last executing test programs: 13m38.866063385s ago: executing program 1 (id=208): r0 = userfaultfd(0x80801) close(0x3) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r2 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 13m38.66884493s ago: executing program 1 (id=210): socket$inet6(0xa, 0x3, 0x4) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x257, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x80000, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x0, 0x0, 0xab, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x490) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 13m35.914950838s ago: executing program 1 (id=219): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x11, 0x80a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x5, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 13m35.324639903s ago: executing program 1 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x408, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [], @ipv4=@dev, [], @ipv6=@mcast1, [], @ipv4=@local}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r1 = syz_open_pts(0xffffffffffffffff, 0x2000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) ioctl$TIOCSTI(r1, 0x5412, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 13m34.888805814s ago: executing program 1 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write(0x1, &(0x7f0000000a40)={0x476, 0x20000000, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x5, 0x0, 0x400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) 13m34.324966977s ago: executing program 1 (id=228): syz_clone(0x668c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r0, 0x400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) fcntl$setlease(r0, 0x400, 0x2) 13m33.957963146s ago: executing program 32 (id=228): syz_clone(0x668c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r0, 0x400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) fcntl$setlease(r0, 0x400, 0x2) 9m45.577048992s ago: executing program 0 (id=1006): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)={0x40, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0x15, 0x9, 0x0, 0x0, @binary="b4dc500ae19576722906eac9c729956ba4"}]}, 0x40}}, 0xc000) 9m44.483745769s ago: executing program 0 (id=1009): fsmount(0xffffffffffffffff, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r2, 0x0, 0x0, 0x94, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) 9m42.969117166s ago: executing program 0 (id=1011): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 9m41.932728181s ago: executing program 0 (id=1013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = timerfd_create(0x8, 0x0) timerfd_gettime(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 9m40.810837839s ago: executing program 0 (id=1017): fsopen(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 9m36.775058938s ago: executing program 0 (id=1032): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 9m35.795437953s ago: executing program 33 (id=1032): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 3m15.40899511s ago: executing program 3 (id=2148): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) close(r0) r3 = socket(0x10, 0x3, 0x0) dup3(r2, r3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x20000010) pselect6(0x40, &(0x7f0000000080)={0x2, 0x0, 0x1, 0x0, 0x3, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000001, 0x4, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 3m12.384666193s ago: executing program 3 (id=2162): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40070) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m11.250646341s ago: executing program 3 (id=2165): socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x800, 0x0, 0x1, 0x1, 0x7, 0x8000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x800, 0x0, 0xff}, 0x20) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000010000100000000001000000085ff00003b000000000000000000000008001c00c90000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06daab01a77}, 0x40) 3m5.356992754s ago: executing program 3 (id=2175): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 3m3.05196301s ago: executing program 3 (id=2181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x34}, 0x28) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x2, 0x0, 0x8dd2b353f7b928b1, @ipv4={'\x00', '\xff\xff', @empty}, @private0, 0x80, 0x8, 0x80, 0xdfa6}}) 3m0.505773251s ago: executing program 3 (id=2185): socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m45.396817846s ago: executing program 34 (id=2185): socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m25.804172533s ago: executing program 6 (id=2403): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv6_delroute={0x24, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) 1m24.724161709s ago: executing program 6 (id=2405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 1m23.019945711s ago: executing program 6 (id=2409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1973496795690219, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000340)={0xf1a, 0xfffffffffffffff8}, &(0x7f00000003c0)) prlimit64(r0, 0x2, 0x0, 0x0) 1m21.908859137s ago: executing program 6 (id=2412): syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000008e40)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008900)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x260}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m19.304411921s ago: executing program 6 (id=2420): socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 1m19.015365047s ago: executing program 6 (id=2422): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2", 0x3a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e", 0x64}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m18.621974917s ago: executing program 35 (id=2422): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2", 0x3a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e", 0x64}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.938137874s ago: executing program 5 (id=2555): socket$unix(0x1, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0xb2a42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r3, 0x0, 0x0, 0x12143, 0x0) timer_create(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) 14.704686614s ago: executing program 2 (id=2556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r5, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) 13.788894386s ago: executing program 5 (id=2557): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r3, 0x0, 0x20, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 13.120447142s ago: executing program 5 (id=2558): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$kcm(0x1e, 0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 12.79357329s ago: executing program 5 (id=2559): socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9.237061206s ago: executing program 2 (id=2567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) r3 = semget$private(0x0, 0x4000000009, 0x208) semop(r3, &(0x7f00000002c0), 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc2a, &(0x7f0000001940)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) 7.924225618s ago: executing program 7 (id=2568): openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_VFIO_IOAS$CLEAR(r2, 0x3b88, 0x0) r3 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x2000, 0xab) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x2, 0x6]}}) 7.537180538s ago: executing program 2 (id=2569): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) readahead(r1, 0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x3) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 7.052928119s ago: executing program 5 (id=2570): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, r0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x802, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000340)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x3a0}, &(0x7f0000001b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2000, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfa65, 0x20, 0x5, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xfffffbff, 0x0, r5}}], 0x1, 0x0, 0x0) 6.19181782s ago: executing program 7 (id=2572): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) 4.98495364s ago: executing program 7 (id=2573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0xffe0}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1ff, 0xc, 0x0, 0x7, 0x400}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 4.860495172s ago: executing program 4 (id=2574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCOUTQ(r3, 0x5411, 0x0) 4.842104373s ago: executing program 5 (id=2575): socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000100)={0x1, 0x5, {0x1d, 0x0, 0x40000a, 0x114, 0x2, 0x7fdc, 0x5, 0x8000b9, 0xfffffffffffffffe}}) creat(0x0, 0xa1) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000980)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_null}]}) 3.649031301s ago: executing program 4 (id=2576): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20e400, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 3.337300799s ago: executing program 4 (id=2577): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000340)) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x3, 0x3c) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x0, 0x10}, 0x2f) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x4, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x50) 3.266239081s ago: executing program 2 (id=2578): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0x80) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000300), &(0x7f0000000380)=0x8) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x200) 2.985005428s ago: executing program 4 (id=2579): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x4004015}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000240)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000080)=0x1) 2.984587118s ago: executing program 2 (id=2580): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x396) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x541, 0x1001, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2000000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) 1.749491758s ago: executing program 2 (id=2581): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='devtmpfs\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='0x40\x00', 0x5) close(r1) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000001200)='./config/usb_gadget/g1/os_desc/c.1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001400)='dummy_udc.0', 0xb) close(r2) 1.704547499s ago: executing program 7 (id=2582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.536869453s ago: executing program 4 (id=2583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000003100)='fdinfo\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x2000, r4}, 0x38) 575.617396ms ago: executing program 7 (id=2584): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0) write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0) read(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x13}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 376.445051ms ago: executing program 4 (id=2585): r0 = socket$inet(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x0, 0x2a8, 0x138, 0x210, 0x210, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x10}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 0s ago: executing program 7 (id=2586): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x12, r3}, 0xfffffebe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x9, 0x1, '8'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): : Removing interface: batadv_slave_1 [ 492.157386][T10995] batman_adv: batadv0: Removing interface: gretap1 [ 492.167023][T10995] bond1: (slave veth3): Releasing active interface [ 492.200474][T10995] bond4: (slave bridge2): Releasing backup interface [ 492.230001][T10995] bond7: (slave geneve2): Releasing active interface [ 492.242331][T10995] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.252299][T10995] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.263045][T10995] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.272688][T10995] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.296198][T10995] bond8: (slave ip6gretap1): Releasing active interface [ 492.303619][T10995] ip6gretap1: left allmulticast mode [ 492.337721][T10995] bond9: (slave bridge3): Releasing backup interface [ 492.348135][T10995] bridge3: left promiscuous mode [ 492.366240][T10996] team0: Mode changed to "random" [ 492.418923][T10997] vlan0: entered promiscuous mode [ 492.438527][T10998] tipc: Enabled bearer , priority 0 [ 493.066974][T11000] tipc: Enabled bearer , priority 10 [ 493.101336][T11000] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1380'. [ 493.118495][T11004] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 493.168976][T11000] tipc: Enabling of bearer rejected, failed to enable media [ 497.049773][T11030] team0: Port device bridge0 removed [ 497.084108][T11030] bridge_slave_0: left allmulticast mode [ 497.108995][T11030] bridge_slave_0: left promiscuous mode [ 497.168439][T11030] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.201498][T11030] bridge_slave_1: left allmulticast mode [ 497.222245][T11030] bridge_slave_1: left promiscuous mode [ 497.242745][T11030] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.282306][T11030] bond0: (slave bond_slave_0): Releasing backup interface [ 497.327879][T11030] bond0: (slave bond_slave_1): Releasing backup interface [ 497.389293][T11030] team0: Port device team_slave_0 removed [ 497.444482][T11030] team0: Port device team_slave_1 removed [ 497.450713][T11030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.475685][T11030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.594039][T11030] bond1: (slave gretap1): Releasing backup interface [ 498.078898][T11030] bond2: (slave veth5): Releasing active interface [ 498.182259][T11030] bond3: (slave veth9): Releasing active interface [ 498.195541][T11030] bond4: (slave bridge1): Removing an active aggregator [ 498.220021][T11030] bond4: (slave bridge1): Releasing backup interface [ 498.236030][T11030] bond4: (slave bridge1): the permanent HWaddr of slave - b2:81:43:07:7b:33 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 498.299795][T11030] bond4: (slave veth11): Releasing backup interface [ 498.327036][T11030] bond5: (slave bridge2): Releasing backup interface [ 498.342198][T11030] bond7: (slave geneve2): Releasing active interface [ 498.352066][T11030] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.363875][T11030] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.372843][T11030] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.391960][T11030] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.430022][T11032] team0: Mode changed to "random" [ 498.446431][T11040] tipc: Enabled bearer , priority 0 [ 500.304329][T11085] bond2: (slave dummy0): Releasing active interface [ 500.314140][T11085] dummy0: left promiscuous mode [ 500.319230][T11085] dummy0: left allmulticast mode [ 500.604380][T11094] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by ""[11094] [ 501.426699][T11085] bridge_slave_0: left allmulticast mode [ 501.433515][T11085] bridge_slave_0: left promiscuous mode [ 501.439349][T11085] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.453245][T11085] bridge_slave_1: left allmulticast mode [ 501.460401][T11085] bridge_slave_1: left promiscuous mode [ 501.466451][T11085] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.480990][T11085] bond0: (slave bond_slave_0): Releasing backup interface [ 501.505995][T11085] bond0: (slave bond_slave_1): Releasing backup interface [ 501.551501][T11085] team0: Port device team_slave_0 removed [ 501.586243][T11085] team0: Port device team_slave_1 removed [ 