id=2636): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="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", 0xfc}, {&(0x7f00000000c0)="072752fd6477889873dbd509db654f4d90f0e22af95dd49b7fba5e75463491fadd95c168951861988219ad96779fe3f8e4000098b3bdaea5e5b7dfff2ab4bd391f6651bf062ce7f726f479b07e99baba231345bdff04cafb8d1419ceac45558f6d6f93c2a08a068c75302195d1c8b8b7d96ffa19", 0x74}], 0x2, 0x0, 0x0, 0x810}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10000) 11m14.799591967s ago: executing program 2 (id=3115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x12) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000100)=[{r2, 0x9400}], 0x1, 0x0, 0x0, 0x0) read$dsp(r2, &(0x7f0000000300)=""/79, 0x17d) 11m13.103439762s ago: executing program 2 (id=3121): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x40000) 11m11.090296409s ago: executing program 2 (id=3125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, 'v\x00', "07f217bd74511f465bbbd5de01000000f91800", "0000f600", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x8000, 0x0, 0x0) close(r3) 11m8.169534164s ago: executing program 2 (id=3130): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x1, 0x3, 0x2ba) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, 0x0, 0x40020) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f0000000340)=@deltclass={0x7c, 0x29, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff3}, {0xc, 0xffec}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0xa}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}, @TCA_RATE={0x6, 0x5, {0xc3, 0x74}}, @TCA_RATE={0x6, 0x5, {0x0, 0xa}}]}, 0x7c}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x20, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ppoll(&(0x7f0000000000)=[{r6, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r2) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 11m6.028490015s ago: executing program 2 (id=3134): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 11m1.453144652s ago: executing program 2 (id=3144): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_uring_enter(0xffffffffffffffff, 0x55, 0x84a23, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000000)='./cgroup/../file0\x00') r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r4, 0xa11c}, 0x8) 10m45.88147166s ago: executing program 37 (id=3144): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_uring_enter(0xffffffffffffffff, 0x55, 0x84a23, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000000)='./cgroup/../file0\x00') r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r4, 0xa11c}, 0x8) 48.045965161s ago: executing program 3 (id=4380): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) fsopen(0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="d3c473"], 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x11, 0x2, {0x2, 0xc}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x101, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000f0904220991139686505010203010902ef0001000000000904fb0009ccc31200090502002000190481070dc79a3bdd0a090504100800050aeb09050703400005110109050900ff03f803ec0725018108040009050800500002000f09050200ff03040505072501820c01000725010623003009050210ff030210030905030810000dff02072501820301000725010001"], 0x0) bind$bt_hci(r3, 0x0, 0x0) write(r1, &(0x7f0000000000)="05000000010000", 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) syz_io_uring_setup(0x7f52, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x24}, 0x0, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='W%!\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) sendmsg$ETHTOOL_MSG_EEE_GET(r0, 0x0, 0x28000) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c9000201b14dd1d74570"], 0x22) socket$packet(0x11, 0x2, 0x300) 44.5361534s ago: executing program 3 (id=4393): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f00000001c0)='./control/file0\x00') 43.424734056s ago: executing program 3 (id=4397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000195c0)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 40.42231361s ago: executing program 3 (id=4401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000140), &(0x7f0000000680)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 38.438083111s ago: executing program 3 (id=4404): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0xfffffffffffffe93) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x5e1702, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x4f1a, 0x4) setsockopt$sock_int(r4, 0x1, 0x35, &(0x7f0000000240)=0x1101, 0x4) 36.242814344s ago: executing program 3 (id=4409): socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x874}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004cc0), 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 10.583637982s ago: executing program 8 (id=4473): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {0x0}], 0x7}}], 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000005c0)=0x3ff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000440) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) 10.172364792s ago: executing program 0 (id=4474): io_uring_setup(0x3936, 0x0) setpriority(0x2, 0x0, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @raw_data="1ddd3aaaabd5e93373caf551db7eec0638fe582d3ba29fc79580ecc908169cb103733d5796c6844405a8be9aff8f20303b641d9bca05e4b6ca870e9c2516635f5af466b5330d5838902378e288eeb6429f6dc3b6e15baa87776a663cebac4d3d1cb9029bb4820a81bf77ea4e812c69283682171f56b7a2f6453bdec6b70421688ad3e0d273ffa9f9fa0996d7eca73dc21f3b5c688f08b0eab844c8f4e52e6d14437f1d1897f63e4e7505cff630091526a64b8567bda1f3a353f3e84b429ce4764e3fca9482f7c7c2"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x44800) creat(0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x141341) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0xfc0f, 0x1, [{0x8, 0x1}]}) 10.096831326s ago: executing program 1 (id=4475): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000080)={0x2, 0x9, 0x8, 0x84880}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring={'key_or_keyring:', r4}) ioctl$TIOCCONS(r3, 0x541d) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) request_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f00000004c0)='#-\'*\x01\x00', r4) keyctl$reject(0x13, 0x0, 0x4, 0x8000000000000000, r4) socket(0x26, 0x2, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x0, 0x0) 9.679164472s ago: executing program 8 (id=4477): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x2, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.104748496s ago: executing program 0 (id=4481): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) fsopen(0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="d3c473"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x11, 0x2, {0x2, 0xc}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x101, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000f0904220991139686505010203010902ef0001000000000904fb0009ccc31200090502002000190481070dc79a3bdd0a090504100800050aeb09050703400005110109050900ff03f803ec0725018108040009050800500002000f09050200ff03040505072501820c01000725010623003009050210ff030210030905030810000dff02072501820301000725010001"], 0x0) bind$bt_hci(r1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="05000000010000", 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) syz_io_uring_setup(0x7f52, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x24}, 0x0, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='W%!\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) sendmsg$ETHTOOL_MSG_EEE_GET(r0, 0x0, 0x28000) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c9000201b14dd1d74570"], 0x22) socket$packet(0x11, 0x2, 0x300) 7.990263537s ago: executing program 6 (id=4483): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfc5e) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x29, 0x10003, 0x204000, 0x0, 0x4, 0x8000080, 0x1}}, 0x50) 7.650347075s ago: executing program 6 (id=4484): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H', @ANYRES16, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="030000069b04000006"], 0x48}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002cbd7000fbdbdf257a000000", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004c50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e0000000e000000011e00003001000081000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000030000000100"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0) renameat2(r5, &(0x7f00000004c0)='./bus\x00', r4, &(0x7f0000000500)='./file0\x00', 0x0) 6.447328038s ago: executing program 6 (id=4485): syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) syz_usb_connect(0x6, 0x24, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x110, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0x4, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x8, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x2c}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "02dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x8, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0) 6.058968008s ago: executing program 1 (id=4486): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8080) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4) 5.284463245s ago: executing program 8 (id=4487): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6b", 0x2a}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4edb673503cf002e28e331bc529b433cd74ab6c48a", 0xf5}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff7", 0xd8}, {&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acc2ef0a9b0f9964d5705db134bdd9f261b7349aeede1c42e31b1082eec37b959d16afb967f54c471f2c7922c3c069f6a67c6ffee04bb1106c7e99752f50c7efdfa8afc8bd11acfc7a82e59dc5ffc88775bf6c9794b3ca2f475d25203ec0e0dd996b25d908e16539ac6e6086da296964d83ba527dcb6e7de403ef2a089ba3a5e094333a951cb48b75ac346a4783121dbceeef0a14f71fce2f4eb8bb7e758a67b9f7bd6231f410120746c1450cfd1aa4ba36a3bf20ded587f261a4c980fcd1e966d88d1c82912a289858e876d45f85516db0e8aa12e436a4faf2ffccc7b12c716a3f0499246752636a5b5e3762fa5dff7e78942123a253565e3058926808ee581d47fdd34118121a5", 0x169}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b5d383823677f025217943343e363268a73daecfa0fdc5beb5a7ac332a11533627b41dbe33a6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a813bc3ebba62168141343c9938965233cdaef85778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e8ebc08f6e6dc652a12e000000000000000000dabfc714629971d55b52192c803e89147c9434e190ba2de9c450883623e826c07629f995ad852ebf1727f940374dd2245519c82a823f551fb0df615425f7e0d6ec20e4d85814cc430ee2fcc6145748301f", 0xed}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc5480", 0x31}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 5.072859135s ago: executing program 1 (id=4489): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x2d4, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa9d2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcf7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "fcbfd11c90327eaabd12842994e06e0b5de0b865f3"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff5d}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xcab, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xd1, @private1, 0x10}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeaf}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc46}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xadd}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe01}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x69, 0x3, "705b8cec1d418f7ae579b94f7395f356a8a12dabef387cbc40c0b8df3f0d2fc744d2a476794381ad20aee4e1eb611bc7ad408909cc2045680e08424244901e71b8fa7380b2c46c5eb1181a7a01658f5fa1234e215253250e21dadf0bb018c08f5c332b34f8"}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4010000}, 0x4055) sendmmsg$alg(r1, &(0x7f0000001a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}], 0x1, 0x4) 5.022637848s ago: executing program 4 (id=4490): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000130000000800", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 4.938009134s ago: executing program 8 (id=4491): socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002) write$qrtrtun(r0, &(0x7f0000000300)="0314473c", 0x4) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) poll(&(0x7f0000000300)=[{r2, 0x252}], 0x1, 0x3) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xd08b012a, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x0, 0x7}, 0xfe, 0x2, {0x0}, 0x20000}) syz_io_uring_setup(0x10f, 0x0, &(0x7f0000000240), &(0x7f00000001c0)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x60}, 0x1, 0x0, 0x0, 0x44010}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x800, 0x7e) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/246, 0xf6) 4.847723394s ago: executing program 4 (id=4492): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.682784765s ago: executing program 4 (id=4493): socket$inet6_dccp(0xa, 0x6, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_procfs$pagemap(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) madvise(&(0x7f00003fb000/0x13000)=nil, 0x13000, 0x66) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000cc0)={0x27, 0x0, 0x0, 0x7, 0x0, 0x0, "0f03c8c7e8da000000000004d6ffff9d2bc76054cdc077b300000000000040000000000000000083eb0000090000a06100", 0x1e}, 0x60) sendmsg$sock(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="8a5f", 0x2}], 0x1}, 0x4) 3.622462388s ago: executing program 1 (id=4494): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x80000000) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.55752272s ago: executing program 0 (id=4495): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfc5e) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x29, 0x10003, 0x204000, 0x0, 0x4, 0x8000080, 0x1}}, 0x50) 3.527653164s ago: executing program 8 (id=4496): r0 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x1, 0x2de}, &(0x7f0000000000), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) io_uring_enter(r0, 0x0, 0x0, 0x49, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r3 = syz_usb_connect$uac1(0x3, 0xb6, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x1, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x7}, [@extension_unit={0x9, 0x24, 0x8, 0x5, 0x0, 0x9, "3c97"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x205, 0x3, 0x2, 0x0, 0x4, 0x1}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x15, "11442b"}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x5, "f265678885"}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0xff, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x2, 0x9, 0x13, "2730d46599ae23"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x87, 0x8, 0xff, {0x7, 0x25, 0x1, 0x0, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xfc, 0x0, 0x14, {0x7, 0x25, 0x1, 0x80, 0x88, 0x2}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x60, 0x7, 0x1, 0x40, 0x20, 0x4}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "76d88052c37ff16ddbcc487831c058a3"}]}}) syz_usb_control_io(r3, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x0, 0x10, 0x7e, {0x7e, 0x7, "c961faf98538c0fb33b2302ddcb0820921b0a55313c7641a2cae08e25f691b642022972eef45ec5cc750b73c1033af27a231644d6700243d0cfec000be4a82fb05a8a3245e0de0c307dfb0052690f776d6894f22aeb2f702fcefdd9b1a8b2511d459f1093fa7f09408bb0c2a500f82db891ed035c04276a37070995b"}}, &(0x7f00000007c0)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "6c8fbc7a226c7bf31a15e814e2f2f42762c44bd67adff256f02c1ab650e2fd365df84675543dfdaaf275d0e76cf4ed088ba0ad49decadddbb3"}}, &(0x7f00000005c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4d, 0x10, 0x0, 0x52, "b53d1291", "1e11a115"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1, 0xf5, 0x1, 0x0, 0x7, 0x2}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x40, 0x5, 0xa5, "a1452a96be4f02274414da4dd2bccb21c45c8af33cbd902c324d6ca38859517d290f25e4053ff08b202134ddff1923d8d698d449520e5937720b28901aa2fa253d72f89be580015c45b15e4048c0b661ee27247eb1ec51e69c27eb16d76cf0ac4ea40ae15b45e04fd006911150f270c88495fa4fea84e50f572634ebe29b48ceae70e3241eb6f96af3963ad762e461032f0cc4073b3896f8ee71dc855a11c69aa8ad9eb0e2"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x40, 0x4}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x31}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "2cb2"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "ea3b"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x8}, 0x0}) chdir(&(0x7f0000000080)='./file1\x00') lseek(r2, 0x9, 0x0) 3.490872988s ago: executing program 6 (id=4497): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24000880}, 0x842) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) io_uring_setup(0x2862, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000280)={{0xffffffffffffffff, 0x3, 0x2, 0x1}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$proc_mixer(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xd3) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.286650092s ago: executing program 0 (id=4498): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x2, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.234760112s ago: executing program 4 (id=4499): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2.443746276s ago: executing program 4 (id=4500): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a801008100", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0xd0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x110, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2c}, 0xffffff00, 0xffffffff, 'dummy0\x00', 'sit0\x00', {0xff}, {0xff}, 0x2, 0x0, 0x4}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x3, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x11, ' k'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast1, 0xffffffff, 0xffffffff, 'ip6tnl0\x00', 'dvmrp1\x00', {}, {0xff}, 0x2f, 0x1, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "d5d0", 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0xf60, 0x214, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@fallback=r2, 0x3, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$bt_sco(0x9, 0x5, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f00004d7000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000601000/0x3000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 1.789422928s ago: executing program 1 (id=4501): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)}], 0x7}}], 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000005c0)=0x3ff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000440) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) 1.682906474s ago: executing program 6 (id=4502): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 1.506918608s ago: executing program 0 (id=4503): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6b", 0x2a}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4edb673503cf002e28e331bc529b433cd74ab6c48a", 0xf5}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff7", 0xd8}, {&(0x7f0000001000)="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", 0x169}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b5d383823677f025217943343e363268a73daecfa0fdc5beb5a7ac332a11533627b41dbe33a6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a813bc3ebba62168141343c9938965233cdaef85778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e8ebc08f6e6dc652a12e000000000000000000dabfc714629971d55b52192c803e89147c9434e190ba2de9c450883623e826c07629f995ad852ebf1727f940374dd2245519c82a823f551fb0df615425f7e0d6ec20e4d85814cc430ee2fcc6145748301f", 0xed}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc5480", 0x31}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.071137335s ago: executing program 1 (id=4504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x10) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r1, 0x711, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 461.703891ms ago: executing program 4 (id=4505): io_submit(0x0, 0x0, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x14, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x18) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000016c0)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) open$dir(&(0x7f0000000240)='./file0\x00', 0x20a40, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, 0x0, &(0x7f00000001c0), 0x800) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newtaction={0x14, 0x13, 0x53b, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 184.232138ms ago: executing program 6 (id=4506): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a801008100", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0xd0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x110, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2c}, 0xffffff00, 0xffffffff, 'dummy0\x00', 'sit0\x00', {0xff}, {0xff}, 0x2, 0x0, 0x4}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x3, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x11, ' k'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast1, 0xffffffff, 0xffffffff, 'ip6tnl0\x00', 'dvmrp1\x00', {}, {0xff}, 0x2f, 0x1, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "d5d0", 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0xf60, 0x214, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@fallback=r2, 0x3, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$bt_sco(0x9, 0x5, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f00004d7000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000601000/0x3000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, 0x0, 0x0, 0x4) socket(0x10, 0x803, 0x0) 82.790473ms ago: executing program 8 (id=4507): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) fsopen(0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="d3c473"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x11, 0x2, {0x2, 0xc}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x101, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000f0904220991139686505010203010902ef0001000000000904fb0009ccc31200090502002000190481070dc79a3bdd0a090504100800050aeb09050703400005110109050900ff03f803ec0725018108040009050800500002000f09050200ff03040505072501820c01000725010623003009050210ff030210030905030810000dff02072501820301000725010001"], 0x0) bind$bt_hci(r1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="05000000010000", 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) syz_io_uring_setup(0x7f52, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x24}, 0x0, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='W%!\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) sendmsg$ETHTOOL_MSG_EEE_GET(r0, 0x0, 0x28000) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c9000201b14dd1d74570"], 0x22) socket$packet(0x11, 0x2, 0x300) 0s ago: executing program 0 (id=4508): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x2, 0x3a) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) kernel console output (not intermixed with test programs): rocess `syz.0.3694'. [ 1554.068301][T20705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3694'. [ 1555.288330][T20398] veth0_vlan: entered promiscuous mode [ 1555.522939][T20398] veth1_vlan: entered promiscuous mode [ 1555.887791][T20732] sysfs: cannot create duplicate filename '/class/ieee80211/Y7F-QfRsE!{&lWQ:# W' [ 1555.899689][T20732] CPU: 0 UID: 0 PID: 20732 Comm: syz.1.3699 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 1555.899725][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1555.899741][T20732] Call Trace: [ 1555.899751][T20732] [ 1555.899762][T20732] dump_stack_lvl+0x241/0x360 [ 1555.899802][T20732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1555.899836][T20732] ? __pfx__printk+0x10/0x10 [ 1555.899866][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.899900][T20732] ? __kmalloc_cache_noprof+0x236/0x370 [ 1555.899934][T20732] ? sysfs_warn_dup+0x51/0xa0 [ 1555.899973][T20732] sysfs_warn_dup+0x8e/0xa0 [ 1555.900007][T20732] sysfs_do_create_link_sd+0xbe/0x110 [ 1555.900047][T20732] device_add_class_symlinks+0x1c5/0x250 [ 1555.900089][T20732] device_add+0x553/0xbf0 [ 1555.900130][T20732] wiphy_register+0x1939/0x2660 [ 1555.900165][T20732] ? __pfx_wiphy_register+0x10/0x10 [ 1555.900188][T20732] ? minstrel_ht_alloc+0x85a/0x950 [ 1555.900219][T20732] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 1555.900252][T20732] ieee80211_register_hw+0x35e9/0x42d0 [ 1555.900293][T20732] ? ieee80211_register_hw+0x16b1/0x42d0 [ 1555.900331][T20732] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1555.900367][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.900399][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.900428][T20732] ? __hrtimer_init+0x69/0x1a0 [ 1555.900469][T20732] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1555.900506][T20732] mac80211_hwsim_new_radio+0x2b68/0x4b40 [ 1555.900560][T20732] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1555.900593][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.900627][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.900655][T20732] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 1555.900696][T20732] ? kstrndup+0xbb/0x150 [ 1555.900733][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.900765][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.900798][T20732] hwsim_new_radio_nl+0xed0/0x2290 [ 1555.900840][T20732] ? __pfx___nla_validate_parse+0x10/0x10 [ 1555.900885][T20732] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1555.900939][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.900969][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.901005][T20732] genl_rcv_msg+0xb3a/0xf00 [ 1555.901051][T20732] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1555.901085][T20732] ? __dev_queue_xmit+0x1780/0x3f60 [ 1555.901113][T20732] ? kasan_save_track+0x3f/0x80 [ 1555.901138][T20732] ? __kasan_slab_alloc+0x66/0x80 [ 1555.901171][T20732] ? do_syscall_64+0xf3/0x230 [ 1555.901224][T20732] ? __lock_acquire+0xad5/0xd80 [ 1555.901262][T20732] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1555.901303][T20732] netlink_rcv_skb+0x20a/0x480 [ 1555.901332][T20732] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1555.901368][T20732] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1555.901411][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.901442][T20732] ? netlink_deliver_tap+0x2e/0x1b0 [ 1555.901477][T20732] genl_rcv+0x28/0x40 [ 1555.901511][T20732] netlink_unicast+0x7fa/0x9a0 [ 1555.901547][T20732] ? __pfx_netlink_unicast+0x10/0x10 [ 1555.901571][T20732] ? __virt_addr_valid+0x45f/0x530 [ 1555.901603][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.901646][T20732] ? __phys_addr_symbol+0x2f/0x70 [ 1555.901676][T20732] ? __check_object_size+0x478/0x720 [ 1555.901714][T20732] netlink_sendmsg+0x8e8/0xce0 [ 1555.901754][T20732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1555.901788][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.901817][T20732] ? aa_sock_msg_perm+0x91/0x160 [ 1555.901853][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.901886][T20732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1555.901915][T20732] __sock_sendmsg+0x223/0x270 [ 1555.901951][T20732] ____sys_sendmsg+0x53c/0x870 [ 1555.901983][T20732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1555.902008][T20732] ? __fget_files+0x2a/0x420 [ 1555.902048][T20732] ? __fget_files+0x2a/0x420 [ 1555.902092][T20732] __sys_sendmsg+0x271/0x360 [ 1555.902123][T20732] ? __pfx___sys_sendmsg+0x10/0x10 [ 1555.902193][T20732] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1555.902226][T20732] do_syscall_64+0xf3/0x230 [ 1555.902269][T20732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.902294][T20732] RIP: 0033:0x7f245e58d169 [ 1555.902315][T20732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1555.902337][T20732] RSP: 002b:00007f245f450038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1555.902366][T20732] RAX: ffffffffffffffda RBX: 00007f245e7a6160 RCX: 00007f245e58d169 [ 1555.902385][T20732] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1555.902402][T20732] RBP: 00007f245e60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.902419][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1555.902436][T20732] R13: 0000000000000000 R14: 00007f245e7a6160 R15: 00007ffc850283c8 [ 1555.902468][T20732] [ 1556.588469][T20398] veth0_macvtap: entered promiscuous mode [ 1556.598412][T20398] veth1_macvtap: entered promiscuous mode [ 1556.622793][T20398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.634402][T20398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.644350][T20398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.654873][T20398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.665120][T20398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.675591][T20398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.686680][T20398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1556.696598][T20398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.707465][T20398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.717384][T20398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.728322][T20398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.738230][T20398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.748724][T20398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.758906][T20398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.769426][T20398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.779304][T20398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.790046][T20398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.800836][T20398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1556.810285][T20398] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.819410][T20398] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.828138][T20398] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.837237][T20398] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.939488][T20739] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3700'. [ 1557.369458][T20739] bridge0: port 3(netdevsim2) entered disabled state [ 1557.376383][T20739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.384972][T20739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.396374][T20755] siw: device registration error -23 [ 1559.536451][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.581187][T20764] input: syz0 as /devices/virtual/input/input67 [ 1559.587788][T20764] input: failed to attach handler leds to device input67, error: -6 [ 1559.606262][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.182224][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.315444][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1564.997154][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.537996][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): left allmulticast mode [ 1565.560176][T20832] input: syz0 as /devices/virtual/input/input68 [ 1565.661097][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): left promiscuous mode [ 1565.686470][T20832] input: failed to attach handler leds to device input68, error: -6 [ 1565.744526][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1565.763365][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1565.772576][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1565.781474][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1565.796026][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1565.811003][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1565.861501][ T53] bridge0: port 3(netdevsim2) entered disabled state [ 1566.466893][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.556175][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.905578][T18812] Bluetooth: hci4: command tx timeout [ 1568.928845][T20862] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1568.939238][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.983299][T18812] Bluetooth: hci4: command tx timeout [ 1572.086163][T18812] Bluetooth: hci4: command tx timeout [ 1572.163606][T20889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1572.488466][T20888] input: syz0 as /devices/virtual/input/input69 [ 1572.494876][T20888] input: failed to attach handler leds to device input69, error: -6 [ 1572.754868][ T53] bridge_slave_1: left allmulticast mode [ 1572.783017][ T53] bridge_slave_1: left promiscuous mode [ 1572.818702][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.941989][ T53] bridge_slave_0: left allmulticast mode [ 1573.134543][ T53] bridge_slave_0: left promiscuous mode [ 1573.848306][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.143538][T18812] Bluetooth: hci4: command tx timeout [ 1578.162330][T20929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3744'. [ 1578.172070][T20929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3744'. [ 1580.288325][ T53] bond0 (unregistering): left promiscuous mode [ 1580.302885][ T53] bond_slave_0: left promiscuous mode [ 1580.503234][T12728] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1580.592312][ T53] bond_slave_1: left promiscuous mode [ 1580.647150][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1580.680681][T12728] usb 9-1: config index 0 descriptor too short (expected 13860, got 36) [ 1580.690178][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1580.714362][T12728] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1580.733094][T12728] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1580.736339][ T53] bond0 (unregistering): Released all slaves [ 1580.765957][T12728] usb 9-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 1580.792858][T12728] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.803378][T12728] usb 9-1: Product: syz [ 1580.807657][T12728] usb 9-1: Manufacturer: syz [ 1580.812268][T12728] usb 9-1: SerialNumber: syz [ 1580.828247][T12728] usb 9-1: config 0 descriptor?? [ 1580.848322][T12728] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1580.863954][T12728] usb 9-1: Detected SIO [ 1580.868845][T12728] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 1580.885121][T12728] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1581.093687][ T53] bond1 (unregistering): Released all slaves [ 1581.115684][ T53] bond2 (unregistering): Released all slaves [ 1581.127783][ T53] bond3 (unregistering): Released all slaves [ 1581.144166][ T53] bond4 (unregistering): Released all slaves [ 1581.159548][ T53] bond5 (unregistering): Released all slaves [ 1581.178606][ T53] bond6 (unregistering): Released all slaves [ 1581.207928][T20834] chnl_net:caif_netlink_parms(): no params data found [ 1581.394073][T20941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1581.514093][ T53] tipc: Left network mode [ 1582.069071][T20834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.119234][T20834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.162161][T20834] bridge_slave_0: entered allmulticast mode [ 1582.218109][T20834] bridge_slave_0: entered promiscuous mode [ 1582.328519][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 1582.556212][T20957] input: syz0 as /devices/virtual/input/input70 [ 1582.976825][T20834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.989363][T20834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.004222][T20834] bridge_slave_1: entered allmulticast mode [ 1583.797397][T20834] bridge_slave_1: entered promiscuous mode [ 1583.864934][T11919] usb 9-1: USB disconnect, device number 89 [ 1583.899498][T11919] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1583.970513][T11919] ftdi_sio 9-1:0.0: device disconnected [ 1584.111322][T20834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1584.154115][T20965] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1584.345265][T20834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.683981][T20834] team0: Port device team_slave_0 added [ 1584.815272][T20973] random: crng reseeded on system resumption [ 1584.957520][T20834] team0: Port device team_slave_1 added [ 1587.903913][T20977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3757'. [ 1587.912951][T20977] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3757'. [ 1588.561229][ T53] hsr_slave_0: left promiscuous mode [ 1588.667908][ T53] hsr_slave_1: left promiscuous mode [ 1588.779608][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1589.775793][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1589.899637][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1590.010665][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1591.216712][ T53] veth1_macvtap: left promiscuous mode [ 1591.691766][ T53] veth0_macvtap: left promiscuous mode [ 1591.713684][ T53] veth1_vlan: left promiscuous mode [ 1591.768145][ T53] veth0_vlan: left promiscuous mode [ 1593.664487][T11919] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1593.990651][T11919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.277276][T11919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1594.286878][T11919] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1594.296097][T11919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.335468][T11919] usb 4-1: config 0 descriptor?? [ 1594.386233][T11919] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1594.395263][T11919] dvb-usb: bulk message failed: -22 (3/0) [ 1594.495585][T11919] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1594.563835][T11919] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1594.572517][T11919] usb 4-1: media controller created [ 1594.588870][T11919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1594.638393][T11919] dvb-usb: bulk message failed: -22 (6/0) [ 1594.661940][T11919] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1594.682961][T11919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input71 [ 1594.707577][T11919] dvb-usb: schedule remote query interval to 150 msecs. [ 1594.723620][T11919] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1594.742479][T11919] usb 4-1: USB disconnect, device number 82 [ 1594.797520][T11919] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1594.887939][T21021] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3767'. [ 1596.428245][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1596.592498][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1596.676479][T21029] i2c i2c-0: Invalid block write size 34 [ 1597.527505][T20834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.534976][T20834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1597.570313][T20834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.649351][T20834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.689360][T20834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1597.829874][T20834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.299530][T21042] random: crng reseeded on system resumption [ 1599.674160][ T5839] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1600.623855][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 1600.625676][T20834] hsr_slave_0: entered promiscuous mode [ 1600.703488][T20834] hsr_slave_1: entered promiscuous mode [ 1600.760412][T20834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1600.802836][T20834] Cannot create hsr debugfs directory [ 1601.906136][ T5839] usb 4-1: device descriptor read/all, error -71 [ 1602.423576][T11919] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1603.327413][T11919] usb 9-1: Using ep0 maxpacket: 8 [ 1603.621400][T11919] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1604.083351][T11919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.165087][T11919] usb 9-1: config 0 descriptor?? [ 1605.785483][T11919] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1605.880593][T11919] asix 9-1:0.0: probe with driver asix failed with error -71 [ 1605.979182][T11919] usb 9-1: USB disconnect, device number 90 [ 1607.204028][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.214750][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.522458][T21105] random: crng reseeded on system resumption [ 1608.744997][T21111] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3791'. [ 1610.696499][T21131] fuse: Bad value for 'group_id' [ 1610.701587][T21131] fuse: Bad value for 'group_id' [ 1612.264444][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3800'. [ 1612.778914][T21148] sctp: [Deprecated]: syz.4.3801 (pid 21148) Use of int in maxseg socket option. [ 1612.778914][T21148] Use struct sctp_assoc_value instead [ 1612.893011][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3801'. [ 1612.915769][T20834] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1612.977221][T20834] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1613.058417][T20834] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1613.087026][T20834] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1613.376284][T11450] usb 9-1: new full-speed USB device number 91 using dummy_hcd [ 1613.671042][T11450] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.799570][T11450] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1613.969989][T21171] input: syz0 as /devices/virtual/input/input72 [ 1614.014649][T11450] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1614.085810][T11450] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.262183][T11450] usb 9-1: config 0 descriptor?? [ 1614.324822][T11450] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1614.347544][T11450] dvb-usb: bulk message failed: -22 (3/0) [ 1614.594843][T20834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.379571][T11450] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1615.526923][T11450] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1615.542685][T20834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1615.593003][T16271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.594810][T21186] fuse: Bad value for 'group_id' [ 1615.600191][T16271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1615.605995][T21186] fuse: Bad value for 'group_id' [ 1615.617510][T11450] usb 9-1: media controller created [ 1615.661944][T11450] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1615.748418][T11450] dvb-usb: bulk message failed: -22 (6/0) [ 1615.756055][T16271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.763283][T16271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1615.770953][T11450] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1615.780062][T11450] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input73 [ 1615.798223][T11450] dvb-usb: schedule remote query interval to 150 msecs. [ 1615.831278][T11450] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1615.841017][T11450] usb 9-1: USB disconnect, device number 91 [ 1616.569603][T11450] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1616.585873][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1617.228077][T20834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1617.277074][T21200] ALSA: mixer_oss: invalid OSS volume '3CI(kQxmWxw4`' [ 1617.973277][T11450] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1618.173476][T11450] usb 9-1: Using ep0 maxpacket: 32 [ 1618.550196][T11450] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.769034][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3816'. [ 1619.553850][T11450] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1619.704101][T11450] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1619.731580][T11450] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.750938][T11450] usb 9-1: Product: ᐘ [ 1619.761922][T11450] usb 9-1: Manufacturer: ᡖ [ 1619.849478][T11450] usb 9-1: SerialNumber: 멦 [ 1620.616278][T11450] usb 9-1: can't set config #1, error -71 [ 1620.670320][T11450] usb 9-1: USB disconnect, device number 92 [ 1620.792115][T20834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1621.020358][T21238] xt_socket: unknown flags 0x58 [ 1622.041766][T21248] debugfs: Directory 'Y7F-QfRsE!{&lWQ:# W' with parent 'ieee80211' already present! [ 1622.289541][ T5843] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 1623.633724][T21258] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3825'. [ 1623.935821][T21264] fuse: Bad value for 'group_id' [ 1623.940883][T21264] fuse: Bad value for 'group_id' [ 1625.133583][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1625.133611][ T30] audit: type=1326 audit(1743085463.565:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1625.268839][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3828'. [ 1625.793705][ T30] audit: type=1326 audit(1743085463.565:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1625.867112][T21276] evm: overlay not supported [ 1626.306456][ T5843] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1626.315319][ T5843] Bluetooth: hci3: Injecting HCI hardware error event [ 1626.327903][T18812] Bluetooth: hci3: hardware error 0x00 [ 1626.913391][ T30] audit: type=1326 audit(1743085463.575:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1627.337158][ T30] audit: type=1326 audit(1743085463.575:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1627.487415][ T30] audit: type=1326 audit(1743085463.575:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1627.724820][ T30] audit: type=1326 audit(1743085463.575:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1628.271855][T15849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1628.297180][T15849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1628.350055][T15849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1628.406717][T15849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1628.457320][T15849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1628.546791][T15849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1628.610053][ T30] audit: type=1326 audit(1743085463.575:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1628.650254][ T30] audit: type=1326 audit(1743085463.575:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1628.683868][ T30] audit: type=1326 audit(1743085463.575:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1628.706837][ T30] audit: type=1326 audit(1743085463.585:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1629.233790][T21301] random: crng reseeded on system resumption [ 1629.743308][T18812] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1630.716789][T18812] Bluetooth: hci4: command tx timeout [ 1632.793660][T18812] Bluetooth: hci4: command tx timeout [ 1632.954511][T21326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3843'. [ 1634.382669][T21290] chnl_net:caif_netlink_parms(): no params data found [ 1634.504325][T21343] ALSA: mixer_oss: invalid OSS volume '3CI(kQxmWxw4`' [ 1634.901632][T18812] Bluetooth: hci4: command tx timeout [ 1635.468526][ T7897] bridge_slave_1: left allmulticast mode [ 1635.489391][ T7897] bridge_slave_1: left promiscuous mode [ 1635.524310][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.794184][ T7897] bridge_slave_0: left allmulticast mode [ 1635.799897][ T7897] bridge_slave_0: left promiscuous mode [ 1635.844912][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.963737][T18812] Bluetooth: hci4: command tx timeout [ 1639.097111][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1639.097132][ T30] audit: type=1800 audit(1743085478.345:257): pid=21369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.3855" name="/newroot/71/memory.stat" dev="tmpfs" ino=415 res=0 errno=0 [ 1640.305646][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3858'. [ 1641.468308][T21390] i2c i2c-0: Invalid block write size 34 [ 1642.324019][T21398] overlayfs: overlapping lowerdir path [ 1642.894721][ T7897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1643.096499][ T7897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1643.111745][ T7897] bond0 (unregistering): Released all slaves [ 1644.371274][ T7897] hsr_slave_0: left promiscuous mode [ 1644.848485][ T7897] hsr_slave_1: left promiscuous mode [ 1644.866958][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1644.930345][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.157637][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.260941][ C0] vkms_vblank_simulate: vblank timer overrun [ 1649.873646][ T7897] team0 (unregistering): Port device team_slave_1 removed [ 1649.976384][ T7897] team0 (unregistering): Port device team_slave_0 removed [ 1652.142566][T21290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.337391][T21290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.770730][T21290] bridge_slave_0: entered allmulticast mode [ 1652.804919][T21290] bridge_slave_0: entered promiscuous mode [ 1652.834473][T21290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.841641][T21290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.865771][T21290] bridge_slave_1: entered allmulticast mode [ 1652.882153][T21290] bridge_slave_1: entered promiscuous mode [ 1653.597724][T21479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1653.607413][T21479] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1654.128563][T21489] input: syz0 as /devices/virtual/input/input74 [ 1654.160142][T21290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.474463][T21290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1655.312308][T21290] team0: Port device team_slave_0 added [ 1655.808590][T21511] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1655.861774][T21290] team0: Port device team_slave_1 added [ 1656.197217][T21524] i2c i2c-0: Invalid block write size 34 [ 1656.680953][T21290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1656.709460][T21290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.701628][T21290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.715282][T21290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.722256][T21290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.750040][T21290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.972865][T21533] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3900'. [ 1658.981825][T21533] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3900'. [ 1659.375889][T21290] hsr_slave_0: entered promiscuous mode [ 1659.382395][T21290] hsr_slave_1: entered promiscuous mode [ 1659.417308][T21290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1659.917168][T21290] Cannot create hsr debugfs directory [ 1664.422984][ T1165] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1664.467160][T21585] i2c i2c-0: Invalid block write size 34 [ 1664.754470][ T1165] usb 9-1: Using ep0 maxpacket: 16 [ 1664.858054][ T1165] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1664.925025][ T1165] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1665.088877][T21591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1665.099268][T21591] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1665.138635][ T1165] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1665.215642][ T1165] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.486608][ T1165] usb 9-1: config 0 descriptor?? [ 1666.059694][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3916'. [ 1666.430364][ T1165] usbhid 9-1:0.0: can't add hid device: -71 [ 1666.437919][T21602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3917'. [ 1666.492404][ T1165] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1666.563230][ T1165] usb 9-1: USB disconnect, device number 93 [ 1667.372206][T21290] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1668.087606][T21290] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1668.550479][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.560099][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.600239][T21290] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1668.685947][T21290] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1669.087027][T21644] i2c i2c-0: Invalid block write size 34 [ 1670.582848][T21644] bridge0: port 3(netdevsim2) entered blocking state [ 1670.591313][T21644] bridge0: port 3(netdevsim2) entered disabled state [ 1670.598499][T21644] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1670.607298][T21644] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1670.615720][T21644] bridge0: port 3(netdevsim2) entered blocking state [ 1670.622520][T21644] bridge0: port 3(netdevsim2) entered forwarding state [ 1670.675921][T21651] sysfs: cannot create duplicate filename '/class/ieee80211/Y7F-QfRsE!