last executing test programs: 10m28.507809153s ago: executing program 32 (id=53): r0 = openat(0xffffffffffffff9c, &(0x7f000001fc40)='./file1\x00', 0x8541, 0x100) fallocate(r0, 0x27, 0x4002, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f000001fc80)='./proc\x00', 0x1ff) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "f8b55ab0264b58b9dd78adda389b83c4"}, 0x11, 0x1) r1 = eventfd2(0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e00000000180002800c00020012000055fb35d429"], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f000001fe40)={r0, 0x20, &(0x7f000001fe00)={&(0x7f000001fcc0)=""/185, 0xb9, 0x0, &(0x7f000001fd80)=""/106, 0x6a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) write$P9_RREAD(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xd0) io_setup(0x1ff, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000140)="f389a71e60dddfa2", 0x8, 0x6, 0x0, 0x0, r1}]) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x2c, &(0x7f0000000040)=0x1, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x2, &(0x7f0000000580)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000000)=0x401, 0x4) 8m33.091770263s ago: executing program 2 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400e10000ed14000000ec03010000000004000000400e00000a00"/40], 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYRES64=r0, @ANYRES8=r1, @ANYRES8=r0, @ANYRES8=r2, @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x2000c005) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000000000106d0415c200000000000109022400010000a00209040001020300020009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000940), 0xa, 0x62080) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000400)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0xe}, 0x1, 0x800, 0x101, {0x0, 0x10}}) 8m25.069300177s ago: executing program 2 (id=341): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000d00)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=@filename='mtd0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000480)='./file0\x00') clock_nanosleep(0x2, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0xfffffee2) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x86c0, 0x101) fanotify_init(0xf00, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7/file0\x00', 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00') 8m24.34297235s ago: executing program 2 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) write$dsp(r0, &(0x7f00000000c0)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f00000002c0)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x204) r7 = socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r8 = socket$inet(0x2, 0x1, 0x6) connect(r8, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 8m22.183423987s ago: executing program 2 (id=349): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x200000, &(0x7f00000006c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x580, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000fc0)='./file0/file0\x00', &(0x7f0000001000), &(0x7f0000001040)=ANY=[], 0x835, 0x0) creat(&(0x7f0000001140)='./file0/file0\x00', 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f00000011c0)='2', 0xfdef, 0xc00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20, 0xc001}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x22, &(0x7f0000000500), 0x4) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/78, 0x4e}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'lo\x00', 