last executing test programs: 2m6.273128239s ago: executing program 3 (id=2651): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000100)={@my=0x0}) socket$netlink(0x10, 0x3, 0x4) gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xfffdffffffff7fff]}, 0x0, 0x0, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1a, 0x2}, &(0x7f0000000480)=0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000380)=ANY=[@ANYRES32=0x41424344, @ANYRESDEC=r0, @ANYBLOB="500200009078fffc"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x230600, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x80000, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x18, 0x0, 0x1, 0x84, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x3, 0xffffffff}, 0x1c) 2m3.916031203s ago: executing program 3 (id=2657): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x5, 0x557, &(0x7f0000000fc0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000280)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="01062dbd7000fcdbdf25190000007400018008000300020000001400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020073697430000000000000000000000000140002007866726d3000000000000000000000001400020076657468315f746f5f626f6e6400000038000180140002006970766c616e3000000000000000000008000100551685af5fbbe88f782ea6c7ce04ed3bb160a54107c1195f820872c3fd71f4b7eebaaa993212c5f8c891b2a61699d7ed1efdeb5484c845584082fd68b7086935fab37e3459c4592e906a2ada8d2ed43dfc0f442a2dab76b1a1947185d68dd1492f4723997490bb06686c1a191543b30439128576d4c92dbd3d1ed7323ed462323ae7933de13a0d49fb6fbefe9db44d9bfa47", @ANYRES32=0x0, @ANYBLOB="08000300030000000800030001000000080003000100000050000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e310000000000000000000000140002006970365f767469300000000000000000140002007767300000"], 0x110}, 0x1, 0x0, 0x0, 0x40054}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 2m2.646418612s ago: executing program 3 (id=2659): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7", 0x24}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d3", 0x37}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153) 2m1.987850469s ago: executing program 3 (id=2663): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {0x0}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88", 0x66}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a6792", 0x1a}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2e", 0x33}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x4, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m57.850736307s ago: executing program 3 (id=2667): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) r1 = signalfd(r0, &(0x7f0000000000)={[0x80]}, 0x8) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2d}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r3 = eventfd(0x786b) fsetxattr$security_capability(r3, 0x0, 0x0, 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000002180)='$-\\\x00!\x86\xfd\xb6%\xfd\xed\x97\xa2\x05\xd2\xe4\x9b\x8f?\xdcGCm^\xb7\xcd\xfd\xc2p\x98\x91l\xbe\xb2\xdb\xb0\xe9d\x1c-9\x0f\xa8a\x17\xd9\xc0\\\x92v6\x99\ar\x1fLe^\x1aX\x04\x16jwwA\n6\xa1\x11\x95\xe20o\xdab\xc8\xc4\x92hl#\x10\x12\xaf\x9b\xc1B\x04\xbd\t\xad&\x16,T?:$MO\"Fl&>`\xd8\xd8\x12n\xfbE\x8di\xe3\n\xa6\n\x84\x15\xe3\bW\xd7\x98\xda\xc4\x05\xcf\x87#!\xe4\x96L\xfco\xf2\xff\xc9%l\xd6K\xc2\x1e)>&\xeb\t;\a\xf8\x1f\x16\x11|0)/^\xc4\x94+\xd0\xc2\xbez%52\xee\x82\xdeh\xc7aE@\x9e\x94/?x\xac\x01\x8e\xd1\xb0\xe0w\x91\x98\x9b\xb2\x15\x16\xe5l\xcb\xdf\x02\xbc\x86E\xe7\x924/\xa0\xd3\x84^:\x0f\xac\x8c\xf9\x88\xf4\f\x06RW\xe0\a\x10\xe5\xfe\xac\x0e\xe1\xff\xd0\x14y\xb2(n\xc5m\x82\xc7\x8f\xb9v\xa4c\xc8\xb6\x83\x16&B\xf1\x1f<\x7f\xf0p/a\x13rs\xd3\x01\x14\xd5|\x18\x15\xd9\xdd\xb9\xd4\xfc\xcc\xcfX\x13\x84\x13\xa2\xc8\xcb\xeaB\x95X\\D\xe2\xbf[\xca;\x8d\xd5\xa5\x19') openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r4 = eventfd2(0x4, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = signalfd(r1, &(0x7f00000001c0)={[0xff]}, 0x53) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b0bc8d643234724d3f90324fc60", 0x14}], 0x1}, 0x0) r9 = accept4$nfc_llcp(r7, &(0x7f00000003c0), 0x0, 0x0) sendmmsg(r9, 0x0, 0x0, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r4, 0x6, 0x2}) 1m56.004893746s ago: executing program 3 (id=2673): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@remote, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fsopen(0x0, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x8001, @loopback, 0x7}, 0x1c) sendmmsg$inet(r6, 0x0, 0x0, 0x20040000) r7 = socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 1m40.883845533s ago: executing program 32 (id=2673): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@remote, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fsopen(0x0, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x8001, @loopback, 0x7}, 0x1c) sendmmsg$inet(r6, 0x0, 0x0, 0x20040000) r7 = socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 16.793101297s ago: executing program 5 (id=2984): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) eventfd2(0x2ad, 0x80800) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 12.790442046s ago: executing program 4 (id=2997): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dc", 0xa2}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224", 0x1b}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec57", 0x10}], 0x2}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.492351627s ago: executing program 4 (id=2998): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x10ef5d53) 12.096447945s ago: executing program 5 (id=3000): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001600)='./file0\x00', 0x80c880, &(0x7f00000001c0)={[{@fat=@codepage={'codepage', 0x3d, '949'}}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@nfs}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}]}, 0x1, 0x36a, &(0x7f00000006c0)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 11.233660795s ago: executing program 4 (id=3001): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f00000037c0)=0xfff, 0x4) 11.232507575s ago: executing program 1 (id=3002): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) close(0x3) getdents64(r2, 0x0, 0x20000) 10.955903475s ago: executing program 1 (id=3003): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) unshare(0x22020600) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) listen(r3, 0x842) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 10.057349347s ago: executing program 2 (id=3005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prlimit64(r0, 0xd, &(0x7f0000000040)={0x0, 0x3156}, &(0x7f0000000080)) r4 = dup(r3) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x15, 0x0, &(0x7f0000000040)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendto$packet(r4, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) 9.949473095s ago: executing program 5 (id=3006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 9.716567241s ago: executing program 1 (id=3007): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dc", 0xa2}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224", 0x1b}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec57", 0x10}], 0x2}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.803845245s ago: executing program 2 (id=3008): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x2, 0xa, 0x20}, {0x0, 0x0, 0x400, 0x3, 0x400000000000000, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffb, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.754503408s ago: executing program 4 (id=3009): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) eventfd2(0x2ad, 0x80800) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 8.612084638s ago: executing program 5 (id=3010): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r0, 0x0, 0x0) 8.305665849s ago: executing program 2 (id=3011): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{0xffffffffffffffff, 0x1}, {r1, 0x104}], 0x2, 0x0, 0x0, 0x0) 8.206334126s ago: executing program 1 (id=3012): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) 6.916036196s ago: executing program 1 (id=3013): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000004000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.912901687s ago: executing program 5 (id=3014): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0xffffffffffffffff, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffbfffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) clock_getres(0xfffffffffffffff1, &(0x7f0000000040)) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffd72, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe200}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x5c}}, 0x0) r7 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000000c0)=0x633b, 0x4) sendmmsg(r7, &(0x7f0000000bc0), 0x0, 0x24044017) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a8000000000000800000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 6.899004828s ago: executing program 2 (id=3015): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb93", 0x31}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d", 0x84}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef", 0x8a}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.58814002s ago: executing program 2 (id=3016): timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x3938700}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_gettime(r0, &(0x7f0000000000)) 6.547133672s ago: executing program 1 (id=3017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prlimit64(r0, 0xd, &(0x7f0000000040)={0x0, 0x3156}, &(0x7f0000000080)) r4 = dup(r3) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x15, 0x0, &(0x7f0000000040)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendto$packet(r4, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) 4.395681073s ago: executing program 0 (id=3019): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {0x0}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88", 0x66}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a6792", 0x1a}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x4, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6f4}}, 0x0) 4.262207142s ago: executing program 4 (id=3020): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}]}, 0x1, 0x788, &(0x7f0000000fc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x2, 0x0, 0x0, 0x0}) 4.113647782s ago: executing program 0 (id=3021): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dc", 0xa2}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224", 0x1b}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec57", 0x10}], 0x2}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.789092265s ago: executing program 0 (id=3022): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) r1 = gettid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2000c000, 0x0, 0x0) syz_open_procfs(r1, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e20, 0x0, @private1}}}, 0x108) 2.444009929s ago: executing program 4 (id=3023): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x3}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() syz_usb_connect$uac2(0x5, 0x8c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r4, 0x29, 0x1, 0x0, &(0x7f0000001480)) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/67, 0xfffffe8a) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) 1.258948302s ago: executing program 5 (id=3024): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) 1.135136961s ago: executing program 0 (id=3025): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x48}, 0x300}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) 924.037215ms ago: executing program 0 (id=3026): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000004000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 837.481251ms ago: executing program 2 (id=3027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240cc0c5, &(0x7f0000000080)={0xa, 0x4c1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}, {&(0x7f0000000540)=""/138, 0x8a}], 0x2, 0x4000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000100)=0x800, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x10000, 0x4) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800ab21ba3f49f4cf371e15727cc91a24c800ac2e84a6bde4d277000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r5}, 0x38) 0s ago: executing program 0 (id=3028): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x108) kernel console output (not intermixed with test programs): 202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 326.054941][ T6923] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.890'. [ 327.499645][ T6949] device bridge1 entered promiscuous mode [ 330.137873][ T126] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 330.363780][ T6954] snd_dummy snd_dummy.0: control 6:4:97:syz0:8 is already present [ 331.792287][ T6960] syz.3.903 (6960) used greatest stack depth: 20080 bytes left [ 333.667011][ T6967] 9pnet_virtio: no channels available for device syz [ 334.638268][ T4279] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 337.015581][ T4318] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 340.484262][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.913'. [ 340.545618][ T4318] usb 5-1: device descriptor read/64, error -71 [ 340.885638][ T4318] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 342.127023][ T7032] 9pnet_virtio: no channels available for device syz [ 345.708293][ T7067] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 347.736894][ T7077] fuse: Unknown parameter '&d' [ 351.404887][ T7103] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.941'. [ 352.813416][ T7120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.951'. [ 352.864555][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.872167][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.997531][ T4348] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 353.187630][ T4348] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 353.222401][ T4348] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 353.287505][ T4348] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 354.506888][ T4348] usb 1-1: config 220 has no interface number 2 [ 354.513323][ T4348] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 354.526738][ T4348] usb 1-1: config 220 interface 0 has no altsetting 0 [ 354.533565][ T4348] usb 1-1: config 220 interface 76 has no altsetting 0 [ 354.540523][ T4348] usb 1-1: config 220 interface 1 has no altsetting 0 [ 355.258112][ T4348] usb 1-1: string descriptor 0 read error: -71 [ 355.264449][ T4348] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 355.304310][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.334734][ T4348] usb 1-1: can't set config #220, error -71 [ 355.360273][ T4348] usb 1-1: USB disconnect, device number 48 [ 355.381741][ T7150] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.959'. [ 359.745829][ T7214] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.978'. [ 360.269918][ T7230] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.992'. [ 361.256938][ T7233] 9pnet_virtio: no channels available for device syz [ 362.826072][ T4348] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 363.055524][ T4348] usb 2-1: Using ep0 maxpacket: 8 [ 363.065188][ T4348] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 363.114629][ T4348] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.168767][ T4348] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.214563][ T4348] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.353777][ T4348] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.378549][ T4348] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.388082][ T4348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.603054][ T4348] usb 2-1: usb_control_msg returned -32 [ 363.611337][ T4348] usbtmc 2-1:16.0: can't read capabilities [ 363.619851][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 363.719776][ T7274] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 363.813991][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 363.929310][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 363.962443][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 363.983528][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 364.105913][ T7276] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 364.108314][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 364.131492][ T4314] usb 2-1: USB disconnect, device number 47 [ 364.147724][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 364.277490][ T7272] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 364.495697][ T6512] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 364.695533][ T6512] usb 4-1: Using ep0 maxpacket: 8 [ 364.702890][ T6512] usb 4-1: config 252 has an invalid interface number: 186 but max is 0 [ 364.755966][ T6512] usb 4-1: config 252 has no interface number 0 [ 364.782716][ T6512] usb 4-1: config 252 interface 186 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 364.839322][ T6512] usb 4-1: config 252 interface 186 has no altsetting 0 [ 364.854464][ T6512] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 364.882932][ T6512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.895309][ T7301] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 364.915623][ T7301] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 364.924563][ T7301] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 364.944161][ T7301] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 365.184855][ T6512] usb 4-1: string descriptor 0 read error: -71 [ 365.214336][ T6512] pvrusb2: Hardware description: Terratec Grabster AV400 [ 365.242809][ T6512] pvrusb2: ********** [ 365.258510][ T6512] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 365.289353][ T6512] pvrusb2: Important functionality might not be entirely working. [ 365.304738][ T6512] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 365.353712][ T6512] pvrusb2: ********** [ 365.361855][ T6512] usb 4-1: selecting invalid altsetting 0 [ 365.377372][ T2310] pvrusb2: Invalid write control endpoint [ 365.420606][ T6512] usb 4-1: USB disconnect, device number 54 [ 365.646365][ T2310] pvrusb2: Invalid write control endpoint [ 365.668269][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 365.682284][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 365.692932][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 365.786657][ T2310] pvrusb2: Device being rendered inoperable [ 365.794814][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 366.033901][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 366.353927][ T2310] pvrusb2: Attached sub-driver cx25840 [ 366.455104][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 366.568047][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 367.035543][ T4314] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 367.146787][ T6512] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 367.228420][ T4314] usb 2-1: config 2 has an invalid interface number: 117 but max is 0 [ 367.240972][ T4314] usb 2-1: config 2 has no interface number 0 [ 367.250800][ T4314] usb 2-1: config 2 interface 117 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 367.267636][ T4314] usb 2-1: config 2 interface 117 has no altsetting 0 [ 367.284540][ T4314] usb 2-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=1b.9a [ 367.295844][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.304073][ T4314] usb 2-1: Product: syz [ 367.309197][ T4314] usb 2-1: Manufacturer: syz [ 367.313916][ T4314] usb 2-1: SerialNumber: syz [ 367.341035][ T6512] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 367.353182][ T6512] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.374929][ T6512] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=fb.9d [ 367.384905][ T6512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.405216][ T7330] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 367.427492][ T6512] usb 4-1: invalid MIDI in EP 0 [ 367.614272][ T4314] kvaser_usb 2-1:2.117: Cannot get usb endpoint(s) [ 367.709600][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 368.650682][ T4314] usb 2-1: USB disconnect, device number 48 [ 368.823791][ T6512] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 368.977389][ T6512] usb 4-1: USB disconnect, device number 55 [ 369.962855][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.466312][ T7374] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.1041'. [ 370.770150][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 371.113848][ T7396] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1050'. [ 372.196247][ T7425] netlink: 'syz.2.1063': attribute type 21 has an invalid length. [ 372.328463][ T7425] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1063'. [ 372.442863][ T7425] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1063'. [ 372.578337][ T7430] netlink: 'syz.2.1063': attribute type 21 has an invalid length. [ 372.614602][ T7430] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1063'. [ 372.693077][ T7430] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1063'. [ 372.912733][ T7442] o2cb: This node has not been configured. [ 372.921031][ T7442] o2cb: Cluster check failed. Fix errors before retrying. [ 372.951042][ T7442] (syz.2.1070,7442,1):user_dlm_register:674 ERROR: status = -22 [ 372.969634][ T7442] (syz.2.1070,7442,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 373.311835][ T7461] cgroup: Unknown subsys name 'smackfsfloor' [ 373.417441][ T7464] netlink: 'syz.4.1081': attribute type 21 has an invalid length. [ 373.435701][ T7464] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1081'. [ 373.453093][ T7464] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1081'. [ 373.479117][ T7464] netlink: 'syz.4.1081': attribute type 21 has an invalid length. [ 373.557052][ T7464] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1081'. [ 373.655761][ T7464] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1081'. [ 375.375348][ T7515] netlink: 'syz.4.1099': attribute type 21 has an invalid length. [ 375.403877][ T7515] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1099'. [ 375.448311][ T7515] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1099'. [ 375.457768][ T7519] netlink: 'syz.4.1099': attribute type 21 has an invalid length. [ 375.467758][ T7519] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1099'. [ 375.477308][ T7519] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1099'. [ 375.489102][ T7521] netlink: 876 bytes leftover after parsing attributes in process `syz.1.1102'. [ 376.145808][ T126] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 376.395732][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 376.416695][ T126] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 376.503386][ T126] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 376.554101][ T126] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 376.622047][ T126] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 376.672258][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.707971][ T126] usb 2-1: Product: syz [ 376.720591][ T126] usb 2-1: Manufacturer: syz [ 376.739444][ T126] usb 2-1: SerialNumber: syz [ 376.782620][ T126] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 376.828954][ T126] imon 2-1:155.0: unable to initialize intf0, err -19 [ 376.856573][ T126] imon:imon_probe: failed to initialize context! [ 376.863156][ T126] imon 2-1:155.0: unable to register, err -19 [ 376.953973][ T7551] netlink: 'syz.0.1115': attribute type 21 has an invalid length. [ 376.963416][ T7551] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1115'. [ 376.990671][ T7551] netlink: 'syz.0.1115': attribute type 21 has an invalid length. [ 377.611577][ T7571] fuse: Bad value for 'fd' [ 378.598194][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.607445][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.279586][ T32] usb 2-1: USB disconnect, device number 49 [ 379.545683][ T7643] __nla_validate_parse: 3 callbacks suppressed [ 379.545701][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 379.682972][ T7647] fuse: Bad value for 'fd' [ 379.923800][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 382.407035][ T7678] 9pnet_virtio: no channels available for device syz [ 392.114749][ T7800] device bridge1 entered promiscuous mode [ 394.140886][ T7814] batman_adv: batadv0: Adding interface: macsec1 [ 394.147585][ T7814] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.172944][ T7814] batman_adv: batadv0: Interface activated: macsec1 [ 398.664107][ T7875] IPVS: length: 528 != 8 [ 398.748391][ T7875] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 398.756873][ T7875] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 398.765520][ T7875] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 400.116610][ T7884] fuse: Bad value for 'fd' [ 400.664982][ T7912] fuse: Bad value for 'fd' [ 403.610355][ T7959] netlink: 'syz.0.1270': attribute type 1 has an invalid length. [ 404.121973][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1278'. [ 404.258345][ T7980] device syz_tun entered promiscuous mode [ 404.286200][ T7980] device macvtap1 entered promiscuous mode [ 405.448198][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'. [ 406.670692][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 407.600039][ T8036] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.1302'. [ 407.770668][ T26] audit: type=1326 audit(1775692354.678:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 407.813564][ T26] audit: type=1326 audit(1775692354.678:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 407.895172][ T26] audit: type=1326 audit(1775692354.708:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 407.975590][ T26] audit: type=1326 audit(1775692354.718:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 408.045705][ T26] audit: type=1326 audit(1775692354.778:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 408.119630][ T26] audit: type=1326 audit(1775692354.798:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 408.195500][ T26] audit: type=1326 audit(1775692354.798:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 408.265741][ T26] audit: type=1326 audit(1775692354.798:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 409.528145][ T8066] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1315'. [ 412.083140][ T8088] ipt_CLUSTERIP: Please specify destination IP [ 412.235717][ T8089] 9pnet_virtio: no channels available for device syz [ 414.446423][ T8108] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1329'. [ 416.325819][ T8131] 9pnet_virtio: no channels available for device syz [ 417.113438][ T8129] netlink: 'syz.0.1337': attribute type 21 has an invalid length. [ 417.807645][ T8129] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1337'. [ 417.883861][ T8129] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1337'. [ 417.944090][ T8134] netlink: 'syz.0.1337': attribute type 21 has an invalid length. [ 417.993186][ T8134] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1337'. [ 418.002872][ T8134] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1337'. [ 418.168444][ T8144] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1341'. [ 418.463247][ T8149] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1343'. [ 420.186415][ T8164] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 420.255872][ T8164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.269158][ T8166] bond1: (slave geneve2): making interface the new active one [ 420.278508][ T8166] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 420.297737][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 420.360435][ T8163] Illegal XDP return value 32768 on prog (id 19) dev syz_tun, expect packet loss! [ 420.701288][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'. [ 420.985103][ T8182] syz.4.1356 uses obsolete (PF_INET,SOCK_PACKET) [ 422.610699][ T8196] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 422.831642][ T8196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.978939][ T8202] bond1: (slave geneve2): making interface the new active one [ 423.090908][ T8202] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 423.117388][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 423.598434][ T26] audit: type=1326 audit(1775692370.508:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 423.785644][ T26] audit: type=1326 audit(1775692370.508:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 423.844851][ T8225] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 423.862763][ T26] audit: type=1326 audit(1775692370.528:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 423.874726][ T8225] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 423.943916][ T26] audit: type=1326 audit(1775692370.528:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 423.994127][ T26] audit: type=1326 audit(1775692370.528:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 424.018820][ T8225] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 424.043539][ T26] audit: type=1326 audit(1775692370.528:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 424.104727][ T26] audit: type=1326 audit(1775692370.528:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 424.136350][ T26] audit: type=1326 audit(1775692370.538:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 424.266902][ T26] audit: type=1326 audit(1775692370.538:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 425.372771][ T8243] overlayfs: failed to clone upperpath [ 435.844539][ T8348] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1414'. [ 436.554180][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 436.762444][ T8392] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 436.770488][ T8392] netlink: 'syz.3.1429': attribute type 2 has an invalid length. [ 437.620435][ T8389] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.1431'. [ 438.377212][ T8423] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 438.709279][ T8430] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1446'. [ 440.971243][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.992368][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.813086][ T8478] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1468'. [ 447.070654][ T8517] netlink: 'syz.4.1481': attribute type 21 has an invalid length. [ 447.096425][ T8517] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1481'. [ 447.111429][ T8517] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1481'. [ 447.147576][ T8517] netlink: 'syz.4.1481': attribute type 21 has an invalid length. [ 447.185854][ T8517] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1481'. [ 447.206931][ T8517] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1481'. [ 447.216818][ T8527] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.1483'. [ 448.492885][ T8549] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1494'. [ 448.673115][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 448.753059][ T8557] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 448.788490][ T8560] netlink: 'syz.2.1499': attribute type 21 has an invalid length. [ 448.828507][ T8560] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1499'. [ 448.851484][ T8560] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1499'. [ 448.862134][ T8566] netlink: 'syz.2.1499': attribute type 21 has an invalid length. [ 448.870908][ T8566] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1499'. [ 448.881149][ T8566] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1499'. [ 448.915591][ T8568] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.1501'. [ 449.261381][ T8583] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1506'. [ 449.270888][ T8583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1506'. [ 449.320231][ T8584] overlayfs: missing 'lowerdir' [ 449.381595][ T8585] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 449.390420][ T8585] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 450.420413][ T8590] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 450.448936][ T8590] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 450.458254][ T8590] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 450.471156][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 450.509865][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 450.528735][ T8597] netlink: 'syz.4.1513': attribute type 2 has an invalid length. [ 450.539470][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 450.878787][ T8606] netlink: 'syz.1.1517': attribute type 21 has an invalid length. [ 450.910315][ T8606] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1517'. [ 450.962517][ T8606] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1517'. [ 450.985852][ T8609] netlink: 'syz.1.1517': attribute type 21 has an invalid length. [ 452.878961][ T8656] IPVS: length: 528 != 8 [ 452.896208][ T8656] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 452.904913][ T8656] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 452.913495][ T8656] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 453.057117][ T8664] autofs4:pid:8664:autofs_fill_super: called with bogus options [ 454.423527][ T8689] __nla_validate_parse: 4 callbacks suppressed [ 454.423542][ T8689] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.1548'. [ 454.462831][ T8695] IPVS: length: 528 != 8 [ 454.481090][ T8695] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 454.489479][ T8695] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 454.498101][ T8695] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 454.588409][ T8700] netlink: 'syz.3.1554': attribute type 21 has an invalid length. [ 454.596647][ T8700] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1554'. [ 454.606627][ T8700] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1554'. [ 454.617678][ T8700] netlink: 'syz.3.1554': attribute type 21 has an invalid length. [ 454.626132][ T8700] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1554'. [ 454.636411][ T8700] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1554'. [ 456.479354][ T8732] netlink: 'syz.2.1566': attribute type 21 has an invalid length. [ 456.516768][ T8732] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1566'. [ 456.570995][ T8732] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1566'. [ 456.588492][ T8736] netlink: 'syz.2.1566': attribute type 21 has an invalid length. [ 456.596574][ T8736] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1566'. [ 456.642023][ T8736] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1566'. [ 456.662304][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'. [ 457.514529][ T8765] netlink: 'syz.0.1580': attribute type 21 has an invalid length. [ 457.539972][ T8765] netlink: 'syz.0.1580': attribute type 21 has an invalid length. [ 457.814417][ T8779] fuse: Unknown parameter 'grou00000000000000000000' [ 458.127941][ T8794] netlink: 'syz.2.1592': attribute type 21 has an invalid length. [ 458.147192][ T8794] netlink: 'syz.2.1592': attribute type 21 has an invalid length. [ 458.606220][ T8811] fuse: Unknown parameter 'grou00000000000000000000' [ 458.931186][ T8823] netlink: 'syz.1.1606': attribute type 21 has an invalid length. [ 458.964713][ T8823] netlink: 'syz.1.1606': attribute type 21 has an invalid length. [ 459.374478][ T8845] fuse: Unknown parameter 'grou00000000000000000000' [ 459.416723][ T8846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.450475][ T8846] bond1: (slave geneve2): making interface the new active one [ 459.461200][ T8846] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 459.471147][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 459.600792][ T8857] __nla_validate_parse: 13 callbacks suppressed [ 459.600811][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 460.225985][ T8880] fuse: Unknown parameter 'group_i00000000000000000000' [ 461.713144][ T8910] validate_nla: 1 callbacks suppressed [ 461.713163][ T8910] netlink: 'syz.0.1644': attribute type 1 has an invalid length. [ 461.794887][ T8910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.977840][ T8972] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.1669'. [ 465.359370][ T9017] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.1688'. [ 466.069802][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1700'. [ 466.441929][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 466.835661][ T9074] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.1713'. [ 467.061593][ T9088] netlink: 'syz.1.1720': attribute type 21 has an invalid length. [ 467.079273][ T9088] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1720'. [ 467.101640][ T9088] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1720'. [ 467.135857][ T9090] netlink: 'syz.1.1720': attribute type 21 has an invalid length. [ 467.159238][ T9090] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1720'. [ 467.171377][ T9090] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1720'. [ 468.172915][ T9115] netlink: 'syz.3.1732': attribute type 21 has an invalid length. [ 468.190918][ T9115] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1732'. [ 468.220584][ T9115] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1732'. [ 468.251010][ T9120] netlink: 'syz.3.1732': attribute type 21 has an invalid length. [ 469.053549][ T9146] netlink: 'syz.3.1746': attribute type 21 has an invalid length. [ 469.097183][ T9146] netlink: 'syz.3.1746': attribute type 21 has an invalid length. [ 469.731873][ T9170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.556452][ T9195] IPVS: length: 528 != 8 [ 470.564980][ T9195] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 470.573457][ T9195] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 470.582008][ T9195] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 470.983254][ T9205] __nla_validate_parse: 10 callbacks suppressed [ 470.983274][ T9205] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1771'. [ 471.710188][ T9226] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1782'. [ 472.080039][ T9233] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1785'. [ 472.333453][ T9237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.590180][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1791'. [ 473.697014][ T9256] 9pnet_virtio: no channels available for device syz [ 474.202809][ T9261] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1797'. [ 475.241381][ T9272] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.1800'. [ 475.693277][ T9278] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 475.741177][ T9278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.034459][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'. [ 476.244414][ T9294] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1809'. [ 476.587487][ T9303] fuse: Bad value for 'fd' [ 478.070363][ T9332] fuse: Bad value for 'fd' [ 480.100412][ T9360] netlink: 'syz.2.1838': attribute type 1 has an invalid length. [ 480.154713][ T9360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 480.540374][ T9374] IPVS: length: 528 != 8 [ 480.577618][ T9374] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 480.586204][ T9374] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 480.594624][ T9374] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 481.407747][ T9393] netlink: 'syz.1.1849': attribute type 21 has an invalid length. [ 481.428294][ T9393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1849'. [ 481.464697][ T9393] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1849'. [ 481.509660][ T9397] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 481.584086][ T9397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.635925][ T9400] bond1: (slave geneve2): making interface the new active one [ 481.885641][ T9400] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 481.936419][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 482.691894][ T9426] IPVS: length: 528 != 8 [ 482.743791][ T9426] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 482.752562][ T9426] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 482.761271][ T9426] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 482.851060][ T9429] netlink: 'syz.2.1862': attribute type 21 has an invalid length. [ 482.864479][ T9429] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1862'. [ 482.894457][ T9429] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1862'. [ 485.037488][ T9457] overlayfs: failed to resolve './file0': -2 [ 485.776007][ T9482] netlink: 'syz.1.1882': attribute type 1 has an invalid length. [ 485.854069][ T9482] 8021q: adding VLAN 0 to HW filter on device bond4 [ 487.454018][ T9516] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 487.561580][ T9516] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.471482][ T9530] IPVS: length: 528 != 8 [ 489.274592][ T9541] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 489.321847][ T9541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 490.053228][ T9557] IPVS: length: 528 != 8 [ 490.062168][ T9557] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 490.070699][ T9557] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 490.079542][ T9557] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 490.163890][ T9561] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1914'. [ 491.281259][ T9575] netlink: 'syz.4.1921': attribute type 1 has an invalid length. [ 491.381203][ T9575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.830397][ T9593] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1927'. [ 491.886818][ T9596] IPVS: length: 528 != 8 [ 491.918505][ T9596] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 491.926782][ T9596] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 491.935214][ T9596] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 492.700995][ T9615] netlink: 'syz.4.1937': attribute type 1 has an invalid length. [ 492.844916][ T9615] 8021q: adding VLAN 0 to HW filter on device bond4 [ 493.010453][ T9625] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.1941'. [ 493.812620][ T9642] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1947'. [ 494.675790][ T9653] netlink: 'syz.0.1952': attribute type 1 has an invalid length. [ 494.731311][ T9653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.042410][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1955'. [ 495.679339][ T9676] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.1961'. [ 495.792519][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'. [ 495.812241][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 496.020787][ T9681] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 496.089637][ T9681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.456450][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1974'. [ 497.484629][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1974'. [ 497.868725][ T9714] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.1977'. [ 497.932378][ T9716] fuse: Bad value for 'group_id' [ 498.263427][ T9723] 9pnet_virtio: no channels available for device syz [ 499.286489][ T9734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1986'. [ 499.588542][ T9742] IPVS: length: 528 != 8 [ 499.633917][ T9742] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 499.642480][ T9742] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 499.650976][ T9742] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 499.674507][ T9745] fuse: Bad value for 'group_id' [ 499.947290][ T9753] netlink: 'syz.1.1994': attribute type 1 has an invalid length. [ 500.035763][ T9753] 8021q: adding VLAN 0 to HW filter on device bond5 [ 500.892040][ T9776] fuse: Bad value for 'group_id' [ 501.825506][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.831992][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.085591][ T9784] netlink: 'syz.2.2006': attribute type 1 has an invalid length. [ 502.199216][ T9784] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.908960][ T9794] IPVS: length: 528 != 8 [ 503.139842][ T9794] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 503.148202][ T9794] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 503.156667][ T9794] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 504.710527][ T9807] overlayfs: failed to clone upperpath [ 505.081265][ T9835] overlayfs: failed to clone upperpath [ 506.028611][ T9850] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2036'. [ 506.448295][ T9852] netlink: 'syz.3.2037': attribute type 21 has an invalid length. [ 506.461553][ T9852] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2037'. [ 506.474144][ T9852] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2037'. [ 506.491010][ T9852] netlink: 'syz.3.2037': attribute type 21 has an invalid length. [ 506.499487][ T9852] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2037'. [ 506.509216][ T9852] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2037'. [ 507.062872][ T9873] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2047'. [ 507.272938][ T9884] netlink: 'syz.2.2053': attribute type 21 has an invalid length. [ 507.282068][ T9884] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2053'. [ 507.291740][ T9884] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2053'. [ 507.302990][ T9884] netlink: 'syz.2.2053': attribute type 21 has an invalid length. [ 507.311281][ T9884] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2053'. [ 507.329235][ T9884] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2053'. [ 507.710811][ T9892] IPVS: length: 528 != 8 [ 507.790035][ T9893] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 507.822330][ T9893] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 507.946262][ T9893] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 508.688822][ T9900] IPVS: length: 528 != 8 [ 508.711390][ T9900] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 508.719946][ T9900] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 508.728483][ T9900] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 509.169970][ T9914] netlink: 'syz.1.2064': attribute type 21 has an invalid length. [ 509.189861][ T9914] netlink: 'syz.1.2064': attribute type 21 has an invalid length. [ 509.656973][ T9925] IPVS: length: 528 != 8 [ 509.674900][ T9925] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 509.683178][ T9925] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 509.691691][ T9925] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 510.684740][ T9944] netlink: 'syz.2.2077': attribute type 21 has an invalid length. [ 510.693949][ T9944] netlink: 'syz.2.2077': attribute type 21 has an invalid length. [ 511.028055][ T9952] IPVS: length: 528 != 8 [ 511.062270][ T9952] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 511.070900][ T9952] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 511.079433][ T9952] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 512.615009][ T9980] __nla_validate_parse: 10 callbacks suppressed [ 512.615030][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 513.258632][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'. [ 513.609293][ T9995] IPVS: length: 528 != 8 [ 513.624966][ T9995] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 513.633342][ T9995] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 513.643243][ T9995] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 513.658413][ T9993] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.2095'. [ 514.976169][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2104'. [ 