501.607969][T11085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.620812][T11085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.630754][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.639373][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.645233][T11085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.657290][T11085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.669961][T11085] bond1: (slave macvlan1): Releasing active interface [ 501.692482][T11085] bond1: (slave veth3): Releasing active interface [ 501.737751][T11093] team0: Mode changed to "random" [ 501.753939][T11096] vlan0: entered promiscuous mode [ 501.779627][T11096] team0: Port device vlan0 added [ 501.834549][T11099] tipc: Started in network mode [ 501.853568][T11099] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 501.861169][T11099] tipc: Enabled bearer , priority 0 [ 501.919571][T11103] netlink: 'syz.3.1409': attribute type 1 has an invalid length. [ 501.952786][T11103] bond7: entered promiscuous mode [ 501.958765][T11103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 502.029954][T11103] macvtap0: entered allmulticast mode [ 502.109336][T11103] bond7: (slave bridge4): making interface the new active one [ 502.125539][T11103] bridge4: entered promiscuous mode [ 502.136920][T11103] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 502.239647][T11108] syzkaller0: entered allmulticast mode [ 502.296079][T11111] xt_l2tp: invalid flags combination: 0 [ 502.448093][T11119] futex_wake_op: syz.2.1415 tries to shift op by 32; fix this program [ 503.293504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 503.561319][T11122] veth5: entered promiscuous mode [ 503.566573][T11122] veth5: entered allmulticast mode [ 503.708585][ T7806] tipc: Node number set to 11578026 [ 504.104229][T11137] bond4: (slave dummy0): Releasing backup interface [ 504.125079][T11137] dummy0: left promiscuous mode [ 504.130252][T11137] dummy0: left allmulticast mode [ 504.161862][T11137] bridge_slave_0: left allmulticast mode [ 504.188759][T11137] bridge_slave_0: left promiscuous mode [ 504.204206][T11137] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.232733][T11137] bridge_slave_1: left allmulticast mode [ 504.252018][T11137] bridge_slave_1: left promiscuous mode [ 504.275850][T11137] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.307127][T11137] bond0: (slave bond_slave_0): Releasing backup interface [ 504.384821][T11137] bond0: (slave bond_slave_1): Releasing backup interface [ 504.450834][T11137] team0: Port device team_slave_0 removed [ 504.481996][T11137] team0: Port device team_slave_1 removed [ 504.493921][T11137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.504142][T11137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.536502][T11137] bond6: (slave macvlan1): Releasing active interface [ 504.570707][T11137] batman_adv: batadv0: Removing interface: gretap1 [ 504.594761][T11137] bond1: (slave bridge2): Releasing backup interface [ 504.611911][T11137] bridge2: left promiscuous mode [ 504.625492][T11137] bridge2: left allmulticast mode [ 504.647344][T11137] bond2: (slave geneve2): Releasing active interface [ 504.667269][T11137] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.692358][T11137] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.713445][T11137] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.776228][T11137] bond3: (slave ip6gretap1): Releasing active interface [ 504.783263][T11137] ip6gretap1: left allmulticast mode [ 504.844220][T11137] bond6: (slave veth5): Releasing active interface [ 504.884222][T11137] bond7: (slave bridge4): Releasing backup interface [ 504.891000][T11137] bridge4: left promiscuous mode [ 504.947073][T11139] team0: Mode changed to "random" [ 504.975068][T11143] vlan0: entered promiscuous mode [ 505.007767][T11144] tipc: Enabled bearer , priority 0 [ 507.638508][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1423'. [ 508.823381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 509.698377][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 512.663758][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'. [ 513.043901][T11188] veth13: entered allmulticast mode [ 513.073683][T11188] bond9: (slave veth13): Enslaving as an active interface with an up link [ 514.626610][T11212] netlink: 'syz.2.1439': attribute type 1 has an invalid length. [ 514.718973][T11215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 514.728112][T11215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 514.737020][T11215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 514.753424][T11215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 514.765831][T11215] bond10: (slave geneve3): making interface the new active one [ 514.776545][T11215] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 514.786741][T11218] netlink: 'syz.3.1440': attribute type 2 has an invalid length. [ 514.801104][T11212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1439'. [ 514.826488][T11212] 8021q: adding VLAN 0 to HW filter on device bond10 [ 514.873215][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1433'. [ 515.006876][T11221] syzkaller0: entered promiscuous mode [ 515.386789][T11228] FAULT_INJECTION: forcing a failure. [ 515.386789][T11228] name failslab, interval 1, probability 100, space 1, times 1 [ 515.404287][T11228] CPU: 0 PID: 11228 Comm: syz.4.1443 Not tainted syzkaller #0 [ 515.411927][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.422045][T11228] Call Trace: [ 515.425376][T11228] [ 515.428349][T11228] dump_stack_lvl+0x18c/0x250 [ 515.433104][T11228] ? show_regs_print_info+0x20/0x20 [ 515.434103][ T8026] FAULT_INJECTION: forcing a failure. [ 515.434103][ T8026] name failslab, interval 1, probability 100, space 1, times 1 [ 515.438361][T11228] ? load_image+0x420/0x420 [ 515.438406][T11228] ? __might_sleep+0xe0/0xe0 [ 515.438438][T11228] ? __lock_acquire+0x7d80/0x7d80 [ 515.438473][T11228] should_fail_ex+0x394/0x4c0 [ 515.438508][T11228] should_failslab+0x9/0x20 [ 515.464332][ T5131] FAULT_INJECTION: forcing a failure. [ 515.464332][ T5131] name failslab, interval 1, probability 100, space 1, times 1 [ 515.465921][T11228] slab_pre_alloc_hook+0x59/0x300 [ 515.478916][ C1] FAULT_INJECTION: forcing a failure. [ 515.478916][ C1] name failslab, interval 1, probability 100, space 1, times 1 [ 515.487916][T11228] ? __lock_acquire+0x7d80/0x7d80 [ 515.487954][T11228] kmem_cache_alloc_node+0x5e/0x310 [ 515.487988][T11228] ? __alloc_skb+0x103/0x2c0 [ 515.488016][T11228] __alloc_skb+0x103/0x2c0 [ 515.525180][T11228] netlink_sendmsg+0x66a/0xbf0 [ 515.529992][T11228] ? netlink_getsockopt+0x590/0x590 [ 515.535225][T11228] ? apparmor_socket_sendmsg+0x8e/0x330 [ 515.540888][T11228] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 515.546565][T11228] ? security_socket_sendmsg+0x80/0xa0 [ 515.552070][T11228] ? netlink_getsockopt+0x590/0x590 [ 515.557311][T11228] ____sys_sendmsg+0x61b/0x980 [ 515.562200][T11228] ? __asan_memset+0x22/0x40 [ 515.566957][T11228] ? __sys_sendmsg_sock+0x30/0x30 [ 515.572008][T11228] ? __import_iovec+0x5f2/0x850 [ 515.576901][T11228] ? import_iovec+0x73/0xa0 [ 515.581456][T11228] ___sys_sendmsg+0x2a6/0x360 [ 515.586202][T11228] ? __sys_sendmsg+0x2b0/0x2b0 [ 515.591014][T11228] ? __lock_acquire+0x7d80/0x7d80 [ 515.596109][T11228] __se_sys_sendmsg+0x1d0/0x2c0 [ 515.600996][T11228] ? __x64_sys_sendmsg+0x80/0x80 [ 515.605996][T11228] ? lockdep_hardirqs_on+0x98/0x150 [ 515.611231][T11228] do_syscall_64+0x55/0xb0 [ 515.615685][T11228] ? clear_bhb_loop+0x40/0x90 [ 515.620489][T11228] ? clear_bhb_loop+0x40/0x90 [ 515.625202][T11228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.631139][T11228] RIP: 0033:0x7f0c1019e019 [ 515.635599][T11228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.655235][T11228] RSP: 002b:00007f0c1114d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.663680][T11228] RAX: ffffffffffffffda RBX: 00007f0c10425fa0 RCX: 00007f0c1019e019 [ 515.671680][T11228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 515.679687][T11228] RBP: 00007f0c1023500c R08: 0000000000000000 R09: 0000000000000000 [ 515.687687][T11228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.695715][T11228] R13: 00007f0c10426038 R14: 00007f0c10425fa0 R15: 00007ffec86559c8 [ 515.703739][T11228] [ 515.706789][ C1] CPU: 1 PID: 8026 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 515.710625][ C0] FAULT_INJECTION: forcing a failure. [ 515.710625][ C0] name failslab, interval 1, probability 100, space 1, times 1 [ 515.714467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.714485][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 515.714513][ C1] Call Trace: [ 515.714522][ C1] [ 515.714531][ C1] dump_stack_lvl+0x18c/0x250 [ 515.714556][ C1] ? show_regs_print_info+0x20/0x20 [ 515.759844][ C1] ? load_image+0x420/0x420 [ 515.764397][ C1] ? verify_lock_unused+0x140/0x140 [ 515.769627][ C1] ? mark_lock+0x94/0x320 [ 515.773997][ C1] should_fail_ex+0x394/0x4c0 [ 515.778718][ C1] should_failslab+0x9/0x20 [ 515.783259][ C1] slab_pre_alloc_hook+0x59/0x300 [ 515.788329][ C1] ? __lock_acquire+0x1262/0x7d80 [ 515.793416][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 515.798833][ C1] ? __alloc_skb+0x103/0x2c0 [ 515.803461][ C1] __alloc_skb+0x103/0x2c0 [ 515.807916][ C1] __netdev_alloc_skb+0x10c/0x500 [ 515.812981][ C1] ? kmalloc_reserve+0x240/0x240 [ 515.817959][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 515.823462][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 515.829060][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 515.834559][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 515.841369][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 515.846961][ C1] __iterate_interfaces+0x225/0x4c0 [ 515.852192][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 515.858471][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 515.865747][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 515.872023][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 515.879083][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 515.884409][ C1] ? hw_scan_work+0xf10/0xf10 [ 515.889118][ C1] __hrtimer_run_queues+0x525/0xc10 [ 515.894365][ C1] ? hrtimer_interrupt+0x980/0x980 [ 515.899502][ C1] ? read_tsc+0x9/0x20 [ 515.903653][ C1] hrtimer_run_softirq+0x177/0x290 [ 515.908801][ C1] handle_softirqs+0x27d/0x820 [ 515.913630][ C1] ? read_tsc+0x9/0x20 [ 515.917731][ C1] ? ktime_get+0x24b/0x280 [ 515.922186][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 515.927014][ C1] ? do_softirq+0x1a0/0x1a0 [ 515.931562][ C1] __irq_exit_rcu+0xd3/0x190 [ 515.936186][ C1] ? irq_exit_rcu+0x20/0x20 [ 515.940733][ C1] irq_exit_rcu+0x9/0x20 [ 515.945009][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 515.950688][ C1] [ 515.953647][ C1] [ 515.956618][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 515.962635][ C1] RIP: 0010:__printk_cpu_sync_wait+0x12/0x40 [ 515.968703][ C1] Code: 38 00 74 08 48 89 df e8 4c b4 73 00 4c 89 33 5b 41 5c 41 5e 41 5f c3 90 f3 0f 1e fa e8 27 31 1b 00 f3 90 48 c7 c7 00 d8 00 8d 04 00 00 00 e8 44 b5 73 00 8b 05 8e 97 94 0b 83 f8 ff 74 07 e8 [ 515.988350][ C1] RSP: 0018:ffffc900053ff658 EFLAGS: 00000293 [ 515.994457][ C1] RAX: ffffffff816c407c RBX: 0000000000000200 RCX: ffff888023cfda00 [ 516.002472][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d00d800 [ 516.010491][ C1] RBP: ffffc900053ff748 R08: 0000000000000003 R09: 0000000000000004 [ 516.018497][ C1] R10: dffffc0000000000 R11: fffffbfff1a01b00 R12: dffffc0000000004 [ 516.026501][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000a7fed0 [ 516.034506][ C1] ? __printk_cpu_sync_wait+0x2c/0x40 [ 516.039926][ C1] ? __printk_cpu_sync_wait+0x2c/0x40 [ 516.045332][ C1] dump_stack_lvl+0x165/0x250 [ 516.050562][ C1] ? show_regs_print_info+0x20/0x20 [ 516.055792][ C1] ? load_image+0x420/0x420 [ 516.060377][ C1] should_fail_ex+0x394/0x4c0 [ 516.065090][ C1] should_failslab+0x9/0x20 [ 516.069638][ C1] slab_pre_alloc_hook+0x59/0x300 [ 516.074697][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 516.079756][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 516.084993][ C1] ? __alloc_skb+0x103/0x2c0 [ 516.089621][ C1] __alloc_skb+0x103/0x2c0 [ 516.094078][ C1] ndisc_alloc_skb+0xa6/0x450 [ 516.098797][ C1] ndisc_ns_create+0x212/0x640 [ 516.103617][ C1] ? ndisc_alloc_skb+0x450/0x450 [ 516.108604][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 516.114630][ C1] ? lock_chain_count+0x20/0x20 [ 516.119523][ C1] ndisc_send_ns+0xbb/0x160 [ 516.124106][ C1] ? ndisc_ns_create+0x640/0x640 [ 516.129100][ C1] addrconf_dad_work+0xa27/0x1550 [ 516.134184][ C1] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 516.139503][ C1] ? read_lock_is_recursive+0x20/0x20 [ 516.144917][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.150156][ C1] ? process_scheduled_works+0x975/0x1600 [ 516.155930][ C1] ? process_scheduled_works+0x975/0x1600 [ 516.161684][ C1] process_scheduled_works+0xa60/0x1600 [ 516.167372][ C1] ? worker_attach_to_pool+0x370/0x370 [ 516.172873][ C1] ? assign_work+0x3cc/0x5d0 [ 516.177496][ C1] worker_thread+0xa5e/0xfe0 [ 516.182141][ C1] kthread+0x2fa/0x390 [ 516.186241][ C1] ? pr_cont_work+0x550/0x550 [ 516.190948][ C1] ? kthread_blkcg+0xd0/0xd0 [ 516.195569][ C1] ret_from_fork+0x48/0x80 [ 516.200028][ C1] ? kthread_blkcg+0xd0/0xd0 [ 516.204650][ C1] ret_from_fork_asm+0x11/0x20 [ 516.209482][ C1] [ 516.212538][ C0] CPU: 0 PID: 11228 Comm: syz.4.1443 Not tainted syzkaller #0 [ 516.220133][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.230254][ C0] Call Trace: [ 516.233577][ C0] [ 516.236458][ C0] dump_stack_lvl+0x18c/0x250 [ 516.241180][ C0] ? show_regs_print_info+0x20/0x20 [ 516.246417][ C0] ? load_image+0x420/0x420 [ 516.250963][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 516.256920][ C0] should_fail_ex+0x394/0x4c0 [ 516.261654][ C0] should_failslab+0x9/0x20 [ 516.266201][ C0] slab_pre_alloc_hook+0x59/0x300 [ 516.271278][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 516.276520][ C0] ? __alloc_skb+0x103/0x2c0 [ 516.281160][ C0] __alloc_skb+0x103/0x2c0 [ 516.285614][ C0] ? __neigh_notify+0x29/0x300 [ 516.290449][ C0] __neigh_notify+0x15c/0x300 [ 516.295167][ C0] neigh_timer_handler+0xb05/0xff0 [ 516.300418][ C0] call_timer_fn+0x189/0x540 [ 516.305039][ C0] ? neigh_release+0x80/0x80 [ 516.309671][ C0] ? call_timer_fn+0xd2/0x540 [ 516.314381][ C0] ? __run_timers+0x810/0x810 [ 516.319104][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.324349][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 516.329600][ C0] ? neigh_release+0x80/0x80 [ 516.334262][ C0] __run_timers+0x570/0x810 [ 516.338852][ C0] ? detach_timer+0x2b0/0x2b0 [ 516.343600][ C0] run_timer_softirq+0x67/0xf0 [ 516.348419][ C0] handle_softirqs+0x27d/0x820 [ 516.353234][ C0] ? read_tsc+0x9/0x20 [ 516.357357][ C0] ? ktime_get+0x24b/0x280 [ 516.361839][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 516.366660][ C0] ? do_softirq+0x1a0/0x1a0 [ 516.371218][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 516.376480][ C0] __irq_exit_rcu+0xd3/0x190 [ 516.381142][ C0] ? irq_exit_rcu+0x20/0x20 [ 516.385704][ C0] irq_exit_rcu+0x9/0x20 [ 516.389981][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 516.395670][ C0] [ 516.398661][ C0] [ 516.401636][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.407673][ C0] RIP: 0010:preempt_schedule_irq+0xba/0x150 [ 516.413615][ C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 b1 b2 c7 f6 e8 dc ac f8 f6 fb bf 01 00 00 00 31 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 516.433389][ C0] RSP: 0018:ffffc9000fe07540 EFLAGS: 00000286 [ 516.439509][ C0] RAX: 72e917465917bf00 RBX: 0000000000000000 RCX: 72e917465917bf00 [ 516.447525][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 516.455535][ C0] RBP: ffffc9000fe075e0 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 516.463549][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: 0000000000000000 [ 516.471572][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001fc0ea8 [ 516.479626][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 516.485408][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 516.491268][ C0] irqentry_exit+0x67/0x70 [ 516.495737][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 516.501254][ C0] RIP: 0010:dump_stack_lvl+0x212/0x250 [ 516.506769][ C0] Code: e8 33 f6 fa f6 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 1f f6 fa f6 eb 06 e8 18 f6 fa f6 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 516.526416][ C0] RSP: 0018:ffffc9000fe076a0 EFLAGS: 00000283 [ 516.532573][ C0] RAX: ffffffff8a8c7b68 RBX: dffffc0000000000 RCX: 0000000000080000 [ 516.540593][ C0] RDX: ffffc9000c861000 RSI: 00000000000646f1 RDI: 00000000000646f2 [ 516.548772][ C0] RBP: ffffc9000fe077a0 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 516.556777][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: dffffc0000000004 [ 516.564786][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92001fc0ed8 [ 516.572805][ C0] ? dump_stack_lvl+0x208/0x250 [ 516.577744][ C0] ? show_regs_print_info+0x20/0x20 [ 516.582986][ C0] ? load_image+0x420/0x420 [ 516.587549][ C0] ? __might_sleep+0xe0/0xe0 [ 516.592188][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 516.597279][ C0] should_fail_ex+0x394/0x4c0 [ 516.602011][ C0] should_failslab+0x9/0x20 [ 516.606578][ C0] slab_pre_alloc_hook+0x59/0x300 [ 516.611653][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 516.616732][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 516.621980][ C0] ? __alloc_skb+0x103/0x2c0 [ 516.626628][ C0] __alloc_skb+0x103/0x2c0 [ 516.631095][ C0] netlink_sendmsg+0x66a/0xbf0 [ 516.635912][ C0] ? netlink_getsockopt+0x590/0x590 [ 516.641252][ C0] ? apparmor_socket_sendmsg+0x8e/0x330 [ 516.646837][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 516.652158][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 516.657653][ C0] ? netlink_getsockopt+0x590/0x590 [ 516.662905][ C0] ____sys_sendmsg+0x61b/0x980 [ 516.667722][ C0] ? __asan_memset+0x22/0x40 [ 516.672346][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 516.677402][ C0] ? __import_iovec+0x5f2/0x850 [ 516.682307][ C0] ? import_iovec+0x73/0xa0 [ 516.686859][ C0] ___sys_sendmsg+0x2a6/0x360 [ 516.691599][ C0] ? __sys_sendmsg+0x2b0/0x2b0 [ 516.696429][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 516.701528][ C0] __se_sys_sendmsg+0x1d0/0x2c0 [ 516.706426][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 516.711417][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 516.716668][ C0] do_syscall_64+0x55/0xb0 [ 516.721133][ C0] ? clear_bhb_loop+0x40/0x90 [ 516.725857][ C0] ? clear_bhb_loop+0x40/0x90 [ 516.730584][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.736518][ C0] RIP: 0033:0x7f0c1019e019 [ 516.740967][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.760608][ C0] RSP: 002b:00007f0c1114d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.769060][ C0] RAX: ffffffffffffffda RBX: 00007f0c10425fa0 RCX: 00007f0c1019e019 [ 516.777067][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 516.785079][ C0] RBP: 00007f0c1023500c R08: 0000000000000000 R09: 0000000000000000 [ 516.793081][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.801086][ C0] R13: 00007f0c10426038 R14: 00007f0c10425fa0 R15: 00007ffec86559c8 [ 516.809103][ C0] [ 516.812149][ T8026] CPU: 1 PID: 8026 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 516.819847][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.829961][ T8026] Workqueue: ipv6_addrconf addrconf_dad_work [ 516.836024][ T8026] Call Trace: [ 516.839439][ T8026] [ 516.842405][ T8026] dump_stack_lvl+0x18c/0x250 [ 516.847131][ T8026] ? show_regs_print_info+0x20/0x20 [ 516.852481][ T8026] ? load_image+0x420/0x420 [ 516.857116][ T8026] should_fail_ex+0x394/0x4c0 [ 516.861851][ T8026] should_failslab+0x9/0x20 [ 516.866412][ T8026] slab_pre_alloc_hook+0x59/0x300 [ 516.871494][ T8026] ? __lock_acquire+0x7d80/0x7d80 [ 516.876575][ T8026] kmem_cache_alloc_node+0x5e/0x310 [ 516.881836][ T8026] ? __alloc_skb+0x103/0x2c0 [ 516.886594][ T8026] __alloc_skb+0x103/0x2c0 [ 516.891096][ T8026] ndisc_alloc_skb+0xa6/0x450 [ 516.895837][ T8026] ndisc_ns_create+0x212/0x640 [ 516.900660][ T8026] ? ndisc_alloc_skb+0x450/0x450 [ 516.905652][ T8026] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 516.911696][ T8026] ? lock_chain_count+0x20/0x20 [ 516.916596][ T8026] ndisc_send_ns+0xbb/0x160 [ 516.921133][ T8026] ? ndisc_ns_create+0x640/0x640 [ 516.926110][ T8026] addrconf_dad_work+0xa27/0x1550 [ 516.931179][ T8026] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 516.936493][ T8026] ? read_lock_is_recursive+0x20/0x20 [ 516.941924][ T8026] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.947158][ T8026] ? process_scheduled_works+0x975/0x1600 [ 516.952910][ T8026] ? process_scheduled_works+0x975/0x1600 [ 516.958667][ T8026] process_scheduled_works+0xa60/0x1600 [ 516.964281][ T8026] ? worker_attach_to_pool+0x370/0x370 [ 516.969800][ T8026] ? assign_work+0x3cc/0x5d0 [ 516.974444][ T8026] worker_thread+0xa5e/0xfe0 [ 516.979095][ T8026] kthread+0x2fa/0x390 [ 516.983188][ T8026] ? pr_cont_work+0x550/0x550 [ 516.987893][ T8026] ? kthread_blkcg+0xd0/0xd0 [ 516.992548][ T8026] ret_from_fork+0x48/0x80 [ 516.996998][ T8026] ? kthread_blkcg+0xd0/0xd0 [ 517.001669][ T8026] ret_from_fork_asm+0x11/0x20 [ 517.006485][ T8026] [ 517.063778][ T5131] CPU: 0 PID: 5131 Comm: klogd Not tainted syzkaller #0 [ 517.070804][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 517.080901][ T5131] Call Trace: [ 517.084306][ T5131] [ 517.087337][ T5131] dump_stack_lvl+0x18c/0x250 [ 517.092092][ T5131] ? show_regs_print_info+0x20/0x20 [ 517.097350][ T5131] ? load_image+0x420/0x420 [ 517.101916][ T5131] ? __might_sleep+0xe0/0xe0 [ 517.106557][ T5131] ? __lock_acquire+0x7d80/0x7d80 [ 517.111639][ T5131] should_fail_ex+0x394/0x4c0 [ 517.116392][ T5131] should_failslab+0x9/0x20 [ 517.120956][ T5131] slab_pre_alloc_hook+0x59/0x300 [ 517.126062][ T5131] kmem_cache_alloc_node+0x5e/0x310 [ 517.131413][ T5131] ? __alloc_skb+0x103/0x2c0 [ 517.136119][ T5131] __alloc_skb+0x103/0x2c0 [ 517.140607][ T5131] alloc_skb_with_frags+0xcd/0x7a0 [ 517.145785][ T5131] ? __x64_sys_syslog+0x7c/0x90 [ 517.150690][ T5131] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.156816][ T5131] ? aa_label_sk_perm+0x500/0x6a0 [ 517.162000][ T5131] sock_alloc_send_pskb+0x883/0x9a0 [ 517.167283][ T5131] ? sock_kzfree_s+0x50/0x50 [ 517.171927][ T5131] ? do_raw_spin_lock+0x11f/0x2b0 [ 517.177023][ T5131] ? __rwlock_init+0x150/0x150 [ 517.181851][ T5131] ? do_raw_spin_unlock+0x121/0x230 [ 517.187101][ T5131] unix_dgram_sendmsg+0x5a9/0x16e0 [ 517.192275][ T5131] ? aa_af_perm+0x330/0x330 [ 517.196827][ T5131] ? unix_dgram_poll+0x680/0x680 [ 517.201831][ T5131] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 517.208305][ T5131] ? apparmor_socket_sendmsg+0x8e/0x330 [ 517.213896][ T5131] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 517.219257][ T5131] ? security_socket_sendmsg+0x80/0xa0 [ 517.224786][ T5131] __sys_sendto+0x4a9/0x6b0 [ 517.229353][ T5131] ? __ia32_sys_getpeername+0x90/0x90 [ 517.234808][ T5131] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 517.240850][ T5131] ? lock_chain_count+0x20/0x20 [ 517.245758][ T5131] __x64_sys_sendto+0xde/0xf0 [ 517.250575][ T5131] do_syscall_64+0x55/0xb0 [ 517.255037][ T5131] ? clear_bhb_loop+0x40/0x90 [ 517.259760][ T5131] ? clear_bhb_loop+0x40/0x90 [ 517.264490][ T5131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.270436][ T5131] RIP: 0033:0x7f40c4317407 [ 517.274903][ T5131] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 517.294564][ T5131] RSP: 002b:00007ffe01854ff0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 517.303037][ T5131] RAX: ffffffffffffffda RBX: 00007f40c41c7c80 RCX: 00007f40c4317407 [ 517.311057][ T5131] RDX: 0000000000000055 RSI: 00007ffe01855130 RDI: 0000000000000003 [ 517.319072][ T5131] RBP: 00007ffe01855560 R08: 0000000000000000 R09: 0000000000000000 [ 517.327092][ T5131] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe01855578 [ 517.335108][ T5131] R13: 00007ffe01855130 R14: 000000000000003a R15: 00007ffe01855130 [ 517.343142][ T5131] [ 517.737660][T11239] UHID_CREATE from different security context by process 942 (syz.4.1447), this is not allowed. [ 522.374155][T11289] bond9: (slave veth13): Releasing backup interface [ 522.414931][T11289] bond10: (slave geneve3): Releasing active interface [ 522.461785][T11289] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 522.487075][T11289] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 522.516969][T11289] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 522.542589][T11289] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 522.614039][T11296] team0: Unable to change to the same mode the team is in [ 522.668802][T11299] vlan0: entered promiscuous mode [ 522.714184][T11300] tipc: Enabling of bearer rejected, already enabled [ 522.810550][T11305] loop4: detected capacity change from 0 to 128 [ 523.018612][T11192] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 524.789180][T11340] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 526.532248][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 526.532264][ T28] audit: type=1800 audit(1785811795.741:476): pid=11342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1471" name="bus" dev="ramfs" ino=23316 res=0 errno=0 [ 526.687538][ T5788] Bluetooth: hci2: unexpected subevent 0x0e length: 32 > 15 [ 526.719439][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.762502][T11348] team0: Port device vlan0 removed [ 526.790663][T11351] team0: Unable to change to the same mode the team is in [ 526.831867][ T1084] tipc: Resetting bearer [ 526.832215][T11355] loop4: detected capacity change from 0 to 2048 [ 526.864907][T11348] team0: Port device vlan0 added [ 526.884692][T11355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.896684][T11348] tipc: Enabling of bearer rejected, already enabled [ 526.934157][T11355] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.091997][T11355] netlink: 'syz.4.1474': attribute type 12 has an invalid length. [ 527.111400][T11355] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 527.146696][ T3495] Bluetooth: hci4: Frame reassembly failed (-84) [ 529.143592][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 529.265804][ T6591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.459484][T11398] team0: Port device vlan0 removed [ 531.984785][T11406] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1489'. [ 532.013661][T11400] team0: Unable to change to the same mode the team is in [ 532.034114][ T8046] tipc: Resetting bearer [ 532.045456][T11402] team0: Port device vlan0 added [ 532.102919][T11407] tipc: Enabling of bearer rejected, already enabled [ 535.194728][T11453] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1500'. [ 536.211211][T11461] team0: Unable to change to the same mode the team is in [ 536.260928][T11461] tipc: Enabling of bearer rejected, already enabled [ 541.874256][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 541.943991][ T789] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 542.136438][ T789] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 542.159142][ T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.203400][ T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.233676][ T789] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.257238][ T789] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.276698][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.304765][ T789] usb 5-1: config 0 descriptor?? [ 544.077333][ T789] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 544.117620][ T789] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 544.164456][ T789] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 544.278626][T11517] bridge_slave_0: default FDB implementation only supports local addresses [ 544.317319][ T7788] usb 5-1: USB disconnect, device number 4 [ 544.396431][T11534] fido_id[11534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 545.840534][T11550] netlink: 'syz.5.1532': attribute type 1 has an invalid length. [ 545.930187][T11550] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 545.939289][T11550] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 545.948917][T11550] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 545.959499][T11550] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 545.972571][T11550] bond3: (slave geneve2): making interface the new active one [ 545.981518][T11550] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 546.013929][T11550] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1532'. [ 546.027840][T11550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.125364][T11576] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1535'. [ 549.201539][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1539'. [ 555.407147][T11633] team0: Port device vlan0 removed [ 555.503281][T11633] bond3: (slave geneve2): Releasing active interface [ 555.875348][T11633] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 556.002826][T11633] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 556.233488][T11633] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 556.243015][T11633] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 556.352414][T11641] team0: Port device vlan0 added [ 556.397462][T11644] tipc: Enabling of bearer rejected, already enabled [ 556.428213][T11653] netlink: 'syz.3.1559': attribute type 322 has an invalid length. [ 557.335730][T11666] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 557.382129][T11666] retu-mfd: probe of 0-0002 failed with error -5 [ 557.414893][T11666] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 560.774046][T11685] virtio-fs: tag not found [ 561.492658][T11692] tipc: Enabling of bearer rejected, failed to enable media [ 561.671828][T11690] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1565'. [ 562.124601][T11706] wg1: entered promiscuous mode [ 562.129558][T11706] wg1: entered allmulticast mode [ 563.067765][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.074895][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.140376][T11723] loop4: detected capacity change from 0 to 1024 [ 564.150768][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1579'. [ 564.160012][T11727] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 567.393599][ T28] audit: type=1326 audit(1785811836.541:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.2.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 567.736837][ T28] audit: type=1326 audit(1785811836.541:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.2.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 567.943787][ T28] audit: type=1326 audit(1785811836.551:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.2.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 567.987237][ T28] audit: type=1326 audit(1785811836.551:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.2.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 568.073815][ T28] audit: type=1326 audit(1785811836.551:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.2.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 568.125972][ T28] audit: type=1326 audit(1785811836.551:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.2.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 568.150240][ T28] audit: type=1326 audit(1785811836.551:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.2.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 568.175490][ T28] audit: type=1326 audit(1785811836.551:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.2.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 568.234248][ T28] audit: type=1326 audit(1785811836.551:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.2.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 568.283514][ T28] audit: type=1326 audit(1785811836.551:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.2.