0x0}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000600)=0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004dc0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x13ff}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) connect$inet(r1, &(0x7f0000004f00)={0x2, 0x4e20, @loopback}, 0x10) 8m20.3543558s ago: executing program 2 (id=354): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[], 0x0}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) fsopen(&(0x7f0000000680)='ext3\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_REUSE_PORT(r0, 0x84, 0x24, &(0x7f0000000180), 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0x1) 8m19.165014539s ago: executing program 2 (id=358): r0 = socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000080035000500"], 0x38}}, 0x4000000) sendto$inet(r4, &(0x7f00000007c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000800)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESOCT=r7, @ANYRESHEX=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xd, &(0x7f0000000980)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000a00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bind$can_raw(0xffffffffffffffff, &(0x7f0000000a80), 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 8m18.933232153s ago: executing program 33 (id=358): r0 = socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000080035000500"], 0x38}}, 0x4000000) sendto$inet(r4, &(0x7f00000007c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000800)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESOCT=r7, @ANYRESHEX=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xd, &(0x7f0000000980)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000a00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bind$can_raw(0xffffffffffffffff, &(0x7f0000000a80), 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 7m5.997328166s ago: executing program 0 (id=488): syz_usb_connect(0x0, 0x51, 0x0, 0x0) fsopen(&(0x7f0000000340)='cgroup2\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000800)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000840)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000880), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_ext={0x1a, 0xf, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001500)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001540)={0x1, &(0x7f0000001580)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x2000000000000) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f00000015c0), 0x0) 7m3.587330197s ago: executing program 0 (id=493): pipe2(0x0, 0x4800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r4, &(0x7f0000000780)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1df) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x2, 0x0) write$sysctl(r5, &(0x7f0000000280)='0', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 7m2.391342647s ago: executing program 0 (id=495): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x25, 0x559a, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000005c80)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000005cc0)='./file1\x00', 0x145142, 0x0) r2 = syz_open_dev$loop(&(0x7f0000005d00), 0x0, 0x22400) sendfile(r1, r2, 0x0, 0x80000002) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000005d40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005dc0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000040) syz_mount_image$ext4(&(0x7f0000005e80)='ext4\x00', &(0x7f0000005ec0)='./mnt\x00', 0x2200054, &(0x7f0000005f00)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000005f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000006180)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000061c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r3, 