515.047927][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'. [ 515.321029][T10023] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 515.371935][T10023] 8021q: adding VLAN 0 to HW filter on device bond5 [ 515.595542][T10029] IPVS: length: 528 != 8 [ 515.623958][T10029] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 515.632431][T10029] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 515.642197][T10029] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 516.637624][T10038] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2115'. [ 516.877103][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2117'. [ 517.161478][T10050] netlink: 'syz.2.2121': attribute type 1 has an invalid length. [ 517.232122][T10050] 8021q: adding VLAN 0 to HW filter on device bond6 [ 518.467182][T10061] IPVS: length: 528 != 8 [ 518.515686][T10061] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 518.524053][T10061] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 518.532780][T10061] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 519.242041][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 519.245838][T10057] CIFS: iocharset name too long [ 519.490896][T10081] netlink: 'syz.0.2133': attribute type 1 has an invalid length. [ 519.693919][T10081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.947134][T10094] fuse: Unknown parameter 'grou00000000000000000000' [ 520.661705][T10105] IPVS: length: 528 != 8 [ 520.924050][T10105] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 520.940633][T10105] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 520.950225][T10105] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 520.965543][T10110] overlayfs: failed to clone upperpath [ 521.114530][T10116] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2146'. [ 521.140298][T10119] fuse: Unknown parameter 'grou00000000000000000000' [ 521.145257][T10116] netlink: 'syz.2.2146': attribute type 1 has an invalid length. [ 521.248167][T10116] 8021q: adding VLAN 0 to HW filter on device bond7 [ 521.841694][T10136] fuse: Unknown parameter 'fd0x0000000000000003' [ 522.666453][T10144] fuse: Unknown parameter 'group_i00000000000000000000' [ 522.919435][T10150] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2161'. [ 522.937237][T10150] netlink: 'syz.2.2161': attribute type 1 has an invalid length. [ 523.110603][T10150] 8021q: adding VLAN 0 to HW filter on device bond8 [ 523.199586][T10159] IPVS: length: 528 != 8 [ 523.431001][T10159] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 523.471687][T10159] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 523.482364][T10159] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 523.520198][T10163] fuse: Unknown parameter 'fd0x0000000000000003' [ 523.816075][T10173] fuse: Unknown parameter 'group_i00000000000000000000' [ 524.097877][T10179] IPVS: length: 528 != 8 [ 524.119799][T10179] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 524.131681][T10179] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 524.140578][T10179] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 524.223739][T10184] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2175'. [ 524.238462][T10184] netlink: 'syz.2.2175': attribute type 1 has an invalid length. [ 524.260036][T10184] 8021q: adding VLAN 0 to HW filter on device bond9 [ 525.371693][T10189] 9pnet_virtio: no channels available for device syz [ 525.838316][T10202] fuse: Unknown parameter 'group_i00000000000000000000' [ 525.849067][T10205] netlink: 'syz.0.2183': attribute type 72 has an invalid length. [ 525.872478][T10206] IPVS: length: 528 != 8 [ 525.894170][T10206] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 525.929148][T10206] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 525.943893][T10206] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 525.972180][T10211] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2186'. [ 525.984194][T10211] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 526.012243][T10211] 8021q: adding VLAN 0 to HW filter on device bond6 [ 527.414610][T10219] 9pnet_virtio: no channels available for device syz [ 527.510357][T10227] netlink: 'syz.3.2195': attribute type 72 has an invalid length. [ 528.128514][T10259] IPVS: length: 528 != 8 [ 528.218640][T10259] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 528.258102][T10259] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 528.268380][T10259] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 528.543249][T10269] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2211'. [ 528.997149][T10282] netlink: 'syz.0.2217': attribute type 21 has an invalid length. [ 529.035433][T10282] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2217'. [ 529.051542][T10282] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2217'. [ 529.065040][T10285] netlink: 'syz.0.2217': attribute type 21 has an invalid length. [ 529.073963][T10285] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2217'. [ 529.084919][T10285] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2217'. [ 529.226229][T10288] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2219'. [ 529.291937][T10298] fuse: Bad value for 'fd' [ 530.397544][T10315] IPVS: length: 528 != 8 [ 530.464931][T10315] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 530.483574][T10315] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 530.501742][T10315] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 530.661048][T10323] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2234'. [ 532.954979][T10353] IPVS: length: 528 != 8 [ 533.057112][T10355] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 533.090586][T10355] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 533.123280][T10355] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 533.211737][T10357] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2245'. [ 535.963537][T10378] IPVS: length: 528 != 8 [ 536.094249][T10378] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 536.112180][T10384] xt_bpf: check failed: parse error [ 536.121085][T10378] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 536.144140][T10378] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 536.213868][T10388] IPVS: length: 528 != 8 [ 536.238268][T10390] overlayfs: failed to clone upperpath [ 536.412792][T10393] 9pnet_virtio: no channels available for device syz [ 539.525104][T10430] netlink: 'syz.1.2273': attribute type 21 has an invalid length. [ 539.533947][T10430] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2273'. [ 539.544153][T10430] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2273'. [ 539.604841][T10433] IPVS: length: 528 != 8 [ 539.623590][T10433] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 539.631967][T10433] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 539.640982][T10433] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 539.655033][T10434] IPVS: length: 528 != 8 [ 541.156777][T10452] overlayfs: failed to clone lowerpath [ 546.272809][T10474] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 546.281228][T10474] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 546.290199][T10474] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 550.517629][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 551.434228][T10510] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 551.851581][T10520] IPVS: length: 528 != 8 [ 551.867073][T10520] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 551.875302][T10520] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 551.883799][T10520] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 553.878568][T10536] tipc: Can't bind to reserved service type 1 [ 555.220059][T10556] IPVS: length: 528 != 8 [ 555.255907][T10556] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 555.264145][T10556] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 555.273172][T10556] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 556.595730][T10565] netlink: 'syz.3.2317': attribute type 21 has an invalid length. [ 556.604354][T10565] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2317'. [ 556.617777][T10565] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2317'. [ 556.845051][ T26] audit: type=1326 audit(1775692503.748:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.2319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97c4b9c819 code=0x0 [ 556.912719][T10571] IPVS: length: 528 != 8 [ 556.931215][T10571] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 556.939897][T10571] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 556.948390][T10571] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 561.481382][T10607] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2332'. [ 562.162034][T10619] IPVS: length: 528 != 8 [ 562.368033][T10619] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 562.376725][T10619] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 562.385164][T10619] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 562.528603][T10625] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2338'. [ 562.925774][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.932681][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.951612][T10665] IPVS: length: 528 != 8 [ 564.980194][T10665] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 564.988626][T10665] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 564.997092][T10665] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 565.696203][T10675] IPVS: length: 528 != 8 [ 568.397211][T10704] IPVS: length: 528 != 8 [ 568.475076][T10704] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 568.484468][T10704] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 568.493478][T10704] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 569.363146][T10712] IPVS: length: 528 != 8 [ 569.418179][T10712] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 569.427250][T10712] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 569.436249][T10712] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 569.713623][T10710] overlayfs: failed to resolve './file0': -2 [ 571.986471][T10731] netlink: 'syz.1.2374': attribute type 7 has an invalid length. [ 572.004148][T10731] netlink: 'syz.1.2374': attribute type 8 has an invalid length. [ 572.031080][T10731] netlink: 'syz.1.2374': attribute type 13 has an invalid length. [ 572.894259][T10751] IPVS: length: 528 != 8 [ 572.920963][T10751] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 572.929520][T10751] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 572.938003][T10751] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 574.216993][T10760] IPVS: length: 528 != 8 [ 574.233669][T10760] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 574.242135][T10760] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 574.251453][T10760] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 574.870564][T10778] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.2386'. [ 576.282133][T10794] IPVS: length: 528 != 8 [ 576.450529][T10794] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 576.458987][T10794] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 576.467566][T10794] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 579.511060][T10828] overlayfs: failed to clone upperpath [ 580.258339][T10831] tipc: Started in network mode [ 580.275960][T10831] tipc: Node identity 80005, cluster identity 4711 [ 580.310672][T10831] tipc: Node number set to 524293 [ 580.334793][T10834] netlink: 'syz.4.2405': attribute type 13 has an invalid length. [ 581.034559][T10842] netlink: 'syz.3.2409': attribute type 72 has an invalid length. [ 582.226090][T10834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 582.257043][T10834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 583.683147][T10874] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2419'. [ 584.884769][T10885] IPVS: length: 528 != 8 [ 585.171848][T10885] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 585.180445][T10885] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 585.189284][T10885] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 586.662163][T10922] IPVS: length: 528 != 8 [ 586.686788][T10922] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 586.696019][T10922] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 586.704532][T10922] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 587.055158][T10929] IPv6: NLM_F_CREATE should be specified when creating new route [ 587.063264][T10929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 587.071077][T10929] IPv6: NLM_F_CREATE should be set when creating new route [ 595.711464][T10996] netlink: 'syz.1.2462': attribute type 13 has an invalid length. [ 595.843881][T10996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 595.891120][T10996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 597.081482][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 604.724643][T11083] IPVS: length: 528 != 8 [ 604.778365][T11083] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 604.787637][T11083] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 604.796181][T11083] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 608.767475][T11122] IPVS: length: 528 != 8 [ 609.965292][T11122] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 609.973567][T11122] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 609.982239][T11122] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 610.925299][T11154] 9pnet_virtio: no channels available for device syz [ 612.862905][T11166] xt_hashlimit: size too large, truncated to 1048576 [ 613.230194][T11172] IPVS: length: 528 != 8 [ 613.273188][T11172] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 613.281633][T11172] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 613.290085][T11172] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 614.101966][T11176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2519'. [ 618.945592][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2531'. [ 619.821128][T11214] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.2534'. [ 620.129171][T11221] overlayfs: failed to clone upperpath [ 621.341236][T11229] IPVS: length: 528 != 8 [ 621.350943][T11229] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 621.359984][T11229] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 621.368521][T11229] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 621.455193][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2542'. [ 624.335908][T11271] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 624.358693][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.365982][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.454324][T11272] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.2553'. [ 624.742725][T11274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2554'. [ 625.534990][T11284] IPVS: length: 528 != 8 [ 625.564963][T11284] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 625.573307][T11284] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 625.581848][T11284] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 626.473096][T11301] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 626.537588][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2568'. [ 626.556716][T11305] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.2566'. [ 626.842516][T11311] 9pnet_fd: Insufficient options for proto=fd [ 628.033338][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2581'. [ 629.446069][T11344] ip6t_REJECT: ECHOREPLY is not supported [ 631.851321][T11355] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.2585'. [ 632.673845][T11376] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2596'. [ 632.693770][T11376] netlink: 'syz.2.2596': attribute type 1 has an invalid length. [ 633.864568][T11376] 8021q: adding VLAN 0 to HW filter on device bond10 [ 