{&lWQ:# W' [ 1670.687743][T21651] CPU: 1 UID: 0 PID: 21651 Comm: syz.3.3928 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 1670.687773][T21651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1670.687788][T21651] Call Trace: [ 1670.687796][T21651] [ 1670.687806][T21651] dump_stack_lvl+0x241/0x360 [ 1670.687844][T21651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1670.687874][T21651] ? __pfx__printk+0x10/0x10 [ 1670.687901][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.687931][T21651] ? __kmalloc_cache_noprof+0x236/0x370 [ 1670.687961][T21651] ? sysfs_warn_dup+0x51/0xa0 [ 1670.687996][T21651] sysfs_warn_dup+0x8e/0xa0 [ 1670.688027][T21651] sysfs_do_create_link_sd+0xbe/0x110 [ 1670.688062][T21651] device_add_class_symlinks+0x1c5/0x250 [ 1670.688098][T21651] device_add+0x553/0xbf0 [ 1670.688135][T21651] wiphy_register+0x1939/0x2660 [ 1670.688166][T21651] ? __pfx_wiphy_register+0x10/0x10 [ 1670.688186][T21651] ? minstrel_ht_alloc+0x85a/0x950 [ 1670.688214][T21651] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 1670.688243][T21651] ieee80211_register_hw+0x35e9/0x42d0 [ 1670.688280][T21651] ? ieee80211_register_hw+0x16b1/0x42d0 [ 1670.688313][T21651] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1670.688346][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.688374][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.688400][T21651] ? __hrtimer_init+0x69/0x1a0 [ 1670.688447][T21651] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1670.688480][T21651] mac80211_hwsim_new_radio+0x2b68/0x4b40 [ 1670.688526][T21651] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1670.688551][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.688576][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.688602][T21651] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 1670.688634][T21651] ? __pfx___schedule+0x10/0x10 [ 1670.688663][T21651] ? kstrndup+0xbb/0x150 [ 1670.688695][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.688723][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.688753][T21651] hwsim_new_radio_nl+0xed0/0x2290 [ 1670.688784][T21651] ? trace_irq_disable+0x3b/0x120 [ 1670.688812][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.688838][T21651] ? preempt_schedule_irq+0x145/0x1c0 [ 1670.688869][T21651] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1670.688904][T21651] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1670.688931][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.688957][T21651] ? lockdep_hardirqs_on+0x9d/0x150 [ 1670.688990][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.689022][T21651] ? __nla_validate_parse+0xd38/0x32e0 [ 1670.689056][T21651] ? __nla_validate_parse+0x28d9/0x32e0 [ 1670.689100][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.689125][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.689157][T21651] genl_rcv_msg+0xb3a/0xf00 [ 1670.689198][T21651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1670.689236][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.689262][T21651] ? lockdep_hardirqs_on+0x9d/0x150 [ 1670.689304][T21651] ? __lock_acquire+0xad5/0xd80 [ 1670.689338][T21651] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1670.689375][T21651] netlink_rcv_skb+0x20a/0x480 [ 1670.689400][T21651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1670.689440][T21651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1670.689481][T21651] ? netlink_deliver_tap+0x2e/0x1b0 [ 1670.689512][T21651] genl_rcv+0x28/0x40 [ 1670.689542][T21651] netlink_unicast+0x7fa/0x9a0 [ 1670.689571][T21651] ? __pfx_netlink_unicast+0x10/0x10 [ 1670.689591][T21651] ? __virt_addr_valid+0x45f/0x530 [ 1670.689619][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.689645][T21651] ? __phys_addr_symbol+0x2f/0x70 [ 1670.689672][T21651] ? __check_object_size+0x478/0x720 [ 1670.689706][T21651] netlink_sendmsg+0x8e8/0xce0 [ 1670.689741][T21651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.689771][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.689797][T21651] ? aa_sock_msg_perm+0x91/0x160 [ 1670.689829][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.689858][T21651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.689883][T21651] __sock_sendmsg+0x223/0x270 [ 1670.689915][T21651] ____sys_sendmsg+0x53c/0x870 [ 1670.689944][T21651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1670.689966][T21651] ? __fget_files+0x2a/0x420 [ 1670.690001][T21651] ? __fget_files+0x2a/0x420 [ 1670.690040][T21651] __sys_sendmsg+0x271/0x360 [ 1670.690067][T21651] ? __pfx___sys_sendmsg+0x10/0x10 [ 1670.690128][T21651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1670.690157][T21651] do_syscall_64+0xf3/0x230 [ 1670.690196][T21651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.690218][T21651] RIP: 0033:0x7f4b3e58d169 [ 1670.690237][T21651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1670.690256][T21651] RSP: 002b:00007f4b3c3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1670.690280][T21651] RAX: ffffffffffffffda RBX: 00007f4b3e7a6160 RCX: 00007f4b3e58d169 [ 1670.690298][T21651] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1670.690313][T21651] RBP: 00007f4b3e60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.690327][T21651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1670.690341][T21651] R13: 0000000000000000 R14: 00007f4b3e7a6160 R15: 00007ffd2ca745a8 [ 1670.690369][T21651] [ 1670.752258][T21290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1671.877434][T21662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1672.324410][T21640] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1672.337657][T21290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.347153][T21640] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1672.386402][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.393606][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.471235][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.478404][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.624004][T21665] siw: device registration error -23 [ 1675.027645][T21290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.064259][T21710] overlayfs: overlapping lowerdir path [ 1676.193603][T21713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3941'. [ 1676.233585][T21713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3941'. [ 1676.766506][T21727] random: crng reseeded on system resumption [ 1680.956224][T21290] veth0_vlan: entered promiscuous mode [ 1682.777258][T21290] veth1_vlan: entered promiscuous mode [ 1683.865228][T21741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3946'. [ 1683.954265][T21749] siw: device registration error -23 [ 1684.115622][T21752] input: syz0 as /devices/virtual/input/input76 [ 1685.221566][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3950'. [ 1685.231273][T21761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3950'. [ 1686.036453][T21773] i2c i2c-0: Invalid block write size 34 [ 1687.905601][T15849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1688.105479][T15849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1688.118639][T15849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1688.999170][T12728] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1689.243589][T15849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1689.258853][T15849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1689.314349][T15849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1689.494510][T12728] usb 5-1: Using ep0 maxpacket: 16 [ 1689.499922][T18812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1689.507969][T18812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1689.519551][T18812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1689.543439][T12728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.580606][T12728] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1689.604529][T18812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1689.622918][T18812] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1689.663595][T18812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1689.688665][T12728] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1689.699208][T12728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.714172][T12728] usb 5-1: config 0 descriptor?? [ 1690.739019][T12728] usbhid 5-1:0.0: can't add hid device: -71 [ 1690.764864][T21819] input: syz0 as /devices/virtual/input/input77 [ 1690.775815][T21819] input: failed to attach handler leds to device input77, error: -6 [ 1690.810309][T12728] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1690.865836][T12728] usb 5-1: USB disconnect, device number 88 [ 1691.805243][T18812] Bluetooth: hci4: command tx timeout [ 1693.552243][ T30] audit: type=1800 audit(1743085532.795:258): pid=21835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3966" name="file1" dev="overlay" ino=535 res=0 errno=0 [ 1693.837551][T18812] Bluetooth: hci4: command tx timeout [ 1694.412289][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3967'. [ 1694.540420][T21789] chnl_net:caif_netlink_parms(): no params data found [ 1694.605132][T19214] bridge_slave_1: left allmulticast mode [ 1694.643813][T19214] bridge_slave_1: left promiscuous mode [ 1694.649525][T19214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.901428][T21851] random: crng reseeded on system resumption [ 1695.075725][T19214] bridge_slave_0: left allmulticast mode [ 1695.081392][T19214] bridge_slave_0: left promiscuous mode [ 1695.996023][T19214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.039431][T18812] Bluetooth: hci4: command tx timeout [ 1696.453761][T21864] i2c i2c-0: Invalid block write size 34 [ 1697.213383][T21870] xt_socket: unknown flags 0x58 [ 1698.083256][T15849] Bluetooth: hci4: command tx timeout [ 1700.921873][ T1165] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1700.923677][T21895] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1701.094420][ T1165] usb 9-1: Using ep0 maxpacket: 32 [ 1701.135873][ T1165] usb 9-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 1701.186367][ T1165] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1701.186728][T19214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1701.233408][ T1165] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1701.293052][ T1165] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.307785][ T1165] usb 9-1: Product: ᐘ [ 1701.426045][ T1165] usb 9-1: Manufacturer: ᡖ [ 1701.431011][ T1165] usb 9-1: SerialNumber: 멦 [ 1701.613700][T19214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1701.943627][T19214] bond0 (unregistering): Released all slaves [ 1702.153983][ T1165] usb 9-1: 0:2 : does not exist [ 1702.202861][ T1165] usb 9-1: USB disconnect, device number 94 [ 1702.519155][ T30] audit: type=1800 audit(1743085541.775:259): pid=21911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3978" name="file1" dev="overlay" ino=555 res=0 errno=0 [ 1702.648190][T17683] udevd[17683]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1704.231368][T19214] hsr_slave_0: left promiscuous mode [ 1704.237934][T19214] hsr_slave_1: left promiscuous mode [ 1704.238538][T19214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1704.414464][T19214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1704.584647][T21935] random: crng reseeded on system resumption [ 1705.793355][T19214] veth1_vlan: left promiscuous mode [ 1705.793613][T19214] veth0_vlan: left promiscuous mode [ 1707.374975][ T30] audit: type=1326 audit(1743085546.605:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21942 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92b8d169 code=0x7ffc0000 [ 1707.375153][ T30] audit: type=1326 audit(1743085546.605:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21942 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92b8d169 code=0x7ffc0000 [ 1707.375297][ T30] audit: type=1326 audit(1743085546.605:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21942 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d92b8d169 code=0x7ffc0000 [ 1707.375445][ T30] audit: type=1326 audit(1743085546.615:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21942 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92b8d169 code=0x7ffc0000 [ 1707.375732][ T30] audit: type=1326 audit(1743085546.615:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21942 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92b8d169 code=0x7ffc0000 [ 1707.375870][ T30] audit: type=1326 audit(1743085546.615:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21942 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9d92b8d169 code=0x7ffc0000 [ 1707.376044][ T30] audit: type=1326 audit(1743085546.615:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21942 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92b8d169 code=0x7ffc0000 [ 1707.376178][ T30] audit: type=1326 audit(1743085546.615:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21942 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92b8d169 code=0x7ffc0000 [ 1707.376318][ T30] audit: type=1326 audit(1743085546.615:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21942 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d92b8d169 code=0x7ffc0000 [ 1709.011170][T21956] random: crng reseeded on system resumption [ 1710.947899][T21934] tty tty36: ldisc open failed (-12), clearing slot 35 [ 1711.015022][T21938] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1711.543407][T21965] overlayfs: missing 'lowerdir' [ 1712.966653][T19214] team0 (unregistering): Port device team_slave_1 removed [ 1713.088468][T19214] team0 (unregistering): Port device team_slave_0 removed [ 1714.025038][T21789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.044607][T21789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.092738][T21789] bridge_slave_0: entered allmulticast mode [ 1714.105177][T21789] bridge_slave_0: entered promiscuous mode [ 1714.151767][T21969] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1714.220675][T21789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.458387][T21789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.458638][T21789] bridge_slave_1: entered allmulticast mode [ 1714.459860][T21789] bridge_slave_1: entered promiscuous mode [ 1714.540029][T21992] random: crng reseeded on system resumption [ 1716.598086][T21789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1717.209400][T21789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1717.340428][T22019] random: crng reseeded on system resumption [ 1719.505129][T22031] overlayfs: failed to resolve './file0': -2 [ 1720.398060][T21789] team0: Port device team_slave_0 added [ 1720.419545][T21789] team0: Port device team_slave_1 added [ 1720.905567][T21789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.913316][T22046] ALSA: mixer_oss: invalid OSS volume '3CI(kQxmWxw4`' [ 1720.998837][T21789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1721.351393][T21789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1722.133606][T22052] i2c i2c-0: Invalid block write size 34 [ 1722.319459][T21789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1722.328660][T21789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.388267][T21789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1722.581460][T21789] hsr_slave_0: entered promiscuous mode [ 1722.615831][T21789] hsr_slave_1: entered promiscuous mode [ 1723.121221][T21789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1723.129036][T21789] Cannot create hsr debugfs directory [ 1728.723548][T20782] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1728.952822][T20782] usb 2-1: Using ep0 maxpacket: 32 [ 1729.525725][T20782] usb 2-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 1729.538344][T20782] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1729.550646][T20782] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1729.610169][T20782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.667874][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.678114][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.744793][T20782] usb 2-1: Product: ᐘ [ 1729.749034][T20782] usb 2-1: Manufacturer: ᡖ [ 1729.773603][T20782] usb 2-1: SerialNumber: 멦 [ 1730.560343][T20782] usb 2-1: 0:2 : does not exist [ 1730.653198][T20782] usb 2-1: USB disconnect, device number 11 [ 1730.948932][T22140] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1731.087826][T21789] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1731.379710][T17683] udevd[17683]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1731.500400][T21789] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1732.093420][ T5892] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1732.109814][T21789] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1732.170686][T21789] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1732.266082][ T5892] usb 4-1: config index 0 descriptor too short (expected 13860, got 36) [ 1732.285201][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.347125][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1732.389355][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1732.435057][ T5892] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 1732.463270][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.483579][ T5892] usb 4-1: Product: syz [ 1732.491672][ T5892] usb 4-1: Manufacturer: syz [ 1732.512491][ T5892] usb 4-1: SerialNumber: syz [ 1732.538115][ T5892] usb 4-1: config 0 descriptor?? [ 1732.560118][ T5892] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1732.579002][ T5892] usb 4-1: Detected SIO [ 1732.595481][ T5892] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1732.800367][T22151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4029'. [ 1732.848776][ T5892] usb 4-1: USB disconnect, device number 85 [ 1732.885988][ T5892] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1732.947828][ T5892] ftdi_sio 4-1:0.0: device disconnected [ 1732.971765][T21789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1733.087058][T21789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1733.255874][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.263066][ T7905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.423618][T22172] input: syz0 as /devices/virtual/input/input78 [ 1733.430493][T22172] input: failed to attach handler leds to device input78, error: -6 [ 1733.760908][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.768074][ T7905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.814081][T22173] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1734.083521][ T5837] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1734.297827][ T5837] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1734.397591][ T5837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1734.498267][ T5837] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1734.547557][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.648240][ T5837] usb 9-1: config 0 descriptor?? [ 1734.769788][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1734.769813][ T30] audit: type=1800 audit(1743085574.025:274): pid=22190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4038" name="file1" dev="overlay" ino=619 res=0 errno=0 [ 1735.093187][T22173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.186927][T22173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.823457][T15849] Bluetooth: hci0: command tx timeout [ 1736.368279][ T5837] ath6kl: Failed to submit usb control message: -110 [ 1736.375228][ T5837] ath6kl: unable to send the bmi data to the device: -110 [ 1736.382389][ T5837] ath6kl: Unable to send get target info: -110 [ 1736.391756][ T5837] ath6kl: Failed to init ath6kl core: -110 [ 1736.398340][ T5837] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1736.431761][T22173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.452061][T21789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1736.483746][T22173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.695089][ T5839] usb 9-1: USB disconnect, device number 95 [ 1742.526823][T21789] veth0_vlan: entered promiscuous mode [ 1743.431942][T21789] veth1_vlan: entered promiscuous mode [ 1743.689952][T21789] veth0_macvtap: entered promiscuous mode [ 1743.705858][T21789] veth1_macvtap: entered promiscuous mode [ 1743.748578][T21789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.263437][T21789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.290747][T21789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.413295][T21789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.489495][T21789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.585872][T21789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.640976][T21789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1745.063333][T21789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.116361][T21789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1748.157521][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4060'. [ 1749.690232][T18812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1749.701372][T18812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1749.714806][T18812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1749.725231][T18812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1749.734405][T18812] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1749.741676][T18812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1751.968720][T18812] Bluetooth: hci6: command tx timeout [ 1754.063801][T18812] Bluetooth: hci6: command tx timeout [ 1755.205310][T22353] overlayfs: missing 'lowerdir' [ 1756.257627][T18812] Bluetooth: hci6: command tx timeout [ 1757.374870][ T30] audit: type=1326 audit(1743085595.935:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.3.4081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1757.763218][ T30] audit: type=1326 audit(1743085595.935:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.3.4081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1757.927024][ T30] audit: type=1326 audit(1743085595.945:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.3.4081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1758.003912][ T30] audit: type=1326 audit(1743085595.945:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.3.4081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1758.026845][ T30] audit: type=1326 audit(1743085595.945:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.3.4081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1758.050429][ T30] audit: type=1326 audit(1743085595.945:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.3.4081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1758.077707][ T30] audit: type=1326 audit(1743085595.945:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.3.4081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1758.101343][ T30] audit: type=1326 audit(1743085595.945:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.3.4081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1758.346082][T18812] Bluetooth: hci6: command tx timeout [ 1759.118878][ T30] audit: type=1326 audit(1743085595.945:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.3.4081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1759.148127][ T30] audit: type=1326 audit(1743085595.955:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.3.4081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3e58d169 code=0x7ffc0000 [ 1759.403655][T22380] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1759.736775][T22303] chnl_net:caif_netlink_parms(): no params data found [ 1759.863290][T22383] i2c i2c-0: Invalid block write size 34 [ 1760.307726][ T7887] bridge_slave_1: left allmulticast mode [ 1760.313499][ T7887] bridge_slave_1: left promiscuous mode [ 1760.319242][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.343278][ T5837] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1760.379889][ T7887] bridge_slave_0: left allmulticast mode [ 1760.388480][ T7887] bridge_slave_0: left promiscuous mode [ 1760.402199][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.524382][T22386] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1760.643212][ T5837] usb 9-1: Using ep0 maxpacket: 32 [ 1760.949992][ T5837] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1761.103274][ T5837] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1761.122235][ T5837] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1761.197695][ T5837] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1761.233279][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.315568][T22391] input: syz0 as /devices/virtual/input/input79 [ 1761.322604][T22391] input: failed to attach handler leds to device input79, error: -6 [ 1761.453009][ T5837] usb 9-1: Product: ᐘ [ 1761.460880][ T5837] usb 9-1: Manufacturer: ᡖ [ 1761.482068][ T5837] usb 9-1: SerialNumber: 멦 [ 1761.763892][ T5837] usb 9-1: 0:2 : does not exist [ 1761.825586][ T5837] usb 9-1: USB disconnect, device number 96 [ 1762.778470][T22398] overlayfs: missing 'lowerdir' [ 1762.970758][T17683] udevd[17683]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1763.911041][T22415] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1765.743573][ T7887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1765.915661][ T7887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1765.995242][ T7887] bond0 (unregistering): Released all slaves [ 1766.054018][T22431] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1767.048881][T22454] input: syz0 as /devices/virtual/input/input80 [ 1768.022167][ T7887] hsr_slave_0: left promiscuous mode [ 1768.039083][ T7887] hsr_slave_1: left promiscuous mode [ 1768.053739][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1768.069938][ T7887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1768.105896][ T7887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1768.362770][ T7887] veth1_macvtap: left promiscuous mode [ 1768.374796][ T7887] veth0_macvtap: left promiscuous mode [ 1768.400450][ T7887] veth1_vlan: left promiscuous mode [ 1768.461208][ T7887] veth0_vlan: left promiscuous mode [ 1770.354010][T22478] input: syz0 as /devices/virtual/input/input81 [ 1770.360805][T22478] input: failed to attach handler leds to device input81, error: -6 [ 1771.963584][T22486] i2c i2c-0: Invalid block write size 34 [ 1773.503233][ T7887] team0 (unregistering): Port device team_slave_1 removed [ 1773.723602][ T7887] team0 (unregistering): Port device team_slave_0 removed [ 1774.246658][T22506] ALSA: mixer_oss: invalid OSS volume '3CI(kQxmWxw4`' [ 1776.167836][T22303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.182415][T22303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.191307][T22303] bridge_slave_0: entered allmulticast mode [ 1776.206776][T22303] bridge_slave_0: entered promiscuous mode [ 1776.238091][T22303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.253243][T22303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.260667][T22303] bridge_slave_1: entered allmulticast mode [ 1776.274316][T22303] bridge_slave_1: entered promiscuous mode [ 1777.177429][T22494] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4116'. [ 1777.191759][T22516] ax25_connect(): syz.0.4121 uses autobind, please contact jreuter@yaina.de [ 1777.242081][T22516] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1777.309881][T22303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1777.873284][T22524] input: syz0 as /devices/virtual/input/input82 [ 1777.880243][T22524] input: failed to attach handler leds to device input82, error: -6 [ 1778.231224][T22303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.593618][T22303] team0: Port device team_slave_0 added [ 1781.341743][T22547] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4128'. [ 1781.359259][T22547] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4128'. [ 1781.417157][T22303] team0: Port device team_slave_1 added [ 1781.468320][T22563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4133'. [ 1781.585064][T22566] i2c i2c-0: Invalid block write size 34 [ 1782.094635][T22303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1782.113288][T22303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1782.708180][T22303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1782.786440][T22303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1782.808767][T22303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1782.993002][T22303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.276799][T22303] hsr_slave_0: entered promiscuous mode [ 1783.362219][T22303] hsr_slave_1: entered promiscuous mode [ 1783.398782][T22303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1783.911205][T22303] Cannot create hsr debugfs directory [ 1784.387006][T22598] input: syz0 as /devices/virtual/input/input83 [ 1784.393469][T22598] input: failed to attach handler leds to device input83, error: -6 [ 1784.855662][T22585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4139'. [ 1787.388440][T22620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4149'. [ 1787.603745][T22621] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1789.996807][T22642] ALSA: mixer_oss: invalid OSS volume '3CI(kQxmWxw4`' [ 1790.092946][T22650] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1790.634820][ T5837] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1790.836616][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1791.184111][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.193898][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.379576][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1791.420933][ T5837] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1791.470932][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.485242][ T5837] usb 4-1: config 0 descriptor?? [ 1791.929807][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1791.929851][ T30] audit: type=1326 audit(1743085631.155:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.0.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5df8d169 code=0x7ffc0000 [ 1792.672989][ T5837] ath6kl: Failed to submit usb control message: -110 [ 1792.684695][ T5837] ath6kl: unable to send the bmi data to the device: -110 [ 1792.691859][ T5837] ath6kl: Unable to send get target info: -110 [ 1792.698908][ T5837] ath6kl: Failed to init ath6kl core: -110 [ 1792.705497][ T5837] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1792.718743][ T30] audit: type=1326 audit(1743085631.165:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.0.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5df8d169 code=0x7ffc0000 [ 1792.724534][T18812] Bluetooth: hci0: command tx timeout [ 1792.829792][T22650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.893264][ T30] audit: type=1326 audit(1743085631.165:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.0.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5df8d169 code=0x7ffc0000 [ 1792.933772][T22650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.966996][ T30] audit: type=1326 audit(1743085631.165:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.0.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5df8d169 code=0x7ffc0000 [ 1793.003783][T22650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.204104][ T30] audit: type=1326 audit(1743085631.165:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.0.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5df8d169 code=0x7ffc0000 [ 1793.234393][ T30] audit: type=1326 audit(1743085631.165:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.0.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9f5df8d169 code=0x7ffc0000 [ 1793.243280][T22650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.541907][ T30] audit: type=1326 audit(1743085631.165:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.0.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5df8d169 code=0x7ffc0000 [ 1794.287937][ T30] audit: type=1326 audit(1743085631.165:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.0.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5df8d169 code=0x7ffc0000 [ 1794.311287][ T30] audit: type=1326 audit(1743085631.165:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.0.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f5df8d169 code=0x7ffc0000 [ 1794.336803][ T30] audit: type=1326 audit(1743085631.175:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.0.