0x10, 0x2, 0x7000000) mount$overlay(0x0, &(0x7f0000006240)='./file0\x00', &(0x7f0000006280), 0x0, &(0x7f00000062c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {@init_itable}, {@sysvgroups}, {@resuid}, {@init_itable}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000084c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000008a40)='./file1\x00', 0x88142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000008a80)='./file1\x00', 0x101042, 0x65) pwrite64(r5, &(0x7f0000000200)="38975f682412b2f0855d6c996fe7131432", 0x11, 0x84fed4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000008b00)='./file1\x00', 0x48042, 0x18c) fallocate(r6, 0x10, 0x6, 0x105ff) r7 = syz_open_dev$loop(&(0x7f0000006300), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000006340)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x12, 0x3, "d2273078cf6175866187bbf62372bbb65d940f27bc28a5a442ff5a8d374a182008a1fd92701ce53ee6aa5d922917aeecbfb3db24b09909c24cc157a3780cf5d5", "09b49809fc32a5fc7be9f88c6b84907998105e3111daa2bd51b0d0c3bc93fb2d0f0244a8c7a99a75e76613c745458f5c1212e72d93b272fed81941f04edd0059", "a960f08042e09119b6f87de59f19912c538884e7a95c3d50e4be66184e295eb1", [0x4, 0x6c]}) ioctl$BLKFLSBUF(r7, 0x1261, 0x0) fallocate(r0, 0x0, 0x0, 0xffff) 6m53.437400645s ago: executing program 0 (id=515): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x200000, &(0x7f00000006c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x580, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) creat(0x0, 0x20) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r4, 0x0, 0x0, 0xc00) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000600)=0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004dc0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x13ff}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) connect$inet(r1, &(0x7f0000004f00)={0x2, 0x4e20, @loopback}, 0x10) 6m52.375399152s ago: executing program 0 (id=518): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 6m51.916829248s ago: executing program 0 (id=520): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 6m51.750189824s ago: executing program 34 (id=520): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 3m54.035477854s ago: executing program 7 (id=965): r0 = openat$sysctl(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc96, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000740)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc98, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r1, &(0x7f00000009c0)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='ABCD'}}}, 0x20) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) 3m53.359580701s ago: executing program 7 (id=969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) 3m52.311156226s ago: executing program 7 (id=970): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000880)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000008c0)={0x2, 0x4e20}, 0x10) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7a4b}], 0x2, 0x40018022, 0x0) shutdown(r2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f000000040000000400000012000000", @ANYRES32=0x0], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)={0x10, 0x31, 0x2, 0x70bd26, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20, 0x40000c0}, 0x8800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000740)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xf, 