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 568.330001][T11772] veth0_vlan: entered allmulticast mode [ 568.366374][T11772] xt_hashlimit: max too large, truncated to 1048576 [ 568.421657][T11772] : renamed from vlan0 [ 571.724276][T11811] net_ratelimit: 23 callbacks suppressed [ 571.724298][T11811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.738915][T11811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.844261][T11811] tipc: Enabled bearer , priority 0 [ 571.863995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.872994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.112731][T11823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1605'. [ 572.133820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.662863][T11840] team0: Device xfrm0 failed to enter team mode [ 572.670319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.670423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.695641][T11840] team0: Device xfrm0 failed to enter team mode [ 573.703460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.743457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.751695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.857085][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'. [ 576.000530][T11855] bridge6: port 1(veth7) entered blocking state [ 576.013625][T11855] bridge6: port 1(veth7) entered disabled state [ 576.022430][T11855] veth7: entered allmulticast mode [ 576.030071][T11855] veth7: entered promiscuous mode [ 576.046908][T11858] bridge6: port 2(veth0_to_bond) entered blocking state [ 576.060327][T11858] bridge6: port 2(veth0_to_bond) entered disabled state [ 576.093669][T11858] veth0_to_bond: entered allmulticast mode [ 576.107482][T11858] veth0_to_bond: entered promiscuous mode [ 576.238693][T11863] loop4: detected capacity change from 0 to 164 [ 576.306180][T11863] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 576.823851][ C1] net_ratelimit: 2 callbacks suppressed [ 576.823872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.863566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.871794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.018729][T11894] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.1625'. [ 578.715399][T11891] ceph: No mds server is up or the cluster is laggy [ 578.725508][ T789] libceph: connect (1)[c::]:6789 error -101 [ 578.731706][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 578.903444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.943442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.951679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.034134][T11932] syz_tun: entered allmulticast mode [ 580.054411][T11931] syz_tun: left allmulticast mode [ 580.245453][T11936] bridge0: port 1(vxlan0) entered blocking state [ 580.261408][T11936] bridge0: port 1(vxlan0) entered disabled state [ 580.269285][T11936] vxlan0: entered allmulticast mode [ 580.282221][T11936] vxlan0: entered promiscuous mode [ 580.984991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.993198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.023509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.063449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.071679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.103461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.134843][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 585.134860][ T28] audit: type=1800 audit(1785811854.351:491): pid=11965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1644" name="bus" dev="ramfs" ino=24548 res=0 errno=0 [ 585.160889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.160949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.555446][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 585.603498][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 585.627677][T11991] netlink: 'syz.3.1643': attribute type 4 has an invalid length. [ 585.643454][T11991] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1643'. [ 585.676450][T11991] .`: renamed from bond0 [ 587.108104][T12027] loop4: detected capacity change from 0 to 256 [ 588.121763][T12040] loop5: detected capacity change from 0 to 6 [ 588.164628][ T3495] loop: Write error at byte offset 0, length 3072. [ 588.173851][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 588.183406][ C1] buffer_io_error: 6 callbacks suppressed [ 588.183420][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 588.574609][T12014] tipc: Resetting bearer [ 590.316096][T12014] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.325604][T12014] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.335116][T12014] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.351551][T12014] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.495390][T12014] tipc: Resetting bearer [ 595.166166][T12086] tipc: Enabling of bearer rejected, failed to enable media [ 597.887905][T12114] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1680'. [ 598.470176][T12089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.852751][T11361] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 602.595698][T12170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1699'. [ 602.663540][T12029] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 603.089053][T12029] usb 5-1: not running at top speed; connect to a high speed hub [ 603.098341][T12029] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.108951][T12029] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 603.118104][T12029] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 603.129368][T12029] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 603.142019][T12029] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 603.152272][T12029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.163279][T12029] usb 5-1: Product: syz [ 603.168752][T12029] usb 5-1: Manufacturer: syz [ 603.173800][T12029] usb 5-1: SerialNumber: syz [ 603.995488][T12029] usb 5-1: 0:2 : does not exist [ 604.150933][T12029] usb 5-1: USB disconnect, device number 5 [ 604.273598][T12117] udevd[12117]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.425263][T12214] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1709'. [ 606.434776][T12214] openvswitch: netlink: ct_state flags 00030000 unsupported [ 606.953781][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1712'. [ 608.080354][T12223] bridge3: port 1(veth15) entered blocking state [ 608.098044][T12223] bridge3: port 1(veth15) entered disabled state [ 608.109278][T12223] veth15: entered allmulticast mode [ 608.126197][T12223] veth15: entered promiscuous mode [ 609.376278][T12242] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 609.484509][T12244] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 609.588347][T12247] vlan0: entered promiscuous mode [ 609.597851][T12247] bond0: entered promiscuous mode [ 610.181732][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'. [ 610.265957][T12259] bridge4: port 1(veth13) entered blocking state [ 610.276115][T12259] bridge4: port 1(veth13) entered disabled state [ 610.288401][T12259] veth13: entered allmulticast mode [ 610.297477][T12259] veth13: entered promiscuous mode [ 610.310873][T12264] bridge4: port 2(veth0_to_bond) entered blocking state [ 610.318143][T12264] bridge4: port 2(veth0_to_bond) entered disabled state [ 610.325846][T12264] veth0_to_bond: entered allmulticast mode [ 610.333867][T12264] veth0_to_bond: entered promiscuous mode [ 613.504618][T12284] tipc: Enabling of bearer rejected, failed to enable media [ 615.498724][T12325] tipc: Enabling of bearer rejected, failed to enable media [ 617.034233][T12341] IPv6: sit2: Disabled Multicast RS [ 617.276431][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 617.297686][T12352] netlink: 'syz.2.1751': attribute type 4 has an invalid length. [ 617.366177][T12355] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 617.376912][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1752'. [ 617.442205][T12358] loop4: detected capacity change from 0 to 2048 [ 617.906341][T12356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.931381][T12356] tipc: Resetting bearer [ 617.951438][T12356] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.972434][T12356] tipc: Resetting bearer [ 617.991574][T12356] tipc: Resetting bearer [ 618.032351][T12356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.195794][T12363] vlan3: entered promiscuous mode [ 618.200925][T12363] bond0: entered promiscuous mode [ 618.269125][ T28] audit: type=1326 audit(1785811887.461:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.2.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 618.305223][T12365] sock: sock_set_timeout: `syz.2.1756' (pid 12365) tries to set negative timeout [ 618.315478][ T28] audit: type=1326 audit(1785811887.461:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.2.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 618.363452][ T28] audit: type=1326 audit(1785811887.511:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.2.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 618.392061][ T28] audit: type=1326 audit(1785811887.511:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.2.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 618.417138][ T28] audit: type=1326 audit(1785811887.511:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.2.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 618.447743][ T28] audit: type=1326 audit(1785811887.511:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.2.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 618.479996][ T28] audit: type=1326 audit(1785811887.511:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.2.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 618.511884][ T28] audit: type=1326 audit(1785811887.511:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.2.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 618.536812][ T28] audit: type=1326 audit(1785811887.511:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.2.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 619.048135][ T28] audit: type=1326 audit(1785811887.511:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.2.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 620.292851][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 620.462138][T12386] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 620.477580][T12386] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1763'. [ 620.630868][T12390] netlink: 'syz.5.1765': attribute type 1 has an invalid length. [ 620.680705][T12390] 8021q: adding VLAN 0 to HW filter on device bond4 [ 620.751327][T12390] bond4: (slave syz_tun): making interface the new active one [ 620.771845][T12390] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 620.800767][T12390] bond4: entered promiscuous mode [ 620.811251][T12390] syz_tun: entered promiscuous mode [ 620.818813][T12390] bond4: entered allmulticast mode [ 620.829704][T12390] syz_tun: entered allmulticast mode [ 621.229303][T12399] sctp: [Deprecated]: syz.2.1767 (pid 12399) Use of int in max_burst socket option deprecated. [ 621.229303][T12399] Use struct sctp_assoc_value instead [ 624.562283][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.571989][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.578755][T12424] loop4: detected capacity change from 0 to 32768 [ 625.604814][T12424] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1774 (12424) [ 625.666287][T12424] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 625.677593][T12424] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 625.687202][T12424] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 625.697414][T12424] BTRFS info (device loop4): use zstd compression, level 3 [ 625.704870][T12424] BTRFS info (device loop4): force clearing of disk cache [ 625.712115][T12424] BTRFS info (device loop4): enabling disk space caching [ 625.719956][T12424] BTRFS info (device loop4): disk space caching is enabled [ 626.111388][T12424] BTRFS info (device loop4): enabling ssd optimizations [ 626.118592][T12424] BTRFS info (device loop4): auto enabling async discard [ 626.133993][T12424] BTRFS info (device loop4): rebuilding free space tree [ 626.253193][T12424] BTRFS info (device loop4): disabling free space tree [ 626.260395][T12424] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 626.270753][T12424] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 628.803998][ T6591] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 629.946106][T12478] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 629.994669][T12478] bond10 (unregistering): Released all slaves [ 632.418087][T12501] xt_connbytes: Forcing CT accounting to be enabled [ 632.425249][T12501] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 632.437420][T12501] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 633.110510][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 633.196076][T12504] bridge7: port 1(veth9) entered blocking state [ 633.202792][T12504] bridge7: port 1(veth9) entered disabled state [ 633.204292][T12486] NFSD: attempt to initialize umh client tracking in a container ignored. [ 633.209434][T12504] veth9: entered allmulticast mode [ 633.225293][T12504] veth9: entered promiscuous mode [ 633.237640][T12486] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 633.269503][T12486] NFSD: Unable to initialize client recovery tracking! (-22) [ 633.293827][T12486] NFSD: starting 90-second grace period (net f0000612) [ 633.374454][T12510] bridge7: port 2(veth11) entered blocking state [ 633.389412][T12510] bridge7: port 2(veth11) entered disabled state [ 633.495743][T12510] veth11: entered allmulticast mode [ 633.503104][T12510] veth11: entered promiscuous mode [ 633.812998][T12522] xt_policy: output policy not valid in PREROUTING and INPUT [ 634.783164][T12537] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1804'. [ 635.965695][T12553] loop4: detected capacity change from 0 to 128 [ 636.036526][T12555] netlink: 'syz.5.1803': attribute type 1 has an invalid length. [ 636.046736][T12303] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 636.742880][T12555] 8021q: adding VLAN 0 to HW filter on device bond5 [ 636.812568][T12553] loop4: detected capacity change from 0 to 2048 [ 636.912358][T12553] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 636.925143][T12553] loop4: partition table partially beyond EOD, truncated [ 636.948138][T12553] loop4: p1 start 4278190080 is beyond EOD, truncated [ 636.974569][T12553] loop4: p2 start 16908800 is beyond EOD, truncated [ 636.996640][T12553] loop4: p4 start 11326 is beyond EOD, truncated [ 637.003073][T12553] loop4: p5 start 16908800 is beyond EOD, truncated [ 637.033401][T12553] loop4: p6 start 11326 is beyond EOD, truncated [ 637.268495][T12303] udevd[12303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 639.704065][T12587] bridge0: port 2(syz_tun) entered blocking state [ 639.740766][T12587] bridge0: port 2(syz_tun) entered disabled state [ 639.749428][T12587] syz_tun: entered allmulticast mode [ 639.757321][T12587] syz_tun: left allmulticast mode [ 640.026837][T11361] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 640.035885][T11361] Bluetooth: hci0: Injecting HCI hardware error event [ 640.046345][T11361] Bluetooth: hci0: hardware error 0x00 [ 642.223473][T11361] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 642.397850][T12612] netlink: 'syz.4.1818': attribute type 1 has an invalid length. [ 642.448623][T12612] 8021q: adding VLAN 0 to HW filter on device bond10 [ 643.309930][T12618] bond10: (slave gretap3): making interface the new active one [ 643.342544][T12618] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 643.387312][T12618] syz.4.1818 (12618) used greatest stack depth: 18920 bytes left [ 647.057508][T12651] loop4: detected capacity change from 0 to 1024 [ 647.093877][T12651] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 