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5df8d169 code=0x7ffc0000 [ 1794.435658][T22686] siw: device registration error -23 [ 1794.465459][ T5891] usb 4-1: USB disconnect, device number 86 [ 1795.856084][T22303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1795.992025][T22303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1796.164739][T22695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4166'. [ 1796.433737][T22303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1796.579945][T22698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4167'. [ 1796.625040][T22303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1796.946418][T22716] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1797.731675][T22303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1797.818035][T22303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1797.847374][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.854504][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1797.923461][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.930602][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.694381][T22303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1798.781151][T22303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1800.713393][T22748] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1801.113438][ T5891] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1801.322647][T22758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4180'. [ 1801.760860][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1801.863230][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1801.903421][ T5891] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1801.912496][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.982703][ T5891] usb 2-1: config 0 descriptor?? [ 1802.009181][T22303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.523414][T22748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1802.783400][T18812] Bluetooth: hci0: command tx timeout [ 1802.985429][T22748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.035685][T22748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1803.073815][T22748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.563852][ T5891] ath6kl: Failed to submit usb control message: -110 [ 1803.661441][ T5891] ath6kl: unable to send the bmi data to the device: -110 [ 1803.721001][ T5891] ath6kl: Unable to send get target info: -110 [ 1803.729036][T22769] : renamed from vlan1 (while UP) [ 1803.760921][ T5891] ath6kl: Failed to init ath6kl core: -110 [ 1803.788335][ T5891] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1803.911161][T22785] ALSA: mixer_oss: invalid OSS volume '3CI(kQxmWxw4`' [ 1804.387688][T20782] usb 2-1: USB disconnect, device number 12 [ 1810.046000][T22848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4199'. [ 1810.130396][T22848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4199'. [ 1810.371494][T15849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1810.386912][T22855] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1810.395608][T15849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1810.407697][T15849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1810.417728][T15849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1810.426962][T15849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1810.437593][T15849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1810.470952][T18812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1810.489473][T18812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1810.500020][T18812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1810.510042][T18812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1810.519941][T18812] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1810.527372][T18812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1810.663452][ T5891] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1811.245334][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1811.678651][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1811.703296][ T5891] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1811.730148][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.799113][ T5891] usb 5-1: config 0 descriptor?? [ 1812.024585][T22855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.156070][T22855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.116017][T18812] Bluetooth: hci0: command tx timeout [ 1813.117850][ T5891] ath6kl: Failed to submit usb control message: -110 [ 1813.121506][T18812] Bluetooth: hci4: command tx timeout [ 1813.153259][ T5891] ath6kl: unable to send the bmi data to the device: -110 [ 1813.163916][ T5891] ath6kl: Unable to send get target info: -110 [ 1813.195493][ T5891] ath6kl: Failed to init ath6kl core: -110 [ 1813.251691][ T5891] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1813.580966][T22890] i2c i2c-0: Invalid block write size 34 [ 1813.617442][T22856] chnl_net:caif_netlink_parms(): no params data found [ 1813.639748][ T5891] usb 5-1: USB disconnect, device number 89 [ 1813.695899][ T7895] bridge_slave_1: left allmulticast mode [ 1813.714470][ T7895] bridge_slave_1: left promiscuous mode [ 1813.769067][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.816492][ T7895] bridge_slave_0: left allmulticast mode [ 1813.839799][ T7895] bridge_slave_0: left promiscuous mode [ 1813.864303][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.065416][T22903] random: crng reseeded on system resumption [ 1815.183271][T18812] Bluetooth: hci4: command tx timeout [ 1817.263339][T18812] Bluetooth: hci4: command tx timeout [ 1819.345353][T18812] Bluetooth: hci4: command tx timeout [ 1820.813722][ T7895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1820.832078][ T7895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1820.857711][ T7895] bond0 (unregistering): Released all slaves [ 1820.971002][T22962] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1821.248704][T11919] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1821.713276][T11919] usb 4-1: device descriptor read/64, error -71 [ 1821.741057][ T7895] hsr_slave_0: left promiscuous mode [ 1821.863553][T22970] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4219'. [ 1822.216149][ T7895] hsr_slave_1: left promiscuous mode [ 1822.221991][ T7895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1822.255937][ T7895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1822.283475][T11919] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1822.425313][T11919] usb 4-1: device descriptor read/64, error -71 [ 1822.553540][T11919] usb usb4-port1: attempt power cycle [ 1823.023906][T18812] Bluetooth: hci0: command tx timeout [ 1823.384858][T11919] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1823.414066][T11919] usb 4-1: device descriptor read/8, error -71 [ 1823.430989][ T7895] team0 (unregistering): Port device team_slave_1 removed [ 1823.903386][T11919] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1823.923794][T11919] usb 4-1: device descriptor read/8, error -71 [ 1824.061126][T11919] usb usb4-port1: unable to enumerate USB device [ 1824.141108][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4223'. [ 1824.217980][ T7895] team0 (unregistering): Port device team_slave_0 removed [ 1826.080090][T22999] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1827.524049][T22998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1828.150072][T23016] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1828.238917][T22856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.247953][T22856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.257127][T22856] bridge_slave_0: entered allmulticast mode [ 1828.270206][T22856] bridge_slave_0: entered promiscuous mode [ 1828.280028][T22856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.353271][T22856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.375318][T22856] bridge_slave_1: entered allmulticast mode [ 1828.414343][T22856] bridge_slave_1: entered promiscuous mode [ 1828.821280][ T5892] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1829.103865][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1829.103888][ T30] audit: type=1326 audit(1743085668.355:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245e58d169 code=0x7ffc0000 [ 1829.613307][ T5892] usb 1-1: device descriptor read/64, error -71 [ 1829.765487][ T30] audit: type=1326 audit(1743085668.355:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245e58d169 code=0x7ffc0000 [ 1829.890000][ T30] audit: type=1326 audit(1743085668.355:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f245e58d169 code=0x7ffc0000 [ 1830.103240][ T5892] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1830.225209][T18812] Bluetooth: hci0: command tx timeout [ 1830.265846][T22856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.874555][ T30] audit: type=1326 audit(1743085668.355:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245e58d169 code=0x7ffc0000 [ 1830.906635][T22856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1830.928702][ T30] audit: type=1326 audit(1743085668.355:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245e58d169 code=0x7ffc0000 [ 1830.978966][ T5892] usb 1-1: device descriptor read/64, error -71 [ 1831.194793][ T30] audit: type=1326 audit(1743085668.355:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f245e58d169 code=0x7ffc0000 [ 1831.197849][ T5892] usb usb1-port1: attempt power cycle [ 1831.273391][ T30] audit: type=1326 audit(1743085668.355:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245e58d169 code=0x7ffc0000 [ 1831.300219][ T30] audit: type=1326 audit(1743085668.355:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245e58d169 code=0x7ffc0000 [ 1831.573923][ T30] audit: type=1326 audit(1743085668.355:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f245e58d169 code=0x7ffc0000 [ 1832.110239][T22856] team0: Port device team_slave_0 added [ 1832.121576][ T30] audit: type=1326 audit(1743085668.355:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245e58d169 code=0x7ffc0000 [ 1832.802859][T22856] team0: Port device team_slave_1 added [ 1832.994747][T23053] input: syz0 as /devices/virtual/input/input84 [ 1833.219833][ T5892] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1833.290524][T23058] random: crng reseeded on system resumption [ 1833.559389][ T5892] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1835.532443][ T5892] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1835.573921][ T5892] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1835.582919][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1835.594098][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1837.134119][T22856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1837.161456][ T5892] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1837.170673][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1837.181386][T22856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.228432][ T5892] usb 1-1: Product: syz [ 1837.263598][ T5892] usb 1-1: can't set config #1, error -71 [ 1837.285463][ T5892] usb 1-1: USB disconnect, device number 13 [ 1837.532438][T22856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1838.267213][T22856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1838.329141][T22856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1838.355063][ C0] vkms_vblank_simulate: vblank timer overrun [ 1838.372102][T23088] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1838.643830][T14969] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1838.924223][T22856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1839.025846][T14969] usb 4-1: device descriptor read/64, error -71 [ 1839.052931][T23096] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1839.224541][T22856] hsr_slave_0: entered promiscuous mode [ 1839.230733][T22856] hsr_slave_1: entered promiscuous mode [ 1839.283828][T14969] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1839.647022][T22856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1839.806081][T22856] Cannot create hsr debugfs directory [ 1840.129427][T14969] usb 4-1: device descriptor read/64, error -71 [ 1840.393880][T18812] Bluetooth: hci0: command tx timeout [ 1840.616034][T14969] usb usb4-port1: attempt power cycle [ 1841.040200][T14969] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1841.134045][T14969] usb 4-1: device descriptor read/8, error -71 [ 1841.287456][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4259'. [ 1841.534197][T14969] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1841.603335][T14969] usb 4-1: device descriptor read/8, error -71 [ 1841.685650][T22856] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1841.765987][T22856] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1841.833500][T14969] usb usb4-port1: unable to enumerate USB device [ 1841.879895][T22856] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1842.705382][T22856] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1843.228077][T22856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1843.294793][T22856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1843.320290][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1843.327537][ T7905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1843.369596][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1843.376744][ T7905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1844.635116][T22856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1845.253196][T23160] overlayfs: failed to resolve './file1': -2 [ 1847.119015][T22856] veth0_vlan: entered promiscuous mode [ 1847.254803][T22856] veth1_vlan: entered promiscuous mode [ 1847.821767][T22856] veth0_macvtap: entered promiscuous mode [ 1847.900382][T22856] veth1_macvtap: entered promiscuous mode [ 1848.084110][ T5891] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1848.402447][T22856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1848.432636][T22856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1848.872041][ T5891] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1848.903595][T22856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1848.959354][ T5891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1848.986852][T22856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.034282][ T5891] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1849.051117][T22856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.131435][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.141400][T22856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.152589][T22856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.173956][T22856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.195604][ T5891] usb 9-1: config 0 descriptor?? [ 1849.227269][T22856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1849.288476][T22856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1849.376446][T22856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.633309][T23212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.697782][T22856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1850.723202][ T5891] ath6kl: Failed to submit usb control message: -110 [ 1850.729973][ T5891] ath6kl: unable to send the bmi data to the device: -110 [ 1850.746868][ T5891] ath6kl: Unable to send get target info: -110 [ 1850.764491][T23212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.775868][T22856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.020194][ T5891] ath6kl: Failed to init ath6kl core: -110 [ 1851.036437][ T5891] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1851.052557][T22856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1851.065780][T23213] ax25_connect(): syz.4.4278 uses autobind, please contact jreuter@yaina.de [ 1851.100271][T22856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.130932][T22856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1851.156984][T22856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.185905][T22856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1851.198140][ T5839] usb 9-1: USB disconnect, device number 97 [ 1851.205341][T23221] overlayfs: failed to resolve './file1': -2 [ 1851.211487][T22856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.264672][T22856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1851.305275][T23213] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1851.386104][T22856] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.409321][T23225] siw: device registration error -23 [ 1851.431835][T22856] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.463736][T22856] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.646800][T22856] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1852.557481][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.563927][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.784064][ T7905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1853.829257][ T7905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1854.268111][ T7905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1854.467866][ T7905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1854.594947][T23257] i2c i2c-0: Invalid block write size 34 [ 1855.713938][ T5839] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1856.946712][T23274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4293'. [ 1857.139952][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1857.268835][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1857.349236][ T5839] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1857.364072][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.399357][ T5839] usb 1-1: config 0 descriptor?? [ 1857.451370][T23278] input: syz0 as /devices/virtual/input/input85 [ 1857.818690][T23263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.839811][T23263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.916055][T23263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.946257][T23263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.981674][ T7905] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.050038][ T5839] ath6kl: Failed to submit usb control message: -71 [ 1858.061513][ T5839] ath6kl: unable to send the bmi data to the device: -71 [ 1858.088431][ T5839] ath6kl: Unable to send get target info: -71 [ 1858.144410][ T5839] ath6kl: Failed to init ath6kl core: -71 [ 1858.167009][ T5839] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1858.217099][ T5839] usb 1-1: USB disconnect, device number 14 [ 1858.227220][ T7905] netdevsim netdevsim8 netdevsim2 (unregistering): left allmulticast mode [ 1858.278391][T15849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1858.284025][ T7905] netdevsim netdevsim8 netdevsim2 (unregistering): left promiscuous mode [ 1858.295611][T15849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1858.307433][T15849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1858.315998][ T7905] bridge0: port 3(netdevsim2) entered disabled state [ 