0x1e}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}, @qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xee}]}}]}, 0x60}}, 0x4000010) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x6000, &(0x7f0000000640)=[{&(0x7f0000000680)='U', 0xa00120}], 0x1}, 0x3) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="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", 0x14e}, {&(0x7f0000000100)="26596570b16c4a05f9676a3cca2ca59056420a636552f40c2f2042cd6bc80ce95ced06abdd4b9d5e3ae642864dac13da41f98d35914cb761a41bb7500f557bc4256c52ad88d2ef3b67964291ba618219b5acf90270468de872e56587919c0f644eab63a4af47fb5ec2665d6002006403782a5975c29b2fe78251282a2db4fc5faddbfdf78d6706a0a7d2488c3715ca2a7e0400617f45053f6f2db64a6ae7fa4fc3f8cbe6", 0xa4}], 0x2}, 0x4015) 3m51.96986319s ago: executing program 7 (id=975): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x200000, &(0x7f00000006c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x580, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) creat(0x0, 0x20) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r4, 0x0, 0x0, 0xc00) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'lo\x00', 0x0}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004dc0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) connect$inet(r1, &(0x7f0000004f00)={0x2, 0x4e20, @loopback}, 0x10) 3m51.355234722s ago: executing program 7 (id=977): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(0xffffffffffffffff) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000280)='\x00'/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000380)={0x0, r3}) 3m47.965067072s ago: executing program 7 (id=983): r0 = socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000080035000500"], 0x38}}, 0x4000000) sendto$inet(r4, &(0x7f00000007c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000800)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r8, @ANYRESOCT=r7, @ANYRESHEX=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xd, &(0x7f0000000980)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000a00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bind$can_raw(r8, &(0x7f0000000a80), 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000700)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x4000, {[@sack={0x5, 0x2}, @mptcp]}}}}}}}, 0x0) 3m47.941385874s ago: executing program 35 (id=983): r0 = socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000080035000500"], 0x38}}, 0x4000000) sendto$inet(r4, &(0x7f00000007c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000800)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r8, @ANYRESOCT=r7, @ANYRESHEX=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xd, &(0x7f0000000980)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000a00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bind$can_raw(r8, &(0x7f0000000a80), 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000700)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x4000, {[@sack={0x5, 0x2}, @mptcp]}}}}}}}, 0x0) 3m1.087418853s ago: executing program 8 (id=1095): r0 = socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0a0034000202020202020000080035000500"], 0x38}}, 0x4000000) sendto$inet(r4, &(0x7f00000007c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000800)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r7, @ANYRESOCT=r6, @ANYRESHEX=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xd, &(0x7f0000000980)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000a00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bind$can_raw(r7, &(0x7f0000000a80), 