647.199603][T12651] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.1832: lblock 2 mapped to illegal pblock 2 (length 1) [ 647.253742][T12651] __quota_error: 28 callbacks suppressed [ 647.253762][T12651] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 647.282797][T12651] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.1832: lblock 0 mapped to illegal pblock 48 (length 1) [ 647.324253][T12651] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 647.344979][T12651] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1832: Failed to acquire dquot type 0 [ 647.374292][T12651] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 647.405951][T12651] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1832: mark_inode_dirty error [ 647.441981][T12651] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 647.458786][T12651] EXT4-fs (loop4): 1 orphan inode deleted [ 647.475299][T12651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.491358][ T8048] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 647.556142][ T8048] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 647.583456][ T8048] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:27: Failed to release dquot type 0 [ 647.648390][T12651] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 647.815525][T12651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.193099][T12727] overlayfs: failed to clone upperpath [ 659.373195][T12777] tipc: Resetting bearer [ 659.669717][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1868'. [ 660.731541][ T28] audit: type=1326 audit(1785811929.941:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.4.1869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1019e019 code=0x7ffc0000 [ 660.798600][T12789] sock: sock_set_timeout: `syz.4.1869' (pid 12789) tries to set negative timeout [ 660.812469][ T28] audit: type=1326 audit(1785811929.941:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.4.1869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1019e019 code=0x7ffc0000 [ 660.918389][ T28] audit: type=1326 audit(1785811929.981:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.4.1869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c1019e019 code=0x7ffc0000 [ 660.983982][ T28] audit: type=1326 audit(1785811929.981:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.4.1869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1019e019 code=0x7ffc0000 [ 661.008447][ T28] audit: type=1326 audit(1785811929.981:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.4.1869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1019e019 code=0x7ffc0000 [ 661.082910][ T28] audit: type=1326 audit(1785811929.981:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.4.1869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c1019e019 code=0x7ffc0000 [ 661.115789][ T28] audit: type=1326 audit(1785811929.981:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.4.1869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1019e019 code=0x7ffc0000 [ 661.156043][ T28] audit: type=1326 audit(1785811929.981:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.4.1869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1019e019 code=0x7ffc0000 [ 661.190025][ T28] audit: type=1326 audit(1785811929.981:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.4.1869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c1019e019 code=0x7ffc0000 [ 661.226746][ T28] audit: type=1326 audit(1785811929.981:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.4.1869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1019e019 code=0x7ffc0000 [ 663.007283][T12794] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 663.098444][T12795] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1871'. [ 663.492199][T12808] tipc: Enabling of bearer rejected, failed to enable media [ 664.525624][T12821] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 665.864947][T12831] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 666.899408][T12840] IPv6: sit3: Disabled Multicast RS [ 667.109674][T11361] Bluetooth: hci1: unexpected event for opcode 0x080d [ 671.143465][T11361] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 671.152493][T11361] Bluetooth: hci1: Injecting HCI hardware error event [ 671.164467][ T5788] Bluetooth: hci1: hardware error 0x00 [ 671.215813][T12892] IPv6: sit1: Disabled Multicast RS [ 672.159312][T12900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.658665][T12919] xt_CONNSECMARK: invalid mode: 0 [ 673.253601][ T5788] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 673.605830][T12933] netlink: 'syz.3.1909': attribute type 10 has an invalid length. [ 673.628253][T12933] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 677.547246][T12961] netlink: 'syz.5.1915': attribute type 1 has an invalid length. [ 684.105825][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1929'. [ 685.307402][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 685.603660][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 685.984502][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.035873][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.681414][T13020] tipc: Resetting bearer [ 686.715528][T13020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 691.332013][T13072] 8021q: adding VLAN 0 to HW filter on device bond11 [ 694.870091][T13115] tipc: Resetting bearer [ 698.609271][T13148] tipc: Enabled bearer , priority 0 [ 703.415832][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 709.053434][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 709.053453][ T28] audit: type=1326 audit(1785811977.811:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.1990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c1019e019 code=0x0 [ 713.615529][T13287] tipc: Failed to remove unknown binding: 66,0,0/11578026:993094952/993094954 [ 713.624884][T13285] tipc: Failed to remove unknown binding: 66,0,0/11578026:587735656/587735657 [ 713.633888][T13285] tipc: Failed to remove unknown binding: 66,0,0/11578026:587735656/587735657 [ 713.773217][T13290] netlink: 'syz.5.2013': attribute type 1 has an invalid length. [ 713.809855][T13290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 713.874650][T13290] bond6: (slave gretap1): making interface the new active one [ 713.926547][T13290] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 714.019000][T13295] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2014'. [ 714.276214][T13295] .`: entered allmulticast mode [ 714.281812][T13295] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 717.183445][ T28] audit: type=1800 audit(1785811986.381:566): pid=13322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2021" name="bus" dev="ramfs" ino=29059 res=0 errno=0 [ 718.625027][T13338] netlink: 'syz.5.2025': attribute type 9 has an invalid length. [ 718.632928][T13338] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2025'. [ 722.158348][T13374] netlink: 'syz.4.2032': attribute type 1 has an invalid length. [ 722.310486][T13377] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2032'. [ 722.328980][T13377] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2032'. [ 722.342154][T13374] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2032'. [ 722.494852][T13382] netlink: 'syz.3.2034': attribute type 1 has an invalid length. [ 722.890719][T13382] bridge8: entered promiscuous mode [ 722.904404][T13382] bond0: (slave bridge8): making interface the new active one [ 722.917532][T13382] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 723.454094][T13405] atomic_op ffff88807e27a998 conn xmit_atomic 0000000000000000 [ 728.880173][T13438] SET target dimension over the limit! [ 730.443155][T13457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.482086][T13457] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.510907][T13457] tipc: Resetting bearer [ 730.558658][T13457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 732.882151][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 734.883901][T13491] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2062'. [ 735.233620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.242537][T13502] 8021q: adding VLAN 0 to HW filter on device .` [ 735.251950][T13502] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.260353][T13502] tipc: Resetting bearer [ 735.279398][T13502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 735.345984][ T789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 735.855799][ T7560] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 736.263843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.584184][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 737.077526][ T3004] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 737.087700][ T3004] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 737.304265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.343468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.544647][ T789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 738.637469][T13539] team0: Device vlan0 failed to change mtu [ 738.703133][T13542] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 738.787436][T13544] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 738.880493][T13547] tipc: Enabling of bearer rejected, already enabled [ 738.912850][T13551] tipc: Enabling of bearer rejected, already enabled [ 739.383709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.103328][T13566] tipc: Enabled bearer , priority 10 [ 740.434181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.001773][T13573] tipc: Enabling of bearer rejected, already enabled [ 741.253653][T13582] tipc: Resetting bearer [ 741.263945][T12030] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 741.383804][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 741.463424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.104675][T12030] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 742.268801][T13595] tipc: Resetting bearer [ 742.295948][T12030] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 742.477951][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2105'. [ 742.487249][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2105'. [ 742.501352][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2105'. [ 742.511024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.519546][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2105'. [ 742.532748][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2105'. [ 742.541990][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2105'. [ 742.553425][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2105'. [ 742.562575][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2105'. [ 742.573845][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2105'. [ 742.583009][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2105'. [ 742.611445][T13598] tipc: Resetting bearer [ 742.624700][T13598] vlan0: left promiscuous mode [ 742.636693][T13598] veth5: left promiscuous mode [ 742.644382][T13598] veth9: left promiscuous mode [ 742.652081][T13598] bond3: left promiscuous mode [ 742.657887][T13598] bridge2: left promiscuous mode [ 742.663533][T13598] bond6: left promiscuous mode [ 742.672200][T13598] gretap2: left promiscuous mode [ 742.678231][T13598] bond9: left promiscuous mode [ 742.686777][T13598] syzkaller0: left promiscuous mode [ 742.715044][T12030] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 743.543846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.593889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.877900][T13614] vlan4: entered allmulticast mode [ 744.883159][T13614] bridge5: entered allmulticast mode [ 744.892632][T13614] bridge5: port 1(erspan0) entered blocking state [ 744.903998][T13614] bridge5: port 1(erspan0) entered disabled state [ 744.910968][T13614] erspan0: entered allmulticast mode [ 744.918364][T13614] erspan0: entered promiscuous mode [ 744.941642][T13614] bridge5: port 1(erspan0) entered blocking state [ 744.948353][T13614] bridge5: port 1(erspan0) entered forwarding state [ 745.633547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.504184][T13640] netlink: 'syz.5.2114': attribute type 1 has an invalid length. [ 746.858811][T13641] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 747.121489][ T7563] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 747.137468][T13640] 8021q: adding VLAN 0 to HW filter on device bond7 [ 747.594128][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.600508][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.623284][ T7563] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 747.704206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.753443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.783713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.943573][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 750.823937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.873403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.100754][T13696] sch_tbf: burst 1520 is lower than device lo mtu (1550) ! [ 752.903753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.943895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.993449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.023755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.728783][T13729] orangefs_mount: mount request failed with -4 [ 757.073996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.137480][T13736] netlink: 'syz.3.2140': attribute type 1 has an invalid length. [ 757.383587][T13740] __nla_validate_parse: 208 callbacks suppressed [ 757.383606][T13740] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2140'. [ 757.402715][T13740] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2140'. [ 758.103402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.341337][T13736] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2140'. [ 759.143708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.898459][T13773] tipc: Enabling of bearer rejected, failed to enable media [ 760.185096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.600033][T13794] netlink: 'syz.2.2151': attribute type 1 has an invalid length. [ 760.695182][T13798] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2151'. [ 760.723066][T13794] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2151'. [ 760.736646][T13794] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2151'. [ 761.223577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.650658][T13819] netlink: 'syz.5.2155': attribute type 10 has an invalid length. [ 761.662720][T13819] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 761.677379][T13819] netlink: 'syz.5.2155': attribute type 11 has an invalid length. [ 762.273751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.303966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.233581][ T28] audit: type=1800 audit(1785812033.451:567): pid=13830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2161" name="bus" dev="ramfs" ino=29606 res=0 errno=0 [ 764.343551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.383704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.435008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.223737][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 767.473443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.503747][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.544135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.593395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.045793][T13922] bio_check_eod: 10 callbacks suppressed [ 771.045840][T13922] syz.5.2174: attempt to access beyond end of device [ 771.045840][T13922] loop11: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 771.065734][T13922] hfsplus: unable to find HFS+ superblock [ 771.623794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.664034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.703420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.743645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.793906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.823659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.618382][T13995] 