633.985702][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'. [ 634.002714][T11384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 635.914688][T11407] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2608'. [ 635.951674][T11407] netlink: 'syz.4.2608': attribute type 1 has an invalid length. [ 636.005220][T11407] 8021q: adding VLAN 0 to HW filter on device bond6 [ 636.220576][T11420] IPVS: length: 528 != 8 [ 636.542422][T11420] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 636.550761][T11420] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 636.559300][T11420] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 636.610607][T11423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2610'. [ 640.072715][T11450] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2621'. [ 640.106147][T11454] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2623'. [ 640.112591][T11450] netlink: 'syz.1.2621': attribute type 1 has an invalid length. [ 640.172873][T11450] 8021q: adding VLAN 0 to HW filter on device bond7 [ 640.713134][T11472] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.2626'. [ 640.839633][T11477] IPVS: length: 528 != 8 [ 640.893503][T11477] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 640.901842][T11477] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 640.910848][T11477] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 641.338982][T11482] team_slave_1: Caught tx_queue_len zero misconfig [ 641.973961][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2635'. [ 643.909000][T11510] IPv6: NLM_F_CREATE should be specified when creating new route [ 645.655505][T11527] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.2643'. [ 645.793249][T11534] IPVS: length: 528 != 8 [ 645.847289][T11534] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 645.856164][T11534] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 645.864587][T11534] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 648.171074][T11554] IPVS: length: 528 != 8 [ 648.364645][T11554] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 648.373773][T11554] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 648.382948][T11554] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 648.689867][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2654'. [ 648.705026][T11565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.461070][T11565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.807655][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2658'. [ 654.655869][T11602] IPVS: length: 528 != 8 [ 654.738558][T11602] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 654.747435][T11602] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 654.756023][T11602] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 656.548319][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2674'. [ 657.980223][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2673'. [ 663.084681][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2687'. [ 663.168637][T11665] 9pnet_fd: Insufficient options for proto=fd [ 666.471281][T11733] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2710'. [ 666.592920][T11737] netlink: 'syz.4.2712': attribute type 21 has an invalid length. [ 666.612211][T11737] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2712'. [ 666.650539][T11737] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2712'. [ 666.670292][T11740] netlink: 'syz.4.2712': attribute type 21 has an invalid length. [ 666.688747][T11740] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2712'. [ 666.701636][T11740] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2712'. [ 670.572462][T11778] netlink: 'syz.1.2725': attribute type 21 has an invalid length. [ 670.586919][T11778] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2725'. [ 670.605437][T11778] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2725'. [ 670.616691][T11778] netlink: 'syz.1.2725': attribute type 21 has an invalid length. [ 670.624573][T11778] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2725'. [ 670.658630][T11778] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2725'. [ 674.956344][T11815] netlink: 'syz.2.2741': attribute type 21 has an invalid length. [ 675.021042][T11815] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2741'. [ 675.247785][T11815] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2741'. [ 675.263362][T11817] netlink: 'syz.2.2741': attribute type 21 has an invalid length. [ 675.271872][T11817] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2741'. [ 675.570750][T11817] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2741'. [ 676.137719][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 677.541928][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 677.579714][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 677.606298][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 677.662812][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 677.704729][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 677.725938][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 679.965473][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 680.754231][T11847] chnl_net:caif_netlink_parms(): no params data found [ 681.188136][T11847] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.202501][T11847] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.305695][T11847] device bridge_slave_0 entered promiscuous mode [ 681.514780][T11847] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.671382][T11847] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.875649][T11847] device bridge_slave_1 entered promiscuous mode [ 682.013035][T11847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.107188][T11847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.246291][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 682.307976][T11847] team0: Port device team_slave_0 added [ 682.348022][T11847] team0: Port device team_slave_1 added [ 683.256938][ T26] audit: type=1326 audit(1775692630.168:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 683.372762][T11847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.389672][ T26] audit: type=1326 audit(1775692630.168:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 683.395373][T11847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.455426][ T26] audit: type=1326 audit(1775692630.168:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79bed96597 code=0x7ffc0000 [ 683.525442][T11847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.545702][ T26] audit: type=1326 audit(1775692630.168:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79bed3db99 code=0x7ffc0000 [ 683.577521][T11847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.584524][T11847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.635440][ T26] audit: type=1326 audit(1775692630.168:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79bed96597 code=0x7ffc0000 [ 683.685375][ T26] audit: type=1326 audit(1775692630.168:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79bed3db99 code=0x7ffc0000 [ 683.715926][T11847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.814423][ T26] audit: type=1326 audit(1775692630.168:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79bed96597 code=0x7ffc0000 [ 683.884519][ T26] audit: type=1326 audit(1775692630.168:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79bed3db99 code=0x7ffc0000 [ 683.912157][T11847] device hsr_slave_0 entered promiscuous mode [ 683.937335][ T26] audit: type=1326 audit(1775692630.168:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79bed96597 code=0x7ffc0000 [ 683.970482][ T26] audit: type=1326 audit(1775692630.168:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79bed3db99 code=0x7ffc0000 [ 684.078457][T11847] device hsr_slave_1 entered promiscuous mode [ 684.101947][T11847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.161289][T11847] Cannot create hsr debugfs directory [ 684.321231][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 685.800201][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.812026][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.363055][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 686.393473][T11847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 686.439481][T11847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 686.508545][T11847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 686.533478][T11847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 686.803957][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'. [ 688.007044][T11847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.139171][T11847] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.174160][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 688.199832][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 688.238624][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 688.261812][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 688.301983][T11659] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.309335][T11659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.349073][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 688.370448][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 688.400278][T11659] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.407567][T11659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.475594][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 688.556099][T11933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2778'. [ 688.569830][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 688.655791][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 688.685439][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 688.770757][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 688.810177][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 688.827444][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 688.847899][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 688.860039][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 688.869753][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 688.895153][T11847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 688.963881][T11847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 689.027711][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 689.061332][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 691.896167][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 691.922524][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 691.963080][T11847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.002127][T11980] netlink: 'syz.1.2794': attribute type 13 has an invalid length. [ 693.540288][T11980] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.549628][T11980] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.938827][T11980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.992901][T11980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.409249][T11980] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.418477][T11980] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.427678][T11980] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.436934][T11980] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.391755][T12046] netlink: 5144 bytes leftover after parsing attributes in process `syz.2.2807'. [ 700.838876][T12059] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 700.847162][T12059] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 700.855753][T12059] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 700.919343][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 700.941489][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 700.994451][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 701.036306][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 701.066755][T11847] device veth0_vlan entered promiscuous mode [ 701.097651][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 701.125964][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 701.178038][T11847] device veth1_vlan entered promiscuous mode [ 701.339906][T11847] device veth0_macvtap entered promiscuous mode [ 701.351903][T11847] device veth1_macvtap entered promiscuous mode [ 701.381859][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 701.406217][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 701.435237][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 701.460011][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 701.476055][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 701.492743][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.512075][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.522407][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.539233][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.652300][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.700298][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.749199][T11847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.776833][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 701.786107][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 701.794931][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.806961][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.827034][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.137209][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.805443][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.857862][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.907502][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.955494][T11847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.995997][T11847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.074105][T11847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.130774][T11847] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.185403][T11847] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.239908][T11847] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.272743][T12099] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2829'. [ 703.283775][T11847] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.045716][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 704.054667][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 704.377046][T10850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.405393][T10850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.413963][T12124] netlink: 'syz.4.2836': attribute type 21 has an invalid length. [ 704.423620][ T4489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.448273][T12124] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2836'. [ 704.458661][ T4489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.482195][T12124] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2836'. [ 704.505535][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 704.533680][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 704.545256][T12125] netlink: 'syz.4.2836': attribute type 21 has an invalid length. [ 704.554659][T12125] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2836'. [ 704.568053][T12125] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2836'. [ 704.893127][T12133] loop5: detected capacity change from 0 to 512 [ 705.228785][T12133] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 705.955795][T12133] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.254398][T11847] EXT4-fs (loop5): unmounting filesystem. [ 706.749814][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 706.762168][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 706.771648][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 706.788483][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 706.799422][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 708.221411][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 708.457524][ T4596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.574746][ T4596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.698571][ T4596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.828691][ T4596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.111460][T12160] chnl_net:caif_netlink_parms(): no params data found [ 709.837308][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 710.201620][T12160] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.254046][T12160] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.271422][T12160] device bridge_slave_0 entered promiscuous mode [ 710.279197][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 710.289735][T12160] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.298352][T12160] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.306938][T12160] device bridge_slave_1 entered promiscuous mode [ 710.335931][T12160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.348008][T12160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.554193][T12189] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 710.562737][T12189] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 710.571241][T12189] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 710.685460][T12160] team0: Port device team_slave_0 added [ 710.706832][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2854'. [ 710.735139][T12160] team0: Port device team_slave_1 added [ 710.934766][T12160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.947003][T12160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.044151][T12160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.196321][T12160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.208017][T12160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.390611][T12160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.636241][ T26] kauditd_printk_skb: 2472 callbacks suppressed [ 711.636261][ T26] audit: type=1326 audit(1775692658.548:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 711.704683][T12160] device hsr_slave_0 entered promiscuous mode [ 711.736017][T12160] device hsr_slave_1 entered promiscuous mode [ 711.753138][ T26] audit: type=1326 audit(1775692658.548:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 711.776541][T12160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 711.814792][T12160] Cannot create hsr debugfs directory [ 711.835385][ T26] audit: type=1326 audit(1775692658.578:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 711.916678][ T26] audit: type=1326 audit(1775692658.578:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 712.040424][ T26] audit: type=1326 audit(1775692658.588:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76db39e087 code=0x7ffc0000 [ 712.155425][ T26] audit: type=1326 audit(1775692658.588:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f76db35d04e code=0x7ffc0000 [ 712.235504][ T26] audit: type=1326 audit(1775692658.588:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f76db35d04e code=0x7ffc0000 [ 712.334779][ T26] audit: type=1326 audit(1775692658.588:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f76db35d04e code=0x7ffc0000 [ 712.365566][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 712.485967][ T26] audit: type=1326 audit(1775692658.588:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f76db35d04e code=0x7ffc0000 [ 712.594583][ T26] audit: type=1326 audit(1775692658.588:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.0.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76db39c819 code=0x7ffc0000 [ 713.306310][ T4596] device hsr_slave_0 left promiscuous mode [ 713.347971][ T4596] device hsr_slave_1 left promiscuous mode [ 713.363864][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.392991][ T4596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.424768][ T4596] device bridge_slave_1 left promiscuous mode [ 713.455081][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.514300][ T4596] device bridge_slave_0 left promiscuous mode [ 713.527535][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.591431][ T4596] device veth1_macvtap left promiscuous mode [ 713.615712][ T4596] device veth0_macvtap left promiscuous mode [ 713.623704][ T4596] device veth1_vlan left promiscuous mode [ 713.686042][ T4596] device veth0_vlan left promiscuous mode [ 714.435800][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 714.694693][ T4596] bond6 (unregistering): Released all slaves [ 714.966691][ T4596] bond5 (unregistering): Released all slaves [ 715.293186][ T4596] bond4 (unregistering): Released all slaves [ 715.543625][ T4596] bond3 (unregistering): Released all slaves [ 715.732587][ T4596] bond2 (unregistering): Released all slaves [ 715.757332][ T4596] bond1 (unregistering): (slave geneve2): Releasing active interface [ 715.944448][ T4596] bond1 (unregistering): Released all slaves [ 716.522413][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 716.637995][ T4596] team0 (unregistering): Port device team_slave_1 removed [ 716.717310][ T4596] team0 (unregistering): Port device team_slave_0 removed [ 716.774364][ T4596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.857262][ T4596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.240933][ T4596] bond0 (unregistering): Released all slaves [ 717.467913][T12244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2864'. [ 717.503833][T12247] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 717.512176][T12247] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 717.520626][T12247] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 717.840262][T12160] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 717.895968][T12160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 717.944676][T12160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 717.988040][T12262] netlink: 'syz.1.2870': attribute type 21 has an invalid length. [ 718.027858][T12262] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2870'. [ 718.037956][T12262] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2870'. [ 718.048793][T12265] netlink: 'syz.1.2870': attribute type 21 has an invalid length. [ 718.067997][T12265] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2870'. [ 718.094114][T12265] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2870'. [ 718.121028][T12160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 721.332700][T12279] capability: warning: `syz.5.2874' uses deprecated v2 capabilities in a way that may be insecure [ 721.526019][T12160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.612221][T12160] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.897726][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.003714][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 722.482513][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 722.505942][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 722.525856][T10707] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.533261][T10707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.565218][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 722.664655][T12285] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 722.673120][T12285] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 722.681616][T12285] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 722.703765][T12297] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 722.712152][T12297] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 722.720748][T12297] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 722.770633][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 722.814755][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 722.846930][T10707] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.854163][T10707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.925207][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 722.958471][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 722.991700][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 723.028874][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 723.101078][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 723.120696][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 723.141934][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 723.168442][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 723.198593][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 723.228387][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 723.260095][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 723.291540][T12160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 723.606962][T12325] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 723.615216][T12325] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 723.624201][T12325] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 725.250990][T12354] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 725.259541][T12354] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 725.268066][T12354] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 725.293289][T12356] netlink: 'syz.2.2894': attribute type 21 has an invalid length. [ 725.322884][T12356] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2894'. [ 725.345821][T12356] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2894'. [ 725.362386][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 725.377270][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 725.406096][T12360] netlink: 'syz.2.2894': attribute type 21 has an invalid length. [ 725.419033][T12360] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2894'. [ 725.431768][T12360] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2894'. [ 725.459477][T12160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.806502][T10967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 727.835253][T10967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 727.909529][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 727.930004][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 727.971292][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 728.006256][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 728.046282][T12160] device veth0_vlan entered promiscuous mode [ 728.088574][T12160] device veth1_vlan entered promiscuous mode [ 728.198152][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 728.238229][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 728.278692][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 728.319163][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 728.347179][T12160] device veth0_macvtap entered promiscuous mode [ 728.383773][T12160] device veth1_macvtap entered promiscuous mode [ 728.475030][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.515924][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.555357][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.595824][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.625492][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.662274][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.699293][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.729900][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.763330][T12160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.793561][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 728.833287][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 728.853746][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 728.876811][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 728.921753][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.945420][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.985516][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.026717][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.047185][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.088563][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.119341][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.160751][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.192787][T12160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.226893][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 729.238438][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 729.272748][T12160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.323954][T12160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.385374][T12160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.394175][T12160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.742865][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 729.774747][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.812400][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.871823][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 729.900360][T10967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.912386][T10967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.948507][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 730.424646][T12440] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 730.432971][T12440] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 730.441493][T12440] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 730.475410][ T4313] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 730.679134][ T4313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 730.692626][ T4313] usb 5-1: config 12 has an invalid interface number: 47 but max is 0 [ 730.719230][ T4313] usb 5-1: config 12 has no interface number 0 [ 730.731773][ T4313] usb 5-1: config 12 interface 47 altsetting 192 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 730.757489][ T4313] usb 5-1: config 12 interface 47 altsetting 192 has a duplicate endpoint with address 0xF, skipping [ 730.780019][ T4313] usb 5-1: config 12 interface 47 has no altsetting 0 [ 730.797318][ T4313] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1200, bcdDevice=43.83 [ 730.816864][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.833389][ T4313] usb 5-1: Product: syz [ 730.844313][ T4313] usb 5-1: Manufacturer: syz [ 730.854098][ T4313] usb 5-1: SerialNumber: syz [ 731.080744][ T4313] option 5-1:12.47: GSM modem (1-port) converter detected [ 731.107870][ T4313] usb 5-1: USB disconnect, device number 35 [ 731.127078][ T4313] option 5-1:12.47: device disconnected [ 731.265243][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 731.265262][ T26] audit: type=1326 audit(1775692678.168:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 731.430360][ T26] audit: type=1326 audit(1775692678.228:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 731.531915][ T26] audit: type=1326 audit(1775692678.228:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 731.638176][ T26] audit: type=1326 audit(1775692678.228:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 731.783833][ T26] audit: type=1326 audit(1775692678.228:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 731.922403][ T26] audit: type=1326 audit(1775692678.228:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 732.044132][ T26] audit: type=1326 audit(1775692678.228:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 732.143879][ T26] audit: type=1326 audit(1775692678.228:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 732.265426][ T22] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 732.283696][ T26] audit: type=1326 audit(1775692678.238:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 732.408515][ T26] audit: type=1326 audit(1775692678.238:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bed9c819 code=0x7ffc0000 [ 732.716010][T12468] loop5: detected capacity change from 0 to 512 [ 732.861421][T12468] EXT4-fs (loop5): 1 truncate cleaned up [ 732.868038][T12468] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 732.906604][T12468] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2917: bg 0: block 465: padding at end of block bitmap is not set [ 732.926327][T12468] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 