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000700)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x4000, {[@sack={0x5, 0x2}, @mptcp]}}}}}}}, 0x0) 3m1.078082074s ago: executing program 3 (id=1096): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x25, 0x559a, &(0x7f00000006c0)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000005c80)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000005cc0)='./file1\x00', 0x145142, 0x0) r2 = syz_open_dev$loop(&(0x7f0000005d00), 0x0, 0x22400) sendfile(r1, r2, 0x0, 0x80000002) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000005d40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005dc0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000040) syz_mount_image$ext4(&(0x7f0000005e80)='ext4\x00', &(0x7f0000005ec0)='./mnt\x00', 0x2200054, &(0x7f0000005f00)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000005f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000006180)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000061c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000006200)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x10, 0x2, 0x7000000) mount$overlay(0x0, &(0x7f0000006240)='./file0\x00', &(0x7f0000006280), 0x0, &(0x7f00000062c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {@init_itable}, {@sysvgroups}, {@resuid}, {@init_itable}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000084c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000008a40)='./file1\x00', 0x88142, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) pwrite64(r5, &(0x7f0000000200)="38975f682412b2f0855d6c996fe7131432", 0x11, 0x84fed4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000008b00)='./file1\x00', 0x48042, 0x18c) fallocate(r6, 0x10, 0x6, 0x105ff) r7 = syz_open_dev$loop(&(0x7f0000006300), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000006340)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x12, 0x3, "d2273078cf6175866187bbf62372bbb65d940f27bc28a5a442ff5a8d374a182008a1fd92701ce53ee6aa5d922917aeecbfb3db24b09909c24cc157a3780cf5d5", "09b49809fc32a5fc7be9f88c6b84907998105e3111daa2bd51b0d0c3bc93fb2d0f0244a8c7a99a75e76613c745458f5c1212e72d93b272fed81941f04edd0059", "a960f08042e09119b6f87de59f19912c538884e7a95c3d50e4be66184e295eb1", [0x4, 0x6c]}) ioctl$BLKFLSBUF(r7, 0x1261, 0x0) fallocate(r0, 0x0, 0x0, 0xffff) 3m0.241698208s ago: executing program 8 (id=1101): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 2m58.941942618s ago: executing program 8 (id=1104): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000280)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000600)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000640)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000001680)={&(0x7f00000016c0)=[0x80000000, 0x4, 0xfffffae7, 0x8, 0xb49b, 0xb9, 0x8, 0x7, 0x8, 0xc, 0x5, 0x7fffffff, 0x8000, 0x40, 0xc, 0x3, 0x2, 0x7fffffff, 0x81, 0x800, 0x2, 0xffffffff, 0xcbff, 0xd, 0x0, 0x8, 0x1, 0x5, 0x1, 0x5, 0x0, 0x1, 0x200, 0xa, 0x100, 0xfffffff8, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x9, 0xfffffff8, 0xde, 0x4, 0x7ff, 0x4, 0x101, 0x3c8eb757, 0x5, 0x0, 0x9, 0x1, 0x8, 0xd, 0xf, 0x1, 0x0, 0x2, 0xb3, 0x9, 0x5, 0x2, 0xfffffffe, 0x2, 0x3481, 0xf, 0x3ca, 0x40, 0x7fffffff, 0x1, 0x6, 0x5, 0x645c, 0xe367, 0xff, 0x1, 0x6, 0xb5, 0x7, 0xa, 0x6, 0x2, 0xba, 0x9, 0x80000001, 0x5, 0x8, 0x8, 0x0, 0x7, 0x0, 0x7fffffff, 0x1, 0x32b5c1bb, 0x1b5, 0x2, 0xa8, 0x2, 0x5, 0x163, 0x6, 0x3a, 0x7ff, 0xfffffff9, 0x9, 0x24, 0x9, 0x4, 0x3, 0xa5c, 0xfffffffb, 0x101, 0xd29, 0x5, 0x8, 0x401, 0x9, 0xfc, 0x9, 0x0, 0xffff, 0x120, 0x8, 0x7, 0x0, 0x3e0ccb75, 0x4c, 0x6, 