9pnet_virtio: no channels available for device c::: [ 777.863765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.913923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.953412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.983702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.024073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.063416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.113660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.445191][T14053] netlink: 'syz.4.2205': attribute type 1 has an invalid length. [ 784.759342][T14053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2205'. [ 784.784441][T14053] 8021q: adding VLAN 0 to HW filter on device bond11 [ 784.835584][T14065] tipc: Enabling of bearer rejected, failed to enable media [ 785.144090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.252720][T14082] tipc: Enabling of bearer rejected, already enabled [ 786.193438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.324332][T14098] tipc: Enabling of bearer rejected, already enabled [ 787.223745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.274060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.303374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.676704][T14144] netlink: 'syz.2.2225': attribute type 1 has an invalid length. [ 789.733682][T14144] 8021q: adding VLAN 0 to HW filter on device bond12 [ 789.847361][T14147] macvlan5: entered promiscuous mode [ 789.859402][T14147] macvlan5: entered allmulticast mode [ 789.868754][T14147] bond12: entered allmulticast mode [ 789.881896][T14147] bond12: entered promiscuous mode [ 789.892341][T14147] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 789.908733][T14147] team0: Port device macvlan5 added [ 789.929436][T14148] tipc: Enabling of bearer rejected, already enabled [ 790.032739][T14144] bond12: (slave ip6gretap1): making interface the new active one [ 790.047737][T14144] ip6gretap1: entered promiscuous mode [ 790.063905][T14144] ip6gretap1: entered allmulticast mode [ 790.081676][T14144] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 790.343699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.394114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.423439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.132741][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2235'. [ 793.466057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.513949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.553415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.935737][T11361] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 795.952099][T11361] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 795.963511][T11361] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 795.984514][T11361] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 795.992728][T11361] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 796.000643][T11361] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 796.593764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.634034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.195367][ T5788] Bluetooth: hci4: command tx timeout [ 798.663465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.768104][T14207] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 799.063352][ T7790] IPVS: starting estimator thread 0... [ 799.498965][T14209] IPVS: using max 16 ests per chain, 38400 per kthread [ 799.713815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.022263][ T28] audit: type=1326 audit(1785812069.231:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.5.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393399e019 code=0x7ffc0000 [ 800.063502][ T28] audit: type=1326 audit(1785812069.231:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.5.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393399e019 code=0x7ffc0000 [ 800.088261][ T28] audit: type=1326 audit(1785812069.271:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.5.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f393399e019 code=0x7ffc0000 [ 800.143411][ T28] audit: type=1326 audit(1785812069.271:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.5.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393399e019 code=0x7ffc0000 [ 800.231311][ T28] audit: type=1326 audit(1785812069.271:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.5.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393399e019 code=0x7ffc0000 [ 800.285619][T11361] Bluetooth: hci4: command tx timeout [ 800.321736][T14190] chnl_net:caif_netlink_parms(): no params data found [ 800.333424][ T28] audit: type=1326 audit(1785812069.271:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.5.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f393399e019 code=0x7ffc0000 [ 800.423468][ T28] audit: type=1326 audit(1785812069.271:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.5.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393399e019 code=0x7ffc0000 [ 800.744275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.767086][ T28] audit: type=1326 audit(1785812069.271:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.5.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393399e019 code=0x7ffc0000 [ 800.953539][ T28] audit: type=1326 audit(1785812069.271:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.5.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f393399e019 code=0x7ffc0000 [ 801.088241][ T28] audit: type=1326 audit(1785812069.271:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.5.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393399e019 code=0x7ffc0000 [ 801.182967][T14190] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.190442][T14190] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.198041][T14190] bridge_slave_0: entered allmulticast mode [ 801.205760][T14190] bridge_slave_0: entered promiscuous mode [ 801.215109][T14190] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.222373][T14190] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.229766][T14190] bridge_slave_1: entered allmulticast mode [ 801.237472][T14190] bridge_slave_1: entered promiscuous mode [ 801.276813][T14190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.297640][T14190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.400253][T14190] team0: Port device team_slave_0 added [ 801.420364][T14190] team0: Port device team_slave_1 added [ 801.534307][T14190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.567270][T14190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.783490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.002912][T14190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.343599][T11361] Bluetooth: hci4: command tx timeout [ 802.511256][T14190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.543554][T14190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.607285][T14190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.823913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.063769][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 803.356320][T14190] hsr_slave_0: entered promiscuous mode [ 803.373928][T14190] hsr_slave_1: entered promiscuous mode [ 803.380570][T14190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.388379][T14190] Cannot create hsr debugfs directory [ 803.864229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.971526][T14190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 803.983021][T14190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 804.003043][T14190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 804.019400][T14190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 804.175866][T14190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.205577][T14190] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.229327][ T7828] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.236603][ T7828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.292029][ T7828] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.299306][ T7828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.453543][T11361] Bluetooth: hci4: command tx timeout [ 804.913674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.801068][ T8601] syz_tun (unregistering): left allmulticast mode [ 805.830671][T14262] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 805.932564][T14262] 8021q: adding VLAN 0 to HW filter on device bond13 [ 805.949204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.035319][T14263] gretap2: entered promiscuous mode [ 806.063837][T14263] bond13: (slave gretap2): making interface the new active one [ 806.086528][T14263] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 806.121946][T14267] macvlan6: entered promiscuous mode [ 806.137817][T14267] macvlan6: entered allmulticast mode [ 806.152495][T14267] bond13: entered promiscuous mode [ 806.162918][T14267] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 806.316369][T14267] bond13: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 806.354499][T14267] bond13: left promiscuous mode [ 806.983906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.079631][T14190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.023537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.830588][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.841537][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.877385][ T1293] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 809.063681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.364166][T14190] veth0_vlan: entered promiscuous mode [ 810.104123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.636910][T14190] veth1_vlan: entered promiscuous mode [ 810.762455][T14190] veth0_macvtap: entered promiscuous mode [ 810.792153][T14190] veth1_macvtap: entered promiscuous mode [ 810.844134][T14190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.873454][T14190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.917946][T14190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.979778][T14190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.009025][T14190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.020829][T14190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.033011][T14190] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.042126][T14190] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.051310][T14190] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.060291][T14190] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.153420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.945769][ T8027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.979527][ T8027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.183704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.290775][ T7563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.332368][ T7563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.224008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.263386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.303826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.958033][T14350] bridge6: entered promiscuous mode [ 815.969788][T14350] bridge6: entered allmulticast mode [ 815.999249][T14350] team0: Port device bridge6 added [ 816.047579][ T7562] tipc: Resetting bearer [ 816.084019][T14352] bridge0: port 1(team0) entered blocking state [ 816.122950][T14352] bridge0: port 1(team0) entered disabled state [ 816.149253][T14352] team0: entered allmulticast mode [ 816.175129][T14352] team0: entered promiscuous mode [ 816.343917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.182899][T14378] loop6: detected capacity change from 0 to 512 [ 817.231397][T14378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.297791][T14190] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.393452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.424031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.463836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.881453][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2289'. [ 820.503389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.880963][T14419] ptrace attach of ""[14420] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14419] [ 821.543733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.584588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.633421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.663756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.703924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.743448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.793859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.823931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.863398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.904353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.953899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.983385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.023627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.064143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.093359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 836.103428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.143657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.183874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.412317][T14528] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2323'. [ 838.427319][T14528] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2323'. [ 839.223543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.273651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.303966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.353426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.383929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.423929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.497670][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2339'. [ 844.713593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 845.463550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.513682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.553919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.583422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.623697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.934165][T14621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 850.664051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.713389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.089943][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 852.089963][ T28] audit: type=1326 audit(1785812120.291:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b79e019 code=0x7ffc0000 [ 852.120787][ T28] audit: type=1326 audit(1785812120.291:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b79e019 code=0x7ffc0000 [ 852.145044][ T28] audit: type=1326 audit(1785812120.311:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b79e019 code=0x7ffc0000 [ 852.182232][ T28] audit: type=1326 audit(1785812120.311:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b79e019 code=0x7ffc0000 [ 852.214708][ T28] audit: type=1326 audit(1785812120.311:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f9d3b79e019 code=0x7ffc0000 [ 852.247991][ T28] audit: type=1326 audit(1785812120.311:591): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b79e019 code=0x7ffc0000 [ 852.288411][ T28] audit: type=1326 audit(1785812120.311:592): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3b79e019 code=0x7ffc0000 [ 852.350293][ T28] audit: type=1326 audit(1785812120.321:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d3b75e84e code=0x7ffc0000 [ 852.435711][ T28] audit: type=1326 audit(1785812120.321:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d3b75e84e code=0x7ffc0000 [ 852.551568][ T28] audit: type=1326 audit(1785812120.321:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d3b75e84e