1858.328040][T15849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1858.336572][T15849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1858.546068][T15849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1858.555602][ T7905] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.071269][ T7905] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.130546][ T7905] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.834873][T15849] Bluetooth: hci2: command tx timeout [ 1862.290631][T23315] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1862.740354][ T7905] bridge_slave_1: left allmulticast mode [ 1863.185777][T15849] Bluetooth: hci2: command tx timeout [ 1863.297676][ T7905] bridge_slave_1: left promiscuous mode [ 1863.329133][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.511248][ T7905] bridge_slave_0: left allmulticast mode [ 1863.613690][ T7905] bridge_slave_0: left promiscuous mode [ 1863.624921][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.023321][T12728] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1864.145565][T23329] i2c i2c-0: Invalid block write size 34 [ 1864.190037][T12728] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1865.193946][T12728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1865.219846][T12728] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1865.263504][T15849] Bluetooth: hci2: command tx timeout [ 1865.265053][T12728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.302915][T12728] usb 4-1: config 0 descriptor?? [ 1865.421673][ T7905] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1865.436578][ T7905] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 6a:fb:e1:b4:68:cf - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1865.558125][T23325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.594997][ T5837] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1865.614341][T23325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.702018][T23325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.719003][T23325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.775473][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1865.794617][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1865.816740][ T5837] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1865.831474][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.911990][ T5837] usb 2-1: config 0 descriptor?? [ 1866.252014][T23337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.363946][T23337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.636653][T23337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.662291][T23337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.671946][T12728] ath6kl: Failed to submit usb control message: -110 [ 1866.705530][T12728] ath6kl: unable to send the bmi data to the device: -110 [ 1866.712785][T12728] ath6kl: Unable to send get target info: -110 [ 1866.732714][T12728] ath6kl: Failed to init ath6kl core: -110 [ 1866.739668][T12728] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1867.038471][ T7905] bond0 (unregistering): left promiscuous mode [ 1867.044802][ T7905] bond_slave_0: left promiscuous mode [ 1867.050326][ T7905] bond_slave_1: left promiscuous mode [ 1867.086580][ T7905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1867.102527][ T7905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1867.116233][ T7905] bond0 (unregistering): Released all slaves [ 1867.130007][ T7905] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1867.144372][ T7905] bond1 (unregistering): Released all slaves [ 1867.157310][ T7905] bond2 (unregistering): Released all slaves [ 1867.171250][ T7905] bond3 (unregistering): Released all slaves [ 1867.306957][T23287] chnl_net:caif_netlink_parms(): no params data found [ 1867.343862][T15849] Bluetooth: hci2: command tx timeout [ 1867.380137][ T5837] ath6kl: Failed to submit usb control message: -71 [ 1867.390756][ T5839] usb 4-1: USB disconnect, device number 95 [ 1867.662425][ T5837] ath6kl: unable to send the bmi data to the device: -71 [ 1867.700845][ T5837] ath6kl: Unable to send get target info: -71 [ 1867.785228][ T5837] ath6kl: Failed to init ath6kl core: -71 [ 1867.802680][ T5837] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1868.087505][ T7905] tipc: Left network mode [ 1868.103227][ T5837] usb 2-1: USB disconnect, device number 13 [ 1868.141032][T23348] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1868.151725][T23348] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1868.698059][T23365] i2c i2c-0: Invalid block write size 34 [ 1869.297845][T23365] bridge0: port 3(netdevsim2) entered blocking state [ 1869.333568][T23365] bridge0: port 3(netdevsim2) entered disabled state [ 1869.368621][T23365] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 1869.411862][T23365] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 1869.451410][T23365] bridge0: port 3(netdevsim2) entered blocking state [ 1869.458229][T23365] bridge0: port 3(netdevsim2) entered forwarding state [ 1869.576777][T12728] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1869.650564][T23375] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1869.988484][T23287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.017320][T23287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.050097][T23287] bridge_slave_0: entered allmulticast mode [ 1870.086782][T23287] bridge_slave_0: entered promiscuous mode [ 1870.114482][T12728] usb 2-1: Using ep0 maxpacket: 32 [ 1870.138486][T23287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.155109][T23287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.173321][T12728] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1870.182343][T12728] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 7 [ 1870.263816][T23287] bridge_slave_1: entered allmulticast mode [ 1870.271379][T23287] bridge_slave_1: entered promiscuous mode [ 1870.280833][T12728] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 1870.328544][T12728] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1870.381959][T12728] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1870.408872][T12728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.534651][T12728] usb 2-1: Product: ᐘ [ 1871.797496][T12728] usb 2-1: Manufacturer: ᡖ [ 1871.812419][T12728] usb 2-1: SerialNumber: 멦 [ 1871.928117][T23287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1872.000872][T23287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1872.240849][T12728] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1872.328058][T23400] snd_dummy snd_dummy.0: control 0:4:-1:syz0:1 is already present [ 1872.457882][T12728] usb 2-1: USB disconnect, device number 14 [ 1873.349812][T23395] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1873.373329][T23395] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1873.527051][T23410] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1873.644964][T17683] udevd[17683]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1873.778514][T23287] team0: Port device team_slave_0 added [ 1873.804726][ T5891] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1873.846982][T23287] team0: Port device team_slave_1 added [ 1874.384762][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1874.423573][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1874.463815][ T5891] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1874.509876][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.933379][ T7905] hsr_slave_0: left promiscuous mode [ 1874.935181][ T5891] usb 5-1: config 0 descriptor?? [ 1874.961931][ T7905] hsr_slave_1: left promiscuous mode [ 1875.017049][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1875.127256][T23431] i2c i2c-0: Invalid block write size 34 [ 1875.467999][T23410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.525340][T23410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.533978][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1875.563807][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1875.634421][T15849] Bluetooth: hci0: command tx timeout [ 1875.664341][T23410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.673238][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1875.726736][T23410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.802016][ T7905] veth1_macvtap: left promiscuous mode [ 1875.823825][ T7905] veth0_macvtap: left promiscuous mode [ 1875.856906][ T7905] veth1_vlan: left promiscuous mode [ 1875.868995][ T7905] veth0_vlan: left promiscuous mode [ 1876.063495][ T5891] ath6kl: Failed to submit usb control message: -110 [ 1876.072219][ T5891] ath6kl: unable to send the bmi data to the device: -110 [ 1876.079903][ T5891] ath6kl: Unable to send get target info: -110 [ 1876.103473][ T5891] ath6kl: Failed to init ath6kl core: -110 [ 1876.119633][ T5891] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1876.442646][T23447] i2c i2c-0: Invalid block write size 34 [ 1878.029187][ T7905] team0 (unregistering): Port device team_slave_1 removed [ 1878.066795][ T7905] team0 (unregistering): Port device team_slave_0 removed [ 1878.460634][T23287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.468368][T23287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1878.494306][ C1] vkms_vblank_simulate: vblank timer overrun [ 1878.503266][T23287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.532842][T23287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.539940][T23287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1878.586581][T23287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.771852][ T5935] usb 5-1: USB disconnect, device number 90 [ 1879.063983][ T5839] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1880.229556][T23287] hsr_slave_0: entered promiscuous mode [ 1880.259968][T23287] hsr_slave_1: entered promiscuous mode [ 1880.334026][T23287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1880.415627][T23287] Cannot create hsr debugfs directory [ 1880.433828][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 1880.463992][ T5839] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1880.539311][ T5839] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1880.664537][ T5839] usb 7-1: can't read configurations, error -71 [ 1881.939399][T23491] netlink: 'syz.0.4352': attribute type 17 has an invalid length. [ 1883.873213][T23508] i2c i2c-0: Invalid block write size 34 [ 1884.492715][T23510] random: crng reseeded on system resumption [ 1885.985526][T23521] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1887.323258][ T5837] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1887.560244][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1887.608615][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1887.650202][ T5837] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1887.682968][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.933970][ T5935] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1888.078737][T15849] Bluetooth: hci0: command tx timeout [ 1888.108253][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 1888.141568][ T5837] usb 2-1: config 0 descriptor?? [ 1888.308648][ T5935] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1888.680321][ T5935] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1888.844000][ T5935] usb 5-1: can't read configurations, error -71 [ 1888.927568][ T5837] ath6kl: Failed to submit usb control message: -71 [ 1888.963905][ T5837] ath6kl: unable to send the bmi data to the device: -71 [ 1888.998132][ T5837] ath6kl: Unable to send get target info: -71 [ 1889.042772][ T5837] ath6kl: Failed to init ath6kl core: -71 [ 1889.090996][ T5837] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1889.220043][ T5837] usb 2-1: USB disconnect, device number 15 [ 1890.683832][T23564] i2c i2c-0: Invalid block write size 34 [ 1891.127397][T23565] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1892.295679][T23287] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1892.350803][T23287] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1892.604856][T23287] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1892.804218][T23287] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1892.968218][T23587] ax25_connect(): syz.3.4374 uses autobind, please contact jreuter@yaina.de [ 1893.161184][T23587] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1893.367713][T23598] random: crng reseeded on system resumption [ 1894.131232][T23287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1894.318758][T23287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1894.456013][T23287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1894.623787][T23287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1895.937826][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1895.944988][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1896.145908][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.153030][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1896.253319][T23612] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1896.676800][ T5837] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1897.035175][T23628] i2c i2c-0: Invalid block write size 34 [ 1897.434089][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1897.481884][T23287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1897.489495][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1897.543942][ T5837] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1897.553021][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.910525][ T5837] usb 4-1: config 0 descriptor?? [ 1898.152706][T23612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.193909][T23612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.230944][T23612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.309528][T15849] Bluetooth: hci0: command tx timeout [ 1898.333511][T23612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.877757][ T5837] ath6kl: Failed to submit usb control message: -71 [ 1898.894124][ T5837] ath6kl: unable to send the bmi data to the device: -71 [ 1898.919335][ T5837] ath6kl: Unable to send get target info: -71 [ 1898.957471][ T5837] ath6kl: Failed to init ath6kl core: -71 [ 1898.999738][ T5837] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1899.041877][ T5837] usb 4-1: USB disconnect, device number 96 [ 1899.657334][T23672] i2c i2c-0: Invalid block write size 34 [ 1900.105797][T23287] veth0_vlan: entered promiscuous mode [ 1900.290483][T23287] veth1_vlan: entered promiscuous mode [ 1900.357918][T23674] ALSA: mixer_oss: invalid OSS volume '3CI(kQxmWxw4`' [ 1900.500387][T23287] veth0_macvtap: entered promiscuous mode [ 1900.610497][T23287] veth1_macvtap: entered promiscuous mode [ 1900.707973][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.758832][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.823876][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1902.083063][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.093483][T23697] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1903.317169][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1903.355575][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1903.365700][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1903.382027][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1903.394286][T23287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1903.527739][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1903.590998][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1903.642124][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.124031][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.160182][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.174143][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.193805][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.226281][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.245844][T23287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.267578][T23287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.328588][T23287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1904.617975][T23287] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.331118][T23287] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.340050][T23287] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.349538][T23287] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.648026][T23726] input: syz0 as /devices/virtual/input/input86 [ 1906.371287][T16285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1906.724838][T16285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1906.863336][ T5837] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1906.937681][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1906.991909][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1907.029124][ T5837] usb 5-1: Using ep0 maxpacket: 32 [ 1907.057982][ T5837] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1907.100465][ T5837] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1907.120700][ T5837] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 7 [ 1907.151848][T23743] input: syz0 as /devices/virtual/input/input87 [ 1907.161026][ T5837] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 1907.190647][ T5837] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1907.223444][ T5837] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1907.711814][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.738499][ T5837] usb 5-1: Product: ᐘ [ 1907.786543][ T5837] usb 5-1: Manufacturer: ᡖ [ 1907.796347][ T5837] usb 5-1: SerialNumber: 멦 [ 1908.471030][ T5837] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1908.951046][ T5837] usb 5-1: USB disconnect, device number 93 [ 1910.804253][T23765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4411'. [ 1910.937647][T23765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4411'. [ 1911.356598][T17683] udevd[17683]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1913.993006][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1913.999738][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.936933][T23806] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1915.460485][T18812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1915.477361][T18812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1915.567350][T18812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1915.630849][T18812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1915.655918][T18812] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1915.789226][T18812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1915.989335][ T2967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.548736][T23824] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4428'. [ 1918.294552][ T2967] netdevsim netdevsim3 netdevsim2 (unregistering): left allmulticast mode [ 1918.322614][ T2967] netdevsim netdevsim3 netdevsim2 (unregistering): left promiscuous mode [ 1918.325665][T23833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4434'. [ 1918.334310][ T2967] bridge0: port 3(netdevsim2) entered disabled state [ 1918.566392][ T2967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.625154][T15849] Bluetooth: hci5: command tx timeout [ 1919.573556][T23833] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 1919.613372][T23833] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 1919.620629][T23833] bridge0: port 3(netdevsim2) entered disabled state [ 1919.884023][T23833] bridge_slave_1: left allmulticast mode [ 1919.897052][T23833] bridge_slave_1: left promiscuous mode [ 1920.182225][T23833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.865857][T15849] Bluetooth: hci5: command tx timeout [ 1922.944013][T15849] Bluetooth: hci5: command tx timeout [ 1923.907410][T23833] bridge_slave_0: left allmulticast mode [ 1923.928221][T23833] bridge_slave_0: left promiscuous mode [ 1923.997698][T23833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.023319][T15849] Bluetooth: hci5: command tx timeout [ 1925.640274][ T2967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1927.970743][T23907] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1928.145089][ T2967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.035920][T23811] chnl_net:caif_netlink_parms(): no params data found [ 1930.167117][T23811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.210987][T23811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.219978][T23811] bridge_slave_0: entered allmulticast mode [ 1930.232553][T23811] bridge_slave_0: entered promiscuous mode [ 1930.927821][T23811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1930.949439][T23811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.956995][T23811] bridge_slave_1: entered allmulticast mode [ 1930.964187][T23811] bridge_slave_1: entered promiscuous mode [ 1931.302556][ T2967] bridge_slave_1: left allmulticast mode [ 1931.800709][ T2967] bridge_slave_1: left promiscuous mode [ 1931.813148][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.930930][T23952] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1932.483894][ T2967] bridge_slave_0: left allmulticast mode [ 1932.500186][ T2967] bridge_slave_0: left promiscuous mode [ 1932.513823][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.961416][ T2967] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1936.397528][T12728] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1936.548420][T23990] Bluetooth: hci4: command 0x0406 tx timeout [ 1936.688090][T12728] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1936.909810][T12728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1937.023428][T12728] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1937.049189][T12728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.355031][T12728] usb 1-1: config 0 descriptor?? [ 1937.675214][T24015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1937.684246][T24015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1937.704377][T24015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1937.724164][T24015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1937.870487][ T2967] bond0 (unregistering): left promiscuous mode [ 1937.876970][ T2967] bond_slave_0: left promiscuous mode [ 1937.882627][ T2967] bond_slave_1: left promiscuous mode [ 1937.919749][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1937.932135][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1937.947037][ T2967] bond0 (unregistering): Released all slaves [ 1937.967649][ T2967] bond1 (unregistering): Released all slaves [ 1937.988385][ T2967] bond2 (unregistering): Released all slaves [ 1938.016985][ T2967] bond3 (unregistering): Released all slaves [ 1938.052721][ T2967] bond4 (unregistering): Released all slaves [ 1938.166194][ T2967] bond5 (unregistering): Released all slaves [ 1938.547644][T12728] ath6kl: Failed to submit usb control message: -110 [ 1938.571028][T12728] ath6kl: unable to send the bmi data to the device: -110 [ 1938.599013][T12728] ath6kl: Unable to send get target info: -110 [ 1938.615365][T12728] ath6kl: Failed to init ath6kl core: -110 [ 1938.637234][T23811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1938.650040][T23811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1938.753304][T12728] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1938.777208][ T2967] IPVS: stopping master sync thread 15399 ... [ 1938.814051][T24028] netlink: 'syz.6.4485': attribute type 25 has an invalid length. [ 1938.841106][T24028] netlink: 'syz.6.4485': attribute type 8 has an invalid length. [ 1939.008211][T12728] usb 1-1: USB disconnect, device number 15 [ 1939.165436][T23811] team0: Port device team_slave_0 added [ 1939.202132][T23811] team0: Port device team_slave_1 added [ 1940.552079][T23811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1940.593219][T23811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1940.700705][T23811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1940.714136][T23811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1940.732347][T23811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1940.812577][T23811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1940.880407][T24063] ALSA: mixer_oss: invalid OSS volume '3CI(kQxmWxw4`' [ 1941.004459][ T5837] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1941.282527][ T5837] usb 9-1: Using ep0 maxpacket: 32 [ 1941.615936][ T5837] usb 9-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 1941.655526][ T5837] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1942.280140][ T5837] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1942.303292][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.335563][ T5837] usb 9-1: Product: syz [ 1942.369829][ T5837] usb 9-1: Manufacturer: syz [ 1942.646424][ T5837] usb 9-1: SerialNumber: syz [ 1942.887040][T23811] hsr_slave_0: entered promiscuous mode [ 1942.923486][T23811] hsr_slave_1: entered promiscuous mode [ 1942.973318][T23811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1942.980964][T23811] Cannot create hsr debugfs directory [ 1943.352920][ T5837] usb 9-1: 0:2 : does not exist [ 1943.380397][ T5837] usb 9-1: USB disconnect, device number 98 [ 1943.604147][T17683] udevd[17683]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1943.742116][ T2967] hsr_slave_0: left promiscuous mode [ 1943.757084][ T2967] hsr_slave_1: left promiscuous mode [ 1943.772322][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1943.800274][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1943.810864][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1943.829273][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1943.910347][ T2967] veth1_macvtap: left promiscuous mode [ 1943.937113][ T2967] veth0_macvtap: left promiscuous mode [ 1943.948802][ T2967] veth1_vlan: left promiscuous mode [ 1943.957390][ T2967] veth0_vlan: left promiscuous mode [ 1944.643198][ T5837] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1945.533625][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 1945.545738][ C0] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 1945.554151][ C0] CPU: 0 UID: 0 PID: 24088 Comm: syz.1.4504 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 1945.565871][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1945.575935][ C0] RIP: 0010:dst_dev_put+0x27/0x290 [ 1945.581045][ C0] Code: 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 40 b3 e5 f7 4d 89 ec 49 c1 ec 03 <43> 80 3c 3c 00 74 08 4c 89 ef e8 aa df 4d f8 4d 8b 75 00 49 8d 7d [ 1945.600644][ C0] RSP: 0018:ffffc90000007ad8 EFLAGS: 00010216 [ 1945.606708][ C0] RAX: ffffffff89ddc350 RBX: 0000000000000028 RCX: ffff888012a45a00 [ 1945.614683][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000028 [ 1945.622655][ C0] RBP: 1ffffffff1cab454 R08: ffffffff8a87cbf9 R09: 1ffff1100b1390c0 [ 1945.630622][ C0] R10: dffffc0000000000 R11: ffffed100b1390c1 R12: 0000000000000005 [ 1945.638585][ C0] R13: 0000000000000028 R14: 00000000fffffff8 R15: dffffc0000000000 [ 1945.646555][ C0] FS: 00007f245f4926c0(0000) GS:ffff888125224000(0000) knlGS:0000000000000000 [ 1945.655477][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1945.662069][ C0] CR2: 00007fdaa45d3d58 CR3: 0000000063de4000 CR4: 0000000000350ef0 [ 1945.670040][ C0] Call Trace: [ 1945.673325][ C0] [ 1945.676191][ C0] ? __die_body+0x5f/0xb0 [ 1945.680516][ C0] ? die_addr+0xab/0xd0 [ 1945.684671][ C0] ? exc_general_protection+0x3e6/0x5d0 [ 1945.690236][ C0] ? asm_exc_general_protection+0x26/0x30 [ 1945.695976][ C0] ? fib_nh_common_release+0x199/0x420 [ 1945.701436][ C0] ? dst_dev_put+0x20/0x290 [ 1945.705933][ C0] ? dst_dev_put+0x27/0x290 [ 1945.710426][ C0] ? dst_dev_put+0x20/0x290 [ 1945.714938][ C0] fib_nh_common_release+0x1fc/0x420 [ 1945.720247][ C0] free_fib_info_rcu+0xdc/0x4a0 [ 1945.725103][ C0] ? rcu_core+0xa39/0x17a0 [ 1945.729520][ C0] ? __pfx_free_fib_info_rcu+0x10/0x10 [ 1945.734989][ C0] rcu_core+0xaae/0x17a0 [ 1945.739261][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1945.743944][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1945.749572][ C0] ? sched_balance_domains+0x91a/0xa90 [ 1945.755060][ C0] ? sched_balance_domains+0x1b4/0xa90 [ 1945.760544][ C0] ? __pfx_sched_balance_domains+0x10/0x10 [ 1945.766360][ C0] ? seqcount_lockdep_reader_access+0x1c3/0x230 [ 1945.772619][ C0] handle_softirqs+0x2d8/0x9b0 [ 1945.777405][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1945.783044][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 1945.787818][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1945.793136][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1945.798777][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1945.804007][ C0] __irq_exit_rcu+0xfb/0x220 [ 1945.808615][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1945.813837][ C0] irq_exit_rcu+0x9/0x30 [ 1945.818083][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1945.823724][ C0] [ 1945.826647][ C0] [ 1945.829580][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1945.835557][ C0] RIP: 0010:check_preemption_disabled+0x3d/0x120 [ 1945.841892][ C0] Code: 93 65 49 8b 04 24 48 89 44 24 08 65 8b 1d 2f 72 24 07 65 8b 05 24 72 24 07 a9 ff ff ff 7f 74 24 65 49 8b 04 24 48 3b 44 24 08 <0f> 85 cc 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f e9 [ 1945.861507][ C0] RSP: 0018:ffffc900037cefd0 EFLAGS: 00000246 [ 1945.867579][ C0] RAX: 579e478aa219b100 RBX: 0000000000000000 RCX: ffff888012a45a00 [ 1945.875550][ C0] RDX: ffff888012a45a00 RSI: ffffffff8c80efc0 RDI: ffffffff8c80ef80 [ 1945.883548][ C0] RBP: dffffc0000000000 R08: ffffffff8c18d95a R09: 0000000000000000 [ 1945.891527][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff933fc020 [ 1945.899493][ C0] R13: 000000000000002b R14: ffff8880127398c2 R15: ffff888059a40a48 [ 1945.907462][ C0] ? xas_load+0x1aa/0x5c0 [ 1945.911812][ C0] rcu_is_watching+0x15/0xb0 [ 1945.916400][ C0] rcu_read_lock_held+0x15/0x50 [ 1945.921255][ C0] xas_load+0x47e/0x5c0 [ 1945.925423][ C0] filemap_get_entry+0x1f2/0x3b0 [ 1945.930367][ C0] ? filemap_get_entry+0x125/0x3b0 [ 1945.935482][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 1945.940978][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1945.946610][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 1945.952510][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1945.958889][ C0] shmem_get_folio_gfp+0x288/0x1800 [ 1945.964086][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1945.969725][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1945.975353][ C0] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1945.982324][ C0] shmem_fault+0x223/0x5c0 [ 1945.986743][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 1945.991682][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1945.997354][ C0] __do_fault+0x137/0x390 [ 1946.001691][ C0] ? __handle_mm_fault+0x2fa3/0x6ef0 [ 1946.006983][ C0] __handle_mm_fault+0x40c8/0x6ef0 [ 1946.012109][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1946.017577][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1946.023208][ C0] ? __lock_acquire+0xad5/0xd80 [ 1946.028063][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1946.033703][ C0] ? do_raw_spin_lock+0x151/0x370 [ 1946.038745][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1946.044138][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1946.049779][ C0] ? rcu_read_unlock_special+0x49b/0x570 [ 1946.055430][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1946.061071][ C0] ? __pte_offset_map_lock+0x276/0x310 [ 1946.066551][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1946.072201][ C0] ? __pfx___might_resched+0x10/0x10 [ 1946.077501][ C0] handle_mm_fault+0x3e5/0x8d0 [ 1946.082276][ C0] __get_user_pages+0x1adf/0x4180 [ 1946.087326][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1946.092965][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 1946.098343][ C0] ? __pfx_mt_find+0x10/0x10 [ 1946.102945][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1946.108577][ C0] populate_vma_page_range+0x266/0x340 [ 1946.114062][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1946.120087][ C0] ? userfaultfd_unmap_complete+0x30e/0x360 [ 1946.126011][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1946.131651][ C0] ? vm_mmap_pgoff+0x340/0x530 [ 1946.136426][ C0] __mm_populate+0x27d/0x460 [ 1946.141025][ C0] ? __pfx___mm_populate+0x10/0x10 [ 1946.146147][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1946.151787][ C0] vm_mmap_pgoff+0x390/0x530 [ 1946.156384][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1946.161500][ C0] ? ksys_mmap_pgoff+0xdf/0x720 [ 1946.166351][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1946.171981][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 1946.176740][ C0] do_syscall_64+0xf3/0x230 [ 1946.181248][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1946.187133][ C0] RIP: 0033:0x7f245e58d169 [ 1946.191539][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1946.211140][ C0] RSP: 002b:00007f245f492038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1946.219548][ C0] RAX: ffffffffffffffda RBX: 00007f245e7a5fa0 RCX: 00007f245e58d169 [ 1946.227512][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1946.235474][ C0] RBP: 00007f245e60e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 1946.243528][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1946.251502][ C0] R13: 0000000000000000 R14: 00007f245e7a5fa0 R15: 00007ffc850283c8 [ 1946.259475][ C0] [ 1946.262484][ C0] Modules linked in: [ 1946.266495][ C0] ---[ end trace 0000000000000000 ]--- [ 1946.271983][ C0] RIP: 0010:dst_dev_put+0x27/0x290 [ 1946.277189][ C0] Code: 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 40 b3 e5 f7 4d 89 ec 49 c1 ec 03 <43> 80 3c 3c 00 74 08 4c 89 ef e8 aa df 4d f8 4d 8b 75 00 49 8d 7d [ 1946.296882][ C0] RSP: 0018:ffffc90000007ad8 EFLAGS: 00010216 [ 1946.303007][ C0] RAX: ffffffff89ddc350 RBX: 0000000000000028 RCX: ffff888012a45a00 [ 1946.311088][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000028 [ 1946.319173][ C0] RBP: 1ffffffff1cab454 R08: ffffffff8a87cbf9 R09: 1ffff1100b1390c0 [ 1946.327252][ C0] R10: dffffc0000000000 R11: ffffed100b1390c1 R12: 0000000000000005 [ 1946.335308][ C0] R13: 0000000000000028 R14: 00000000fffffff8 R15: dffffc0000000000 [ 1946.343396][ C0] FS: 00007f245f4926c0(0000) GS:ffff888125224000(0000) knlGS:0000000000000000 [ 1946.352366][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1946.359031][ C0] CR2: 00007fdaa45d3d58 CR3: 0000000063de4000 CR4: 0000000000350ef0 [ 1946.367105][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1946.374518][ C0] Kernel Offset: disabled [ 1946.378838][ C0] Rebooting in 86400 seconds..