732.939521][T12468] EXT4-fs (loop5): This should not happen!! Data will be lost [ 732.939521][T12468] [ 732.949388][T12468] EXT4-fs (loop5): Total free blocks count 0 [ 732.955566][T12468] EXT4-fs (loop5): Free/Dirty block details [ 732.961557][T12468] EXT4-fs (loop5): free_blocks=0 [ 732.967689][T12468] EXT4-fs (loop5): dirty_blocks=10 [ 732.972943][T12468] EXT4-fs (loop5): Block reservation details [ 732.979134][T12468] EXT4-fs (loop5): i_reserved_data_blocks=10 [ 733.694307][T12472] loop4: detected capacity change from 0 to 512 [ 733.865260][T12472] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 734.021837][T12472] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 734.156982][T12472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 734.170418][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 734.180697][T11854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 734.197903][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 734.206812][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 734.214514][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 734.222451][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 734.369301][T11847] EXT4-fs (loop5): unmounting filesystem. [ 734.462163][T12472] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.2924: Invalid block bitmap block 0 in block_group 0 [ 734.485488][T12472] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 734.500050][T12472] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.2924: attempt to clear invalid blocks 983261 len 1 [ 734.552545][T12472] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.2924: Invalid inode table block 0 in block_group 0 [ 734.569109][T12472] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 734.579124][T12472] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 734.589068][T12472] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.2924: Invalid inode table block 0 in block_group 0 [ 734.675448][T12472] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 734.703234][T12472] EXT4-fs error (device loop4): ext4_truncate:4314: inode #11: comm syz.4.2924: mark_inode_dirty error [ 734.738266][T12472] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 734.764798][T12472] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.2924: Invalid inode table block 0 in block_group 0 [ 734.797287][T12472] EXT4-fs (loop4): 1 truncate cleaned up [ 734.803031][T12472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 734.870894][T12472] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.2924: Invalid inode table block 0 in block_group 0 [ 734.922432][T12472] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 735.001786][ T4336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.025669][T12490] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 735.033952][T12490] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 735.042624][T12490] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 735.064168][T12160] EXT4-fs (loop4): unmounting filesystem. [ 736.284649][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 736.348467][ T4336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.087901][T12500] netlink: 'syz.4.2932': attribute type 21 has an invalid length. [ 737.096712][T12500] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2932'. [ 737.106690][T12500] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2932'. [ 737.119483][T12504] netlink: 'syz.4.2932': attribute type 21 has an invalid length. [ 737.128141][T12504] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2932'. [ 737.137999][T12504] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2932'. [ 737.455354][ T4336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.688000][T12475] chnl_net:caif_netlink_parms(): no params data found [ 737.769566][T12515] IPVS: length: 528 != 8 [ 737.796257][ T4336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.834925][T12515] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 737.843334][T12515] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 737.851888][T12515] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 738.027008][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.034497][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.043051][T12475] device bridge_slave_0 entered promiscuous mode [ 738.053939][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.061675][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.070786][T12475] device bridge_slave_1 entered promiscuous mode [ 738.101471][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.114066][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.159872][T12475] team0: Port device team_slave_0 added [ 738.180201][T12475] team0: Port device team_slave_1 added [ 738.225810][ T4271] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 738.262682][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.343429][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.370600][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 738.427737][ T4271] usb 6-1: unable to get BOS descriptor or descriptor too short [ 738.430006][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.439902][ T4271] usb 6-1: not running at top speed; connect to a high speed hub [ 738.466232][ T4271] usb 6-1: config 129 has an invalid interface number: 80 but max is 0 [ 738.484134][ T4271] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 738.492860][ T4271] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 738.503106][ T4271] usb 6-1: config 129 has no interface number 0 [ 738.509842][ T4271] usb 6-1: config 129 has no interface number 1 [ 738.517323][ T4271] usb 6-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 738.531248][ T4271] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 738.536826][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.542715][ T4271] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 738.562969][ T4271] usb 6-1: config 129 interface 80 has no altsetting 0 [ 738.570550][ T4271] usb 6-1: config 129 interface 5 has no altsetting 0 [ 738.608124][ T4271] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 738.617568][ T4271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.625969][ T4271] usb 6-1: Product: ш [ 738.659110][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.712475][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.734493][ T4336] tipc: Left network mode [ 739.475858][ T4271] usb 6-1: MIDIStreaming interface descriptor not found [ 739.702921][ T4271] usb 6-1: USB disconnect, device number 2 [ 740.096502][T12544] udevd[12544]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.117543][T12475] device hsr_slave_0 entered promiscuous mode [ 740.147255][T12475] device hsr_slave_1 entered promiscuous mode [ 740.191997][T12475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 740.216713][T12475] Cannot create hsr debugfs directory [ 740.428479][T12555] loop5: detected capacity change from 0 to 1024 [ 740.435636][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 740.455091][T12555] EXT4-fs: Ignoring removed bh option [ 740.565523][T12557] netlink: 'syz.1.2946': attribute type 21 has an invalid length. [ 740.576707][T12557] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2946'. [ 740.587432][T12555] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 740.688169][T12557] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2946'. [ 740.777774][T12558] netlink: 'syz.1.2946': attribute type 21 has an invalid length. [ 740.796879][T12558] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2946'. [ 740.840503][T12558] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2946'. [ 740.996516][T12569] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 741.736393][T11847] EXT4-fs (loop5): unmounting filesystem. [ 742.586606][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 742.639296][T12578] 9pnet_fd: Insufficient options for proto=fd [ 742.874482][ T4336] device erspan0 left promiscuous mode [ 743.181217][T12578] netlink: 212916 bytes leftover after parsing attributes in process `syz.5.2948'. [ 744.402515][ T4336] device gretap0 left promiscuous mode [ 744.490370][T12590] loop5: detected capacity change from 0 to 512 [ 744.567765][T12590] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2952: bg 0: block 5: invalid block bitmap [ 744.621577][T12590] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 744.707877][T12590] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2952: invalid indirect mapped block 3 (level 2) [ 744.772661][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2953'. [ 744.814929][T12590] EXT4-fs (loop5): 2 truncates cleaned up [ 744.822507][T12590] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 744.961684][T11847] EXT4-fs (loop5): unmounting filesystem. [ 746.078949][ T4336] device hsr_slave_0 left promiscuous mode [ 746.105783][ T4336] device hsr_slave_1 left promiscuous mode [ 746.136466][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.155860][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.176784][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.184292][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.246384][ T4336] batman_adv: batadv0: Interface deactivated: macsec1 [ 746.253389][ T4336] batman_adv: batadv0: Removing interface: macsec1 [ 746.289979][ T4336] device bridge_slave_1 left promiscuous mode [ 746.305630][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.336053][ T4336] device bridge_slave_0 left promiscuous mode [ 746.342365][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.485022][ T4336] device veth1_macvtap left promiscuous mode [ 746.505543][T12005] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 746.522000][ T4336] device veth0_macvtap left promiscuous mode [ 746.538734][ T4336] device veth1_vlan left promiscuous mode [ 746.554864][ T4336] device veth0_vlan left promiscuous mode [ 746.857230][T12005] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.874038][T12005] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 746.886776][T12005] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 747.109124][T12005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.117362][T12005] usb 5-1: Product: syz [ 747.121738][T12005] usb 5-1: Manufacturer: syz [ 747.126800][T12005] usb 5-1: SerialNumber: syz [ 747.240388][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.246960][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.350321][T12623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 747.682633][ T4336] bond3 (unregistering): Released all slaves [ 748.045958][T12623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 748.402006][T12005] cdc_ncm 5-1:1.0: bind() failure [ 748.491297][T12005] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 748.582703][T12005] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 748.671659][T12005] usbtest: probe of 5-1:1.1 failed with error -71 [ 748.800684][T12005] usb 5-1: USB disconnect, device number 37 [ 749.001546][ T4336] bond2 (unregistering): Released all slaves [ 749.436201][ T4336] bond1 (unregistering): Released all slaves [ 750.327322][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 750.442799][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 750.559693][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.630950][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.087409][T12656] loop5: detected capacity change from 0 to 131072 [ 751.137425][T12656] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 751.146166][T12656] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 751.185063][T12656] F2FS-fs (loop5): invalid crc value [ 751.264179][T12656] F2FS-fs (loop5): Found nat_bits in checkpoint [ 751.394213][ T4336] bond0 (unregistering): Released all slaves [ 751.400184][T12656] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 751.408230][T12656] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 751.519693][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2959'. [ 751.582460][T12658] netlink: 'syz.1.2973': attribute type 21 has an invalid length. [ 751.594260][T12658] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2973'. [ 751.613413][T12658] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2973'. [ 751.631407][T12659] netlink: 'syz.1.2973': attribute type 21 has an invalid length. [ 751.640365][T12659] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2973'. [ 751.652624][T12659] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2973'. [ 751.735012][T12475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 751.972758][T12475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 752.026118][T12475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 752.183239][T12475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 754.885547][T12680] 9pnet_fd: Insufficient options for proto=fd [ 754.947001][T12683] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.2979'. [ 755.147841][T12692] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2980'. [ 755.273045][T12475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.428924][T12701] device erspan0 entered promiscuous mode [ 756.367961][T11660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 756.419936][T11660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 756.617917][T11660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 756.716997][T12475] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.805996][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 756.815843][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 756.886370][T11919] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.893733][T11919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.992897][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 757.016525][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 757.563372][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 758.016189][T11919] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.023360][T11919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.087384][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 758.112879][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 758.180295][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 758.278539][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.346261][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 758.405933][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 758.451103][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 758.511917][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 758.546555][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 758.573275][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 758.592666][T11919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 758.626051][T12475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 758.853965][T12733] loop4: detected capacity change from 0 to 8192 [ 758.920509][T12733] loop4: p2 < > p4 < > [ 759.252413][T12709] loop5: detected capacity change from 0 to 40427 [ 759.301643][T12709] F2FS-fs (loop5): invalid crc value [ 759.356829][T12709] F2FS-fs (loop5): Found nat_bits in checkpoint [ 759.519585][T12544] udevd[12544]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 759.528835][T12425] udevd[12425]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 759.610706][T12709] F2FS-fs (loop5): Start checkpoint disabled! [ 759.853484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 759.866897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 759.904638][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.009480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 760.073474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 760.950962][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 760.965903][T12771] loop5: detected capacity change from 0 to 1024 [ 760.969530][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 