code=0x7ffc0000 [ 852.706678][T14642] bad cache= option: no%e [ 852.706678][T14642] [ 852.713778][T14642] CIFS: VFS: bad cache= option: no%e [ 852.743668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.991438][T14645] overlayfs: failed to clone upperpath [ 853.783946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.005173][T14655] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2359'. [ 854.823391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.873689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.433527][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2365'. [ 856.555204][T14670] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2364'. [ 856.903936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.943427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.983758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.027886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.129773][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2360'. [ 860.389743][T14700] hsr_slave_1 (unregistering): left promiscuous mode [ 860.403040][T14708] syz_tun: entered allmulticast mode [ 861.063387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.492779][T14725] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9715] was attempted by " [ 862.103624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.255928][T14733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.841633][T14739] syz.5.2382 (14739) used greatest stack depth: 17192 bytes left [ 863.144105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.183371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.223594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.273919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.313362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.983752][T14787] tipc: Enabling of bearer rejected, already enabled [ 868.065129][T14792] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 868.343932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.488484][T14798] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 869.383964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.704965][T14806] Mass Storage Function, version: 2009/09/11 [ 869.742666][T14806] LUN: removable file: (no medium) [ 870.423352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.724266][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.740695][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.767786][ T1293] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 871.473670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.503903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.543359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.583691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.383535][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 875.624012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.598999][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2421'. [ 876.608351][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2421'. [ 876.617787][T14878] netlink: 'syz.5.2421': attribute type 18 has an invalid length. [ 876.663415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.811431][ T7560] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.991710][ T7560] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.156506][ T7560] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.713662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.743902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.010067][ T7560] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.523300][T14892] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 879.545817][T14892] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 879.555516][T14892] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 879.565583][T14892] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 879.575374][T14892] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 879.582868][T14892] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 879.783384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.823647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.351392][T14920] futex_wake_op: syz.4.2432 tries to shift op by 144; fix this program [ 881.627129][T11361] Bluetooth: hci3: command tx timeout [ 881.863946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.148091][T14889] chnl_net:caif_netlink_parms(): no params data found [ 882.794787][T14945] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 882.903336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.812318][T11361] Bluetooth: hci3: command tx timeout [ 883.953629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.435369][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2443'. [ 884.983896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.600680][T14889] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.617070][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.630517][T14889] bridge_slave_0: entered allmulticast mode [ 885.638872][T14889] bridge_slave_0: entered promiscuous mode [ 886.033380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.083336][T11361] Bluetooth: hci3: command tx timeout [ 886.333771][T14889] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.341036][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.349716][T14889] bridge_slave_1: entered allmulticast mode [ 886.358599][T14889] bridge_slave_1: entered promiscuous mode [ 886.631270][T14889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.668376][T14889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.063691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.322542][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2450'. [ 888.104018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.114218][T11361] Bluetooth: hci3: command tx timeout [ 888.406059][T14889] team0: Port device team_slave_0 added [ 889.143566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.757165][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2454'. [ 889.841973][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2454'. [ 890.193657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.224930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.942198][T15036] Set syz1 is full, maxelem 65536 reached [ 892.273353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.447576][T15045] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2457'. [ 893.303822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.077762][T14889] team0: Port device team_slave_1 added [ 894.343883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.996209][T14889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.102040][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.393351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.606703][T14889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.632976][T14889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.778679][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.866681][T14889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.907481][T15058] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 895.917274][T15058] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 895.926992][T15058] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 896.414774][ T7560] hsr_slave_0: left promiscuous mode [ 896.423659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.473697][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.508643][ T7560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.599278][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.704190][ T7560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.906128][ T7560] bridge_slave_1: left allmulticast mode [ 897.012024][ T7560] bridge_slave_1: left promiscuous mode [ 897.055735][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.345919][ T7560] bridge_slave_0: left allmulticast mode [ 897.351839][ T7560] bridge_slave_0: left promiscuous mode [ 897.362913][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.463943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.395384][ T7560] veth1_macvtap: left promiscuous mode [ 898.413694][ T7560] veth0_macvtap: left promiscuous mode [ 898.419565][ T7560] veth1_vlan: left promiscuous mode [ 898.462788][ T7560] veth0_vlan: left promiscuous mode [ 898.503352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.543781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.593870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.633464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.666262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.422228][ T7560] team0 (unregistering): Port device team_slave_1 removed [ 903.498836][ T7560] team0 (unregistering): Port device team_slave_0 removed [ 903.578623][ T7560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.656087][ T7560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.713905][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.201107][ T7560] bond0 (unregistering): Released all slaves [ 904.452608][T15089] team0: Port device vlan0 removed [ 904.600056][T14889] hsr_slave_0: entered promiscuous mode [ 904.650462][T14889] hsr_slave_1: entered promiscuous mode [ 904.707166][T14889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 904.721871][T14889] Cannot create hsr debugfs directory [ 904.743327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.783631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.109550][T15149] sctp: [Deprecated]: syz.5.2477 (pid 15149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 906.109550][T15149] Use struct sctp_sack_info instead [ 906.823812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.863349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.185470][T15161] tipc: Enabling of bearer rejected, failed to enable media [ 908.537812][T14889] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 908.588777][T14889] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 908.611473][T14889] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 908.635973][T14889] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 908.661111][T15185] tipc: Enabling of bearer rejected, failed to enable media [ 908.903729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.237599][T14889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.596695][T14889] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.943760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.369442][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.376638][ T7562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.604343][ T7562] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.611535][ T7562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.983333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.867664][T14889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 912.023589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.611596][T14889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.063887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.727221][T15253] bridge0: port 2(erspan0) entered blocking state [ 913.734365][T15253] bridge0: port 2(erspan0) entered disabled state [ 913.745861][T15253] erspan0: entered allmulticast mode [ 913.764443][T15253] erspan0: entered promiscuous mode [ 913.801827][T15253] erspan0: left allmulticast mode [ 913.807116][T15253] erspan0: left promiscuous mode [ 913.813476][T15253] bridge0: port 2(erspan0) entered disabled state [ 914.103308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.153682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.193833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.603299][T15279] tipc: Enabling of bearer rejected, already enabled [ 916.878448][T14889] veth0_vlan: entered promiscuous mode [ 916.889215][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2503'. [ 916.941858][T14889] veth1_vlan: entered promiscuous mode [ 917.135633][T14889] veth0_macvtap: entered promiscuous mode [ 917.161102][T15292] tipc: Enabling of bearer rejected, already enabled [ 917.199053][T14889] veth1_macvtap: entered promiscuous mode [ 917.223334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.257262][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.271195][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.289184][T14889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.326909][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.363356][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.380916][T14889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.441456][T14889] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.450615][T14889] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.467834][T14889] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.478976][T14889] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.723932][ T7826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.757821][ T7826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.839372][ T7560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.851681][ T7560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.853615][ T7806] IPVS: starting estimator thread 0... [ 917.865173][T15305] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 917.984070][T15306] IPVS: using max 18 ests per chain, 43200 per kthread [ 918.263723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.303858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.392619][T15326] syzkaller0: entered promiscuous mode [ 919.402750][T15326] syzkaller0: entered allmulticast mode [ 919.422777][T15326] tipc: Started in network mode [ 919.431300][T15326] tipc: Node identity cac4f09dfa91, cluster identity 4711 [ 919.440296][T15326] tipc: Enabled bearer , priority 0 [ 919.661592][T15326] tipc: Resetting bearer [ 920.149379][T15325] tipc: Resetting bearer [ 920.251715][T15325] tipc: Disabling bearer [ 920.343327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.383655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.424553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.133471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 923.463319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.714817][T15372] tipc: Resetting bearer [ 923.791810][T15382] trusted_key: syz.2.2521 sent an empty control message without MSG_MORE. [ 924.503605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.639871][T15386] overlayfs: failed to clone upperpath [ 925.544065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.994295][T15404] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 926.583974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.633582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.664024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.703310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.743775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.783907][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.251790][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.258287][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.267999][ T1293] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 932.823304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.863592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.904207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.534671][T15496] tipc: Cannot configure node identity twice [ 935.943314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.983622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.023844][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.177687][T15518] can0: slcan on ttyS3. [ 938.385036][T15502] can0 (unregistered): slcan off ttyS3. [ 939.073319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.103623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.143989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.193313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.233882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.263882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.303339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.343629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.383703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.787539][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 