0x1, 0xe, 0x7f, 0x0, 0xfffffff7, 0x1, 0x0, 0x115, 0x9, 0x41aeb496, 0xfffffff7, 0x6, 0x80000000, 0x2, 0x400, 0xfffffff0, 0x6, 0x485, 0x4, 0xd4e, 0x7, 0x0, 0x1, 0x1, 0x5, 0x6, 0x7fffffff, 0xc00, 0x4, 0x4, 0x6d, 0x5, 0x92, 0x7, 0x9, 0xfffff800, 0x9, 0x7, 0x8, 0x8a7, 0x2, 0x94, 0x6, 0x200, 0x4, 0x7, 0xe4, 0x80, 0x5, 0x0, 0x4, 0x8, 0x81, 0x7bcc, 0x0, 0x6, 0x1000, 0xd, 0x0, 0x0, 0x2, 0x5, 0x3, 0x8, 0x5, 0x100, 0x4, 0x58, 0x2, 0xe956, 0x5, 0x9, 0x0, 0xfdae, 0x8, 0x0, 0x7, 0x8001, 0x2, 0xa, 0x0, 0x8, 0x2, 0x7fff, 0xff, 0x8000, 0x10, 0x49, 0x0, 0x1, 0x55, 0x4, 0xc, 0x2, 0x8, 0xff1, 0xffffffc6, 0x1, 0x7, 0x3, 0x5, 0x7, 0x80000001, 0x10000, 0x83db, 0x2, 0xd, 0x1ff, 0x6, 0x0, 0x0, 0xb2, 0x61, 0x7, 0x80000001, 0xb9b, 0x4, 0x35, 0x8, 0x5, 0x7, 0x5, 0x0, 0x7, 0x9, 0x0, 0x4, 0x3, 0xffff, 0x5, 0xbfda, 0x3, 0x5, 0x0, 0x10001, 0x608, 0x0, 0x9, 0x6, 0x1, 0x63d, 0x6, 0xd92583, 0xa9, 0x2, 0x5, 0x6, 0x2, 0xffffffff, 0x9, 0xfffffc71, 0xfffffffe, 0xb, 0x4, 0x5, 0x9, 0x80, 0xfff, 0x2, 0x4, 0x2, 0x81, 0x3, 0x8, 0x682, 0x3, 0x5, 0x9f70, 0x0, 0x8, 0x0, 0x3, 0x3, 0x0, 0x8, 0x0, 0x7f, 0x9ecd, 0x5, 0xb3d, 0x3, 0x9, 0x5, 0xeea1, 0x0, 0xfffffffe, 0x9, 0x6, 0x0, 0x5, 0x101, 0xf5, 0x1, 0xfffffff0, 0xd121, 0x6, 0x4, 0xffffff00, 0x80000000, 0x5, 0xd, 0xf3c, 0x7fffffff, 0x1ff, 0x7, 0x94, 0x8001, 0x0, 0x2, 0x9, 0x6, 0x6, 0x8001, 0x6, 0x0, 0x8000, 0x6, 0x9, 0x4, 0x9d, 0x9, 0x80000001, 0x7, 0x7f8, 0xcb9c, 0x1, 0x6, 0xe, 0x400, 0x1, 0x6, 0x5, 0x51e, 0x7, 0xfffffffd, 0x7, 0x97f1, 0xb, 0x80000001, 0xaa, 0xffff81f5, 0x80, 0x8, 0x9, 0x8, 0x1, 0xffffffe3, 0x5086, 0x4, 0x8, 0x2, 0x8, 0x54d8, 0x1000, 0x7, 0x5848, 0x83, 0x2, 0x10001, 0x5, 0x65b97b8b, 0x1, 0x2, 0x400, 0x3, 0x5, 0x0, 0xa65, 0x280, 0x0, 0xf74, 0x3, 0x2, 0x3, 0x7, 0x400, 0x9, 0x2, 0xfffff122, 0x7fffffff, 0x8, 0x1, 0x1, 0x2, 0x1, 0x9, 0x8000, 0x7274, 0x8001, 0xffff46da, 0x469, 0x9, 0x6, 0x9, 0x3, 0xf, 0x0, 0x0, 0x8, 0x6, 0x3, 0x1, 0xfffffff8, 0x7df2, 0xe939, 0x7, 0x10, 0x6, 0x2, 0x1, 0x8, 0x1145, 0x7, 0xa, 0xe72, 0x2, 0x1, 0x40000, 0x9, 0xfffffffc, 0x5, 0x293400, 0x6c, 0x56, 0x9, 0xfffffff7, 0x80, 0x0, 0x9f, 0x2, 0x3, 0xfff, 0x0, 0x2, 0x9, 0x9cd5, 0x8, 0x10001, 0x6, 0x6, 0xc02f, 0xc, 0xfffffffa, 0x0, 0x2, 0xa, 0x9, 0x6, 0x6, 0xffffffff, 0x3, 0x7, 0x439b, 0x0, 0x8, 0x8, 0x1, 0x15e, 0x9, 0xfffffffa, 0x800, 0x3, 0xe, 0xfffffe01, 0xfffffffb, 0xed2, 0x800, 0xb, 0x2, 0x6, 0x2, 0xa82c, 0x100, 0x5, 0x7ff, 0x8, 0x9, 0x7f, 0xd9, 0x7d, 0x8, 0x2, 0x1, 0x2, 0x9, 0x6, 0x9, 0x8efe, 0x8, 0x5, 0xc9, 0x2, 0x81, 0x6, 0x5, 0x4, 0x0, 0x9, 0x9, 0xfffffffd, 0x8, 0x34, 0x1, 0xe, 0x6, 0x10, 0xe62, 0x8, 0x8, 0x4, 0x0, 0x9, 0x830, 0x3, 0x0, 0x1b3, 0x0, 0x7, 0x8, 0x7, 0x7, 0x80, 0x8, 0x0, 0x80000000, 0xfffffff8, 0x5, 0x6, 0xfffffff8, 0x4a, 0x3a2, 0x5, 0x400, 0x612, 0x401, 0x200, 0x7, 0x8000, 0x9, 0x9, 0x800, 0xfff, 0x0, 0x8, 0x10001, 0x1, 0x10000, 0x1, 0xb10, 0x43, 0x2, 0x2, 0x1, 0x1, 0x7, 0x6, 0x40, 0x3, 0x800, 0x101, 0x0, 0x6d3a, 0x3, 0xffffffff, 0x1, 0xa59, 0x5, 0x3e6, 0x90000000, 0x101, 0x3, 0xbbd3, 0x4, 0x6, 0xfe1, 0x2, 0x8003, 0xe00, 0xfffe0000, 0x5, 0xfffffffb, 0x8001, 0x10001, 0xfa, 0xb, 0x6, 0xe4, 0x6, 0x2, 0x8, 0x1, 0x1ff, 0x84e, 0x30, 0x2, 0x7, 0x0, 0x7fff, 0x1, 0xfffffffa, 0x300, 0x12c, 0x4, 0xc, 0x6, 0x9, 0x7, 0x40, 0x0, 0xcc, 0x4e6, 0x80000000, 0x2, 0xc202, 0x4cfda994, 0x2, 0x5, 0xfffffbff, 0x9, 0xb, 0x200, 0xd3, 0x0, 0x2, 0x3, 0x8, 0x1, 0x7, 0x5, 0xffffffff, 0x6, 0x8, 0x80, 0x7, 0x1, 0x0, 0x874c, 0x7f, 0x1, 0x4, 0x5, 0x9, 0x26d2, 0x8, 0x5, 0x0, 0x10, 0x40002, 0x8000, 0x101, 0x22, 0x0, 0x8, 0x5, 0xf75, 0x2, 0xce, 0x0, 0x5, 0x1d, 0x32d, 0x6, 0x8, 0x1951759c, 0x7, 0x4, 0x101, 0x2, 0x81, 0x9, 0xff, 0x8, 0x1ff, 