760.992059][T12771] EXT4-fs: Ignoring removed bh option [ 761.020783][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 761.096592][T11707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 761.136775][T12771] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 761.206542][T12475] device veth0_vlan entered promiscuous mode [ 761.321635][T12475] device veth1_vlan entered promiscuous mode [ 761.554715][T12788] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 761.949252][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 761.999385][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 762.093082][T12475] device veth0_macvtap entered promiscuous mode [ 762.183228][T12475] device veth1_macvtap entered promiscuous mode [ 762.382066][T11847] EXT4-fs (loop5): unmounting filesystem. [ 762.391495][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.398512][T12786] syz.1.3003 (12786) used greatest stack depth: 18096 bytes left [ 762.402774][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.420262][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.462156][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.473904][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.502281][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.531022][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.770791][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.976023][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.208844][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.256611][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.296416][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.375702][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.424234][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.505107][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.547441][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.583494][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.632816][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.667267][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 763.679915][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 763.718139][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 763.747796][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 763.788979][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 763.833244][T12475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.882984][T12475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.917447][T12475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.937059][T12475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.343857][ T4489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.379546][ T4489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.407521][T12820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3013'. [ 765.437876][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 765.508324][T11671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.529358][T11671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.534620][T12824] loop5: detected capacity change from 0 to 4096 [ 765.574072][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 765.598338][T12824] EXT4-fs: inline encryption not supported [ 765.606406][T12809] loop4: detected capacity change from 0 to 40427 [ 765.669038][T12809] F2FS-fs (loop4): invalid crc value [ 765.709570][T12809] F2FS-fs (loop4): Found nat_bits in checkpoint [ 765.951444][T12809] F2FS-fs (loop4): Start checkpoint disabled! [ 768.124896][T12824] EXT4-fs (loop5): Test dummy encryption mode enabled [ 768.165982][T12824] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 768.174486][T12824] System zones: 0-5 [ 768.269180][T12824] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 768.517977][T12852] loop4: detected capacity change from 0 to 2048 [ 768.560760][T12852] EXT4-fs: quotafile must be on filesystem root [ 769.504320][T12856] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 769.518729][T12857] overlayfs: failed to resolve './bus': -2 [ 770.580367][T12859] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3014'. [ 770.716483][T11847] EXT4-fs (loop5): unmounting filesystem. [ 770.909860][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 770.933352][T11854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 770.942358][T11854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 770.950767][T11854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 770.960822][T11854] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 770.970586][T11854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 771.329714][T12880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3026'. [ 877.265229][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 877.271916][ C1] rcu: 1-...!: (10499 ticks this GP) idle=ea1c/1/0x4000000000000000 softirq=46568/46577 fqs=0 [ 877.283830][ C1] (t=10500 jiffies g=70301 q=225092 ncpus=2) [ 877.289931][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g70301 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 877.301158][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 877.311504][ C1] rcu: RCU grace-period kthread stack dump: [ 877.317409][ C1] task:rcu_preempt state:R running task stack:27024 pid:16 ppid:2 flags:0x00004000 [ 877.328229][ C1] Call Trace: [ 877.331612][ C1] [ 877.334671][ C1] __schedule+0x11d1/0x40e0 [ 877.339334][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 877.345275][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 877.351336][ C1] ? __sched_text_start+0x8/0x8 [ 877.356500][ C1] ? __mod_timer+0x91e/0xd00 [ 877.361138][ C1] schedule+0xb9/0x180 [ 877.365251][ C1] schedule_timeout+0x184/0x2d0 [ 877.370130][ C1] ? console_conditional_schedule+0x40/0x40 [ 877.376056][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 877.382243][ C1] ? update_process_times+0x1b0/0x1b0 [ 877.387700][ C1] ? prepare_to_swait_event+0x335/0x350 [ 877.393296][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 877.398191][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 877.403156][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 877.409259][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 877.414143][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 877.419026][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 877.424249][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 877.429482][ C1] rcu_gp_kthread+0x99/0x3b0 [ 877.434191][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 877.439334][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 877.445261][ C1] ? __kthread_parkme+0x162/0x1c0 [ 877.450334][ C1] kthread+0x29d/0x330 [ 877.454426][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 877.459657][ C1] ? kthread_blkcg+0xd0/0xd0 [ 877.464277][ C1] ret_from_fork+0x1f/0x30 [ 877.469377][ C1] [ 877.472456][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 877.479188][ C1] Sending NMI from CPU 1 to CPUs 0: [ 877.484561][ C0] NMI backtrace for cpu 0 [ 877.484571][ C0] CPU: 0 PID: 12889 Comm: syz.0.3028 Not tainted syzkaller #0 [ 877.484587][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 877.484595][ C0] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 877.484619][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 af 9c 01 03 66 2e 0f 1f 84 00 00 00 00 00 [ 877.484632][ C0] RSP: 0018:ffffc90000007e38 EFLAGS: 00000046 [ 877.484647][ C0] RAX: 0000000000009fdf RBX: 0000000000009fdf RCX: 0000000000000838 [ 877.484658][ C0] RDX: 0000000000000000 RSI: 0000000000009fdf RDI: 0000000000000838 [ 877.484668][ C0] RBP: 0000000000000000 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 877.484679][ C0] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: dffffc0000000000 [ 877.484689][ C0] R13: 0000000010000508 R14: ffffffff8c651b40 R15: dffffc0000000000 [ 877.484700][ C0] FS: 00007f364e6ea6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 877.484714][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 877.484725][ C0] CR2: 000000110c3bfec0 CR3: 000000002ffee000 CR4: 00000000003506f0 [ 877.484740][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 877.484750][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 877.484759][ C0] Call Trace: [ 877.484767][ C0] [ 877.484772][ C0] lapic_next_event+0x5b/0x70 [ 877.484794][ C0] clockevents_program_event+0x1bc/0x310 [ 877.484816][ C0] hrtimer_interrupt+0x59d/0x9c0 [ 877.484845][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 877.484866][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 877.484883][ C0] [ 877.484888][ C0] [ 877.484893][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 877.484920][ C0] RIP: 0010:arch_do_signal_or_restart+0xdb9/0x1350 [ 877.484939][ C0] Code: ff df 48 8b 8c 24 b0 00 00 00 80 3c 01 00 4c 8b 7c 24 18 74 08 4c 89 ff e8 54 56 a6 00 49 8b 07 49 89 86 30 01 00 00 0f 01 ca 84 24 48 01 00 00 04 49 bc 00 00 00 00 00 fc ff df 74 25 49 8d [ 877.484952][ C0] RSP: 0018:ffffc900044a7ca0 EFLAGS: 00000246 [ 877.484964][ C0] RAX: 0000000000000000 RBX: 1ffff92000894fac RCX: 1ffff11005564894 [ 877.484974][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffc900044a7fd8 [ 877.484984][ C0] RBP: ffffc900044a7ec0 R08: 0000000000000000 R09: 1ffff92000894f71 [ 877.484994][ C0] R10: dffffc0000000000 R11: fffff52000894f72 R12: ffff88802ab25428 [ 877.485004][ C0] R13: ffffc900044a7ff8 R14: 00007f364e6e9a78 R15: ffff88802ab244a0 [ 877.485031][ C0] ? get_sigframe_size+0x10/0x10 [ 877.485060][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 877.485083][ C0] exit_to_user_mode_loop+0x70/0x110 [ 877.485102][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 877.485123][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 877.485138][ C0] do_syscall_64+0x58/0xa0 [ 877.485157][ C0] ? clear_bhb_loop+0x60/0xb0 [ 877.485174][ C0] ? clear_bhb_loop+0x60/0xb0 [ 877.485192][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 877.485214][ C0] RIP: 0033:0x7f364d79c819 [ 877.485227][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.485239][ C0] RSP: 002b:00007f364e6ea028 EFLAGS: 00000246 [ 877.485250][ C0] RAX: 0000000000000000 RBX: 00007f364da16090 RCX: 00007f364d79c819 [ 877.485260][ C0] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 877.485269][ C0] RBP: 00007f364d832c91 R08: 0000000000000000 R09: 0000000000000000 [ 877.485279][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.485288][ C0] R13: 00007f364da16128 R14: 00007f364da16090 R15: 00007ffd75a84c88 [ 877.485306][ C0] [ 877.485558][ C1] CPU: 1 PID: 12878 Comm: syz.5.3024 Not tainted syzkaller #0 [ 877.868117][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 877.878169][ C1] RIP: 0010:rcu_is_watching+0xc/0xa0 [ 877.883471][ C1] Code: 40 b3 8c 4c 89 f6 e8 83 9e cc 02 e9 44 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 53 65 ff 05 6c ff 95 7e df 69 c1 08 89 c3 83 f8 08 73 60 49 bf 00 00 00 00 00 fc ff df [ 877.903506][ C1] RSP: 0018:ffffc90003c27878 EFLAGS: 00000283 [ 877.909725][ C1] RAX: 0000000000000001 RBX: ffff88802e81d000 RCX: 0000000000000000 [ 877.917693][ C1] RDX: 0000000000000050 RSI: 0000000000000000 RDI: ffff88802e81d050 [ 877.925713][ C1] RBP: 0000000000000dc0 R08: ffff88823b400000 R09: ffff88802e81d000 [ 877.933914][ C1] R10: 000000000fa6d797 R11: fffffbfff1c3fbde R12: ffff888140009140 [ 877.941894][ C1] R13: 0000000000000050 R14: ffff888140009140 R15: ffff88802e81d000 [ 877.949949][ C1] FS: 00007f5dda2896c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 877.958875][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 877.965452][ C1] CR2: 0000000000000000 CR3: 000000005f522000 CR4: 00000000003506e0 [ 877.973422][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 877.981386][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 877.989353][ C1] Call Trace: [ 877.992718][ C1] [ 877.995646][ C1] kmem_cache_alloc+0x151/0x2f0 [ 878.000522][ C1] ? security_file_alloc+0x30/0x110 [ 878.005820][ C1] security_file_alloc+0x30/0x110 [ 878.010845][ C1] __alloc_file+0xc2/0x230 [ 878.015257][ C1] alloc_empty_file+0x90/0x180 [ 878.020144][ C1] path_openat+0x10f/0x2ee0 [ 878.024693][ C1] ? verify_lock_unused+0x140/0x140 [ 878.030073][ C1] ? kasan_set_track+0x60/0x70 [ 878.034840][ C1] ? verify_lock_unused+0x140/0x140 [ 878.040270][ C1] ? do_sys_openat2+0xdd/0x4b0 [ 878.045063][ C1] ? __x64_sys_openat+0x135/0x160 [ 878.050184][ C1] ? do_syscall_64+0x4c/0xa0 [ 878.054789][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.060991][ C1] ? do_filp_open+0x430/0x430 [ 878.065700][ C1] do_filp_open+0x1f1/0x430 [ 878.070301][ C1] ? vfs_tmpfile+0x480/0x480 [ 878.074910][ C1] ? _raw_spin_unlock+0x24/0x40 [ 878.079756][ C1] ? alloc_fd+0x58f/0x630 [ 878.084106][ C1] do_sys_openat2+0x150/0x4b0 [ 878.088783][ C1] ? do_sys_open+0xe0/0xe0 [ 878.093246][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 878.099314][ C1] ? lock_chain_count+0x20/0x20 [ 878.104176][ C1] __x64_sys_openat+0x135/0x160 [ 878.109134][ C1] do_syscall_64+0x4c/0xa0 [ 878.113747][ C1] ? clear_bhb_loop+0x60/0xb0 [ 878.118436][ C1] ? clear_bhb_loop+0x60/0xb0 [ 878.123121][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.129015][ C1] RIP: 0033:0x7f5dd939c819 [ 878.133439][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.153149][ C1] RSP: 002b:00007f5dda289028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 878.161702][ C1] RAX: ffffffffffffffda RBX: 00007f5dd9615fa0 RCX: 00007f5dd939c819 [ 878.169700][ C1] RDX: 0000000000101240 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 878.177691][ C1] RBP: 00007f5dd9432c91 R08: 0000000000000000 R09: 0000000000000000 [ 878.185776][ C1] R10: 000000000000010a R11: 0000000000000246 R12: 0000000000000000 [ 878.193769][ C1] R13: 00007f5dd9616038 R14: 00007f5dd9615fa0 R15: 00007ffd81102a38 [ 878.201839][ C1] [ 878.325729][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.332204][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.339003][ T4286] Bluetooth: hci0: command 0x0409 tx timeout SYZFAIL: failed to send rpc fd=3 want=3088 sent=0 n=-1 (errno 32: Broken pipe) [ 880.275351][T11854] Bluetooth: hci1: command 0x0406 tx timeout [ 880.356103][T11854] Bluetooth: hci3: command 0x0406 tx timeout [ 880.362298][T11854] Bluetooth: hci0: command 0x041b tx timeout [ 883.877653][ T4433] device hsr_slave_0 left promiscuous mode [ 883.884462][ T4433] device hsr_slave_1 left promiscuous mode [ 883.900092][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.912201][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.924037][ T4433] device bridge_slave_1 left promiscuous mode [ 883.931274][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.941134][ T4433] device bridge_slave_0 left promiscuous mode [ 883.949579][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.129203][ T4433] bond7 (unregistering): Released all slaves [ 884.282514][ T4433] bond6 (unregistering): Released all slaves [ 884.440378][ T4433] bond5 (unregistering): Released all slaves [ 884.589303][ T4433] bond4 (unregistering): Released all slaves [ 884.751176][ T4433] bond3 (unregistering): Released all slaves [ 884.909645][ T4433] bond2 (unregistering): Released all slaves [ 884.930127][ T4433] bond1 (unregistering): (slave geneve2): Releasing active interface [ 885.084014][ T4433] bond1 (unregistering): Released all slaves [ 885.533754][ T4433] team0 (unregistering): Port device team_slave_1 removed [ 885.590962][ T4433] team0 (unregistering): Port device team_slave_0 removed [ 885.641171][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.691161][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.105708][ T4433] bond0 (unregistering): Released all slaves [ 886.836149][ T4433] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.935808][ T4433] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.018104][ T4433] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.097123][ T4433] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0