947.787557][ T28] audit: type=1326 audit(1785812216.081:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.2.2567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 948.359448][ T28] audit: type=1326 audit(1785812216.081:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.2.2567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 948.433310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.942423][ T28] audit: type=1326 audit(1785812216.081:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.2.2567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 948.966904][ T28] audit: type=1326 audit(1785812216.081:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.2.2567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 949.069479][T15626] loop7: detected capacity change from 0 to 7 [ 949.234893][T15626] Dev loop7: unable to read RDB block 7 [ 949.247767][T15626] loop7: unable to read partition table [ 949.287403][T15626] loop7: partition table beyond EOD, truncated [ 949.298901][T15626] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 949.359651][ T28] audit: type=1326 audit(1785812216.081:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.2.2567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 949.448856][ T28] audit: type=1326 audit(1785812216.091:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.2.2567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 949.473686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.579131][ T28] audit: type=1326 audit(1785812216.091:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.2.2567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 949.687220][ T28] audit: type=1326 audit(1785812216.091:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.2.2567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 949.893266][ T28] audit: type=1326 audit(1785812216.091:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.2.2567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 950.503829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.714651][ T28] audit: type=1326 audit(1785812216.091:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.2.2567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4f19e019 code=0x7ffc0000 [ 951.553322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.377737][T15661] overlayfs: failed to clone upperpath [ 952.583624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.623762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.663336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.703630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.764127][T12029] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 955.959967][T12029] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.127518][T12029] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 956.311486][T12029] usb 1-1: Dual-Role OTG device on HNP port [ 956.345849][T12029] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 956.399063][T12029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.489399][ C0] ------------[ cut here ]------------ [ 956.495507][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 956.502857][ C0] WARNING: CPU: 0 PID: 5142 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 956.512963][ C0] Modules linked in: [ 956.517186][ C0] CPU: 0 PID: 5142 Comm: udevd Not tainted syzkaller #0 [ 956.524219][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.534327][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 956.539790][ C0] Code: 49 8b 0e 48 c7 c0 60 c5 7a 8b 49 c7 c0 80 c5 7a 8b 4c 0f 44 c0 48 c7 c7 20 c5 7a 8b 48 c7 c6 be 8d a6 8c 89 ea e8 9d ba 97 fa <0f> 0b e9 e1 fe ff ff e8 e1 ec cd fa 49 bc 00 00 00 00 00 fc ff df [ 956.559549][ C0] RSP: 0018:ffffc90000007790 EFLAGS: 00010046 [ 956.565668][ C0] RAX: 0fab082f2d428f00 RBX: ffff888022b340e0 RCX: ffff88807c5a0000 [ 956.573682][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 956.581691][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 956.589794][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 956.597830][ C0] R13: ffff888022b3410d R14: ffff888022b340e8 R15: ffff88802da3c2ba [ 956.605849][ C0] FS: 00007fee325ac880(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 956.614827][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.621453][ C0] CR2: 00007f0c103ed158 CR3: 00000000192f2000 CR4: 00000000003506f0 [ 956.629470][ C0] DR0: 0000000000000008 DR1: 0000000000000000 DR2: 0000000000000000 [ 956.637513][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 956.645618][ C0] Call Trace: [ 956.648939][ C0] [ 956.651835][ C0] hidg_set_alt+0x12a/0xa10 [ 956.656401][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 956.661830][ C0] set_config+0x735/0xff0 [ 956.666239][ C0] composite_setup+0x1df4/0x33a0 [ 956.671252][ C0] configfs_composite_setup+0xc7/0x100 [ 956.676779][ C0] dummy_timer+0x1324/0x34e0 [ 956.681475][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 956.686563][ C0] ? lock_chain_count+0x20/0x20 [ 956.691490][ C0] ? dummy_free_streams+0x520/0x520 [ 956.696753][ C0] ? dummy_free_streams+0x520/0x520 [ 956.702006][ C0] __hrtimer_run_queues+0x525/0xc10 [ 956.707282][ C0] ? hrtimer_interrupt+0x980/0x980 [ 956.712440][ C0] ? read_tsc+0x9/0x20 [ 956.716568][ C0] hrtimer_run_softirq+0x177/0x290 [ 956.721739][ C0] handle_softirqs+0x27d/0x820 [ 956.726560][ C0] ? read_tsc+0x9/0x20 [ 956.730681][ C0] ? ktime_get+0x24b/0x280 [ 956.735149][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 956.739963][ C0] ? do_softirq+0x1a0/0x1a0 [ 956.744551][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 956.749820][ C0] __irq_exit_rcu+0xd3/0x190 [ 956.754459][ C0] ? irq_exit_rcu+0x20/0x20 [ 956.759021][ C0] irq_exit_rcu+0x9/0x20 [ 956.763301][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 956.769075][ C0] [ 956.772150][ C0] [ 956.775118][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 956.781155][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 956.787295][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d ac 0b 05 0d 48 89 de 5b e9 b3 b1 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d b0 46 7c 7e 65 8b 15 b1 46 7c 7e 81 e2 00 01 ff 00 74 [ 956.806957][ C0] RSP: 0018:ffffc90003047250 EFLAGS: 00000246 [ 956.813094][ C0] RAX: ffffffff813bad86 RBX: ffffffff8f0e927c RCX: 0000000000000003 [ 956.821136][ C0] RDX: ffffffff813bab18 RSI: ffffffff8cfa05c0 RDI: 0000000000000004 [ 956.829162][ C0] RBP: ffffc900030473d8 R08: ffff88807c5a0000 R09: 0000000000000008 [ 956.837220][ C0] R10: 0000000000000009 R11: 0000000000000000 R12: ffffffff8f0e9280 [ 956.845246][ C0] R13: ffffc90003047388 R14: 0000000000000004 R15: dffffc0000000000 [ 956.853270][ C0] ? unwind_next_frame+0x9b6/0x2990 [ 956.858522][ C0] ? unwind_next_frame+0x748/0x2990 [ 956.863781][ C0] unwind_next_frame+0x9b6/0x2990 [ 956.868873][ C0] ? arch_stack_walk+0xf8/0x190 [ 956.873781][ C0] __unwind_start+0x5bb/0x730 [ 956.878556][ C0] ? stack_trace_save+0x100/0x100 [ 956.883634][ C0] arch_stack_walk+0xf8/0x190 [ 956.888369][ C0] ? arch_stack_walk+0xf8/0x190 [ 956.893286][ C0] stack_trace_save+0xaa/0x100 [ 956.898109][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 956.903323][ C0] kasan_set_track+0x4e/0x70 [ 956.908026][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 956.913112][ C0] kasan_save_free_info+0x28/0x40 [ 956.918200][ C0] ____kasan_slab_free+0x126/0x1f0 [ 956.923459][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 956.928975][ C0] ? skb_release_data+0x609/0x7f0 [ 956.934058][ C0] __kmem_cache_free+0xba/0x1f0 [ 956.938988][ C0] skb_release_data+0x609/0x7f0 [ 956.943910][ C0] consume_skb+0xb2/0x110 [ 956.948299][ C0] netlink_recvmsg+0x5e7/0xe60 [ 956.953124][ C0] ? netlink_sendmsg+0xbf0/0xbf0 [ 956.958121][ C0] ? aa_af_perm+0x330/0x330 [ 956.962683][ C0] ? mark_lock+0x94/0x320 [ 956.967075][ C0] ? __lock_acquire+0x1336/0x7d80 [ 956.972150][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 956.977470][ C0] ? security_socket_recvmsg+0x89/0xb0 [ 956.982957][ C0] ? netlink_sendmsg+0xbf0/0xbf0 [ 956.987929][ C0] ____sys_recvmsg+0x2bd/0x5d0 [ 956.992731][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 956.997802][ C0] ? import_iovec+0x73/0xa0 [ 957.002338][ C0] ___sys_recvmsg+0x214/0x590 [ 957.007049][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 957.011871][ C0] __x64_sys_recvmsg+0x21e/0x2f0 [ 957.016847][ C0] ? ___sys_recvmsg+0x590/0x590 [ 957.021739][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 957.026973][ C0] do_syscall_64+0x55/0xb0 [ 957.031428][ C0] ? clear_bhb_loop+0x40/0x90 [ 957.036130][ C0] ? clear_bhb_loop+0x40/0x90 [ 957.040831][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.046841][ C0] RIP: 0033:0x7fee31ea7407 [ 957.051279][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 957.071008][ C0] RSP: 002b:00007ffda75a8870 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 957.079457][ C0] RAX: ffffffffffffffda RBX: 00007fee325ac880 RCX: 00007fee31ea7407 [ 957.087452][ C0] RDX: 0000000000000000 RSI: 00007ffda75a8900 RDI: 0000000000000004 [ 957.095444][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 957.103434][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005618436e79e0 [ 957.111435][ C0] R13: 00007ffda75a89c0 R14: 00007ffda75a890c R15: 0000000000000000 [ 957.119442][ C0] [ 957.122483][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 957.129799][ C0] CPU: 0 PID: 5142 Comm: udevd Not tainted syzkaller #0 [ 957.136780][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.146921][ C0] Call Trace: [ 957.150227][ C0] [ 957.153094][ C0] dump_stack_lvl+0x18c/0x250 [ 957.157804][ C0] ? show_regs_print_info+0x20/0x20 [ 957.163033][ C0] ? load_image+0x420/0x420 [ 957.167577][ C0] panic+0x2ca/0x720 [ 957.171503][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 957.176050][ C0] __warn+0x2e0/0x470 [ 957.180063][ C0] ? usb_ep_enable+0x263/0x440 [ 957.184859][ C0] ? usb_ep_enable+0x263/0x440 [ 957.189683][ C0] report_bug+0x2be/0x4f0 [ 957.194058][ C0] ? usb_ep_enable+0x263/0x440 [ 957.198862][ C0] ? usb_ep_enable+0x263/0x440 [ 957.203659][ C0] ? usb_ep_enable+0x265/0x440 [ 957.208448][ C0] handle_bug+0xcf/0x120 [ 957.212719][ C0] exc_invalid_op+0x1a/0x50 [ 957.217255][ C0] asm_exc_invalid_op+0x1a/0x20 [ 957.222127][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 957.227529][ C0] Code: 49 8b 0e 48 c7 c0 60 c5 7a 8b 49 c7 c0 80 c5 7a 8b 4c 0f 44 c0 48 c7 c7 20 c5 7a 8b 48 c7 c6 be 8d a6 8c 89 ea e8 9d ba 97 fa <0f> 0b e9 e1 fe ff ff e8 e1 ec cd fa 49 bc 00 00 00 00 00 fc ff df [ 957.247166][ C0] RSP: 0018:ffffc90000007790 EFLAGS: 00010046 [ 957.253261][ C0] RAX: 0fab082f2d428f00 RBX: ffff888022b340e0 RCX: ffff88807c5a0000 [ 957.261260][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 957.269258][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 957.277253][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 957.285250][ C0] R13: ffff888022b3410d R14: ffff888022b340e8 R15: ffff88802da3c2ba [ 957.293270][ C0] hidg_set_alt+0x12a/0xa10 [ 957.297806][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 957.303214][ C0] set_config+0x735/0xff0 [ 957.307595][ C0] composite_setup+0x1df4/0x33a0 [ 957.312569][ C0] configfs_composite_setup+0xc7/0x100 [ 957.318078][ C0] dummy_timer+0x1324/0x34e0 [ 957.322737][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 957.327802][ C0] ? lock_chain_count+0x20/0x20 [ 957.332693][ C0] ? dummy_free_streams+0x520/0x520 [ 957.337927][ C0] ? dummy_free_streams+0x520/0x520 [ 957.343156][ C0] __hrtimer_run_queues+0x525/0xc10 [ 957.348425][ C0] ? hrtimer_interrupt+0x980/0x980 [ 957.353575][ C0] ? read_tsc+0x9/0x20 [ 957.357687][ C0] hrtimer_run_softirq+0x177/0x290 [ 957.362833][ C0] handle_softirqs+0x27d/0x820 [ 957.367630][ C0] ? read_tsc+0x9/0x20 [ 957.371727][ C0] ? ktime_get+0x24b/0x280 [ 957.376177][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 957.380966][ C0] ? do_softirq+0x1a0/0x1a0 [ 957.385499][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 957.390723][ C0] __irq_exit_rcu+0xd3/0x190 [ 957.395342][ C0] ? irq_exit_rcu+0x20/0x20 [ 957.399879][ C0] irq_exit_rcu+0x9/0x20 [ 957.404150][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 957.409820][ C0] [ 957.412767][ C0] [ 957.415715][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 957.421716][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 957.427815][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d ac 0b 05 0d 48 89 de 5b e9 b3 b1 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d b0 46 7c 7e 65 8b 15 b1 46 7c 7e 81 e2 00 01 ff 00 74 [ 957.447444][ C0] RSP: 0018:ffffc90003047250 EFLAGS: 00000246 [ 957.453535][ C0] RAX: ffffffff813bad86 RBX: ffffffff8f0e927c RCX: 0000000000000003 [ 957.461524][ C0] RDX: ffffffff813bab18 RSI: ffffffff8cfa05c0 RDI: 0000000000000004 [ 957.469520][ C0] RBP: ffffc900030473d8 R08: ffff88807c5a0000 R09: 0000000000000008 [ 957.477510][ C0] R10: 0000000000000009 R11: 0000000000000000 R12: ffffffff8f0e9280 [ 957.485503][ C0] R13: ffffc90003047388 R14: 0000000000000004 R15: dffffc0000000000 [ 957.493503][ C0] ? unwind_next_frame+0x9b6/0x2990 [ 957.498725][ C0] ? unwind_next_frame+0x748/0x2990 [ 957.503947][ C0] unwind_next_frame+0x9b6/0x2990 [ 957.509003][ C0] ? arch_stack_walk+0xf8/0x190 [ 957.513879][ C0] __unwind_start+0x5bb/0x730 [ 957.518670][ C0] ? stack_trace_save+0x100/0x100 [ 957.523725][ C0] arch_stack_walk+0xf8/0x190 [ 957.528438][ C0] ? arch_stack_walk+0xf8/0x190 [ 957.533317][ C0] stack_trace_save+0xaa/0x100 [ 957.538103][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 957.543290][ C0] kasan_set_track+0x4e/0x70 [ 957.547955][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 957.553023][ C0] kasan_save_free_info+0x28/0x40 [ 957.558097][ C0] ____kasan_slab_free+0x126/0x1f0 [ 957.563257][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 957.568756][ C0] ? skb_release_data+0x609/0x7f0 [ 957.573812][ C0] __kmem_cache_free+0xba/0x1f0 [ 957.578700][ C0] skb_release_data+0x609/0x7f0 [ 957.583611][ C0] consume_skb+0xb2/0x110 [ 957.587967][ C0] netlink_recvmsg+0x5e7/0xe60 [ 957.592761][ C0] ? netlink_sendmsg+0xbf0/0xbf0 [ 957.597747][ C0] ? aa_af_perm+0x330/0x330 [ 957.602310][ C0] ? mark_lock+0x94/0x320 [ 957.606663][ C0] ? __lock_acquire+0x1336/0x7d80 [ 957.611716][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 957.617028][ C0] ? security_socket_recvmsg+0x89/0xb0 [ 957.622507][ C0] ? netlink_sendmsg+0xbf0/0xbf0 [ 957.627465][ C0] ____sys_recvmsg+0x2bd/0x5d0 [ 957.632268][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 957.637414][ C0] ? import_iovec+0x73/0xa0 [ 957.641952][ C0] ___sys_recvmsg+0x214/0x590 [ 957.646666][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 957.651486][ C0] __x64_sys_recvmsg+0x21e/0x2f0 [ 957.656450][ C0] ? ___sys_recvmsg+0x590/0x590 [ 957.661347][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 957.666587][ C0] do_syscall_64+0x55/0xb0 [ 957.671027][ C0] ? clear_bhb_loop+0x40/0x90 [ 957.675723][ C0] ? clear_bhb_loop+0x40/0x90 [ 957.680424][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.686343][ C0] RIP: 0033:0x7fee31ea7407 [ 957.690783][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 957.710418][ C0] RSP: 002b:00007ffda75a8870 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 957.718858][ C0] RAX: ffffffffffffffda RBX: 00007fee325ac880 RCX: 00007fee31ea7407 [ 957.726865][ C0] RDX: 0000000000000000 RSI: 00007ffda75a8900 RDI: 0000000000000004 [ 957.734854][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 957.742842][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005618436e79e0 [ 957.750838][ C0] R13: 00007ffda75a89c0 R14: 00007ffda75a890c R15: 0000000000000000 [ 957.758844][ C0] [ 957.762486][ C0] Kernel Offset: disabled [ 957.766934][ C0] Rebooting in 86400 seconds..