0xaad3, 0x3, 0xc7, 0x2, 0x4, 0x296, 0x8000, 0x1, 0xfffffffe, 0xc9, 0x1000000, 0x9, 0x1, 0x3, 0x5, 0x4, 0x3, 0x10001, 0x3, 0x8, 0x3, 0x9, 0x3, 0x7, 0x9, 0x2, 0x25, 0x4, 0x6, 0xe, 0x6, 0x200, 0x1, 0x9, 0x6, 0x800, 0x5, 0xfffffffc, 0xfffffffa, 0xe6ba, 0x9, 0x8, 0x10000, 0x222eee1a, 0x4, 0x400000, 0x1000, 0xb9a3, 0x7, 0x1, 0xb0, 0x0, 0x0, 0x9, 0xc, 0x500, 0xf1b, 0x0, 0x8, 0x8, 0x6, 0x9, 0x8fd, 0x1, 0x0, 0x8c, 0xd25, 0xfffff001, 0x80000000, 0x5, 0x7ff, 0x4, 0x4, 0x6, 0x2, 0x1, 0x7, 0x9, 0x1, 0x8, 0x2, 0x6, 0x8, 0x4, 0x1, 0xfffffffe, 0x1, 0x3, 0x800, 0x5, 0x7, 0xff, 0x7, 0xc5aa, 0xc, 0x3, 0x7ff, 0xfffffc01, 0x6, 0x4, 0x4, 0x80, 0x4, 0x80000001, 0x80000000, 0xe, 0x0, 0x7, 0x0, 0x9, 0x1, 0x7, 0xa3, 0xfffffffd, 0x283e, 0x3, 0x5, 0x8, 0xb6, 0x4, 0x0, 0x1, 0x7fffffff, 0x1000, 0x4, 0x4, 0x8, 0x4, 0x8, 0xc25c, 0x3, 0xe, 0x9, 0x6, 0x9, 0x518d1433, 0x98, 0x0, 0x7, 0x3, 0x9, 0x9, 0x3, 0x6, 0x8, 0x100, 0x5, 0x2, 0x4, 0xa, 0x0, 0x0, 0xf4, 0x27e, 0x5, 0x557a23e2, 0x5, 0x7, 0xffffffc0, 0xc, 0xb11, 0x6b8d, 0x7, 0x1ff, 0x4, 0x80, 0xf022, 0x3, 0xffffffff, 0x3, 0x7, 0x80000001, 0x10001, 0x2, 0x8, 0xffffffc0, 0xe58, 0x9, 0x7, 0x9, 0x1, 0x6, 0x401, 0x401, 0x6, 0x2, 0xfffffffd, 0x4, 0x4, 0x5, 0xef3, 0x1000, 0x9, 0x5, 0x7, 0x1, 0x8, 0x8, 0x2, 0x8f0e, 0x1, 0x3, 0x860, 0xee4, 0x7f, 0x81, 0x5, 0x2, 0x3, 0x9, 0x1, 0x6, 0x5, 0x10, 0x2, 0x1, 0xff, 0xff, 0x6, 0xc, 0xb, 0x0, 0x7, 0x3, 0x8, 0x2, 0xf5, 0xfffffff9, 0x26ef, 0xffff95b8, 0x4, 0x76, 0x1, 0x0, 0xfff, 0x7, 0x374, 0x9, 0xff, 0x6, 0x7f, 0x80, 0x52, 0xfffffff6, 0x9, 0x9, 0x3, 0x2, 0x7f, 0x9, 0x2, 0x1000, 0x3, 0xf5c, 0x1908, 0xc50, 0x800, 0x0, 0x7fff, 0xffff0000, 0x1ff, 0xc019, 0x6, 0x0, 0x2, 0x9, 0x400, 0x1f95e79d, 0x10000, 0xefe, 0x8, 0x0, 0x8, 0x6fe2, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0x1, 0x6d2, 0x10000, 0x2, 0x9, 0x8, 0xe, 0xf6, 0x1, 0x8, 0x1, 0x1, 0x2, 0xffffffff, 0x2, 0x2, 0x1, 0x80000000, 0x6, 0x6, 0x92, 0x1, 0xf, 0x6, 0x40000000, 0x1, 0x4, 0xc10, 0xa349, 0xfffffe00, 0x0, 0xfffffff7, 0x5, 0x1, 0x2, 0x6, 0x1, 0x7, 0x4, 0x854, 0x1, 0x101], 0x1, 0x400, 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000200)={0x200001fe0000}) fchown(r4, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x402) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x4, 0x1, 0xfffa7000, 0x200000, &(0x7f0000200000/0x200000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2}}, 0x20) 2m58.752399647s ago: executing program 3 (id=1106): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44085}, 0x0) open(0x0, 0x80140, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000006c0)='dctcp', 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8da10, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) 2m56.107821142s ago: executing program 8 (id=1114): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x200000, &(0x7f00000006c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x580, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) creat(0x0, 0x20) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r4, 0x0, 0x0, 0xc00) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'lo\x00', 0x0}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004dc0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x13ff}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) connect$inet(r1, 0x0, 0x0) 2m56.095458993s ago: executing program 3 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000640)={0x1, &(0x7f0000000740)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) sched_getscheduler(0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000007540)={0x24, 0x0, 0x0, &(0x7f0000007580)=ANY=[], 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000070c0)={0x6, 0x4, &(0x7f0000007180)=ANY=[@ANYBLOB="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"], &(0x7f0000007340)='GPL\x00', 0x2, 0xc3, &(0x7f0000007380)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000007480), 0x8, 0x10, &(0x7f00000074c0), 0x10, 0x0, 0xffffffffffffffff, 0x23}, 0x22) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$jfs(&(0x7f0000000500), &(0x7f0000000180)='./file0\x00', 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB='quota,discard=0x000000000020aff9,iocharset=none,iocharset=cp949,errors=remount-ro,grpquota,nointegrity,errors=remount-ro,nodiscard,errors=remount-ro,\x00'], 0x23, 0x62a7, &(0x7f0000000c00)="$eJzs3cuOHFcZB/Cvr3MJSawsomAhNEnMJYT4GowhQJIFLNiwQN4iW5NJZOEAsg1yIgtPNBskeAgQEkuEWLLiAbJgy44HwJKNBMoCpVDNnDOuabqnZ+yZrm6f308aV319qqZP+d/Vl6mqPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxPe/98NznYi48ot0w4mIz0QvohuxUtdrEbGydqK5zgux3RzPR8RgKaJef/ufZyNej4iPn4m4/+DOen3z+QP247t/+vvvf/TUD/72x8GZ//z5Vu+NScvdvv2bf//l7qNvLwAAAJSoqqqqkz7mn4yIfvpsDwA8+fLrf5Xk29VzV2/OWX/UarVavYB1UzXe3WYREZvNder3DA7HA8CC2YxP2u4CLZJ/0foR8VTbnQDmWqftDnAs7j+4s95J+XaarwdrO+35XJA9+W92dq/vmDSdZvQck1k9vraiF89N6M/KjPowT3L+3dH8r+y0D9Nyx53/rEzKf7hz6VNxcv690fxHPDn5d8fmX6qcf/9Q+ffkDwAAAAAAcyz//f9Ey8d/lx5/Uw5kv+O/azPqAwAAAAAAAAActcOO/9cfGf9vl/H/AAAAYG7Vn9Vrv33m4W2Tvoutvv1yJ+LpkeWBwqSLZVbb7gcAAAAAAAAAAAAAlKS/cw7v5U7EICKeXl2tqqr+aRqtD+tx1190pW8/lKztJ3kAANjx8TMj1/J3IpYj4nL6rr/B6upqVS2vrFar1cpSfj87XFquVhqfa/O0vm1peIA3xP1hVf+y5cZ6TdM+L09rH/199X0Nq94BOjYbLQYOABGx82p0f9Ir0n+9Xi2mqno2Wn6Tw4LYZ/9nQdn/OYi2H6cAAADA8auqquqkr/M+mY75d9vuFAAwE/n1f/S4gFqtVhde9+esP2r1kdRN1Xh3m0VEbDbXqd8zGI4fABbMZnzSdhdokfyLVn+wfaHtTgBzrdN2BzgW9x/cWe+kfDvN14M0vns+F2RP/pud7fXy+uOm04yeYzKrx9dW9OK5Cf15fkZ9mCc5/+5o/ld22odpucfPv9rzZ8K2zjGalH+9nSda6E/bcv690fxHHPf+Pytb0R2bf6ly/v1D5d+TPwAAAAAAzLH89/8Tc3X8d/iomzPVfsd/18aucXx9AQAAAAAAAICjcv/BnfV83Ws+/v+5Mcu5/vPJlPPvyL9IOf/uSP5fHlmu15i/9/bD/P/14M76H27987N5etD8l/JMJz2yOukR0Un31ElfuXvEXwyxNegN63sadLq9fjrnpxq8G9fiemzE2T3LdtP/x8P2c3va654Ottur3k77+T3t/d32vP6FPe2DdHZRtZLbT8d6/DSuxzvb7XXb0pTtX57SXk1pz/n37P9Fyvn3Gz91/qupvTMyrd37qPt/+31zOu5+3rr2+V+dPf7NmWorervb1lRv30st9Gf7/+SpYfz85saN07ev3rp141ykyZ5bz0eaHLGc/yD97D7/v7zTnp/3m/vrvY+Gh85/XmxFf2L+Lzfm6+19ZcZ9a0POf5h+cv7vpPbx+/8i5z95/3+1hf4AAAAAAAAAAAAAAADAfqqq2r5E9K2IuJiu/2nr2kwAYLby63+V5NtnVfdmfH9q9YLXnTnrz0zrT6v56o9avYh1UzXem80iIv7aXKd+z/DLcb8MAJhnn0bEP9ruBK2Rf8Hy9/3V01NtdwaYqZsffPjjq9evb9y42XZPAAAAAAAAAIBHlcf/XGuM/3yqqqq7I8vtGf/17Vh73PE/+3lmd4DRCQNV9w6/TfvZ6g573cZw4y/GpPG/B7tz+43/3Z9yf4Mp7cMp7UtT2pentI+90KMh5/9iY7zzUxFxcmT49RLGfx0d874EOf+XGo/nOv8vjSzXzL/63SLn392T/5lb7//szM0PPnzt2vtX39t4b+MnF86dO3vh4sVLly6deffa9Y2zO/+22OPjlfPPY187D7QsOf+cufzLkvP/QqrlX5ac/xdTLf+y5Pzz+z35lyXnnz/7yL8sOf9XUi3/suT8v5Jq+Zcl5/9qquVflpz/V1Mt/7Lk/F9LtfzLkvM/nWr5lyXnfybVB8x/5bj7xWzk/PMRLvt/WXL++cwG+Zcl538+1fIvS87/QqrlX5ac/+upln9Zcv5fS7X8y5Lzv5hq+Zcl5//1VMu/LDn/S6mWf1ly/t9ItfzLkvP/ZqrlX5ac/xupln9Zcv7fSrX8y5Lz/3aq5V+WnP93Ui3/suT830y1/Mvy8Pv/H2/m188eze8xU+zMYD66YWZnpu1nJgAAAAAAAAAAAABg1CxOJ257GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt7dxch11vcDP7NvXjshMRDyd/I3sHaMMc4mu36JX2hdTHhteCuBUOgLtutdmwW/4bVLoJFsGiiRMCqqaBsu2gJCbW4qfMEFrQDlArVCqkTaC3qDqFC5iKqAAlIlWkG2mnOe59mZ2dmZXe94d/acz0eyf94zZ8555swzZ+e36+8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDRtjdMf6aWZVn9T/7X5iy7tf7vjWOb82WvXesRAgAAACv1q/zv529PC44u4U4N6/zzK7739bm5ubns/YN/PvyFubl0w1iWDW/Isvy26PqPPlBrXCd4PButDTR8PdBl94Ndbh/qcvtwl9tHuty+ocvto11uX3AAFthY/Dwm39iO/J+bi0Oa3ZEN57ftaHOvx2sbBgbiz3Jytfw+c8OnspnsTDadTTatX6xby9f/5rb6vt6axX0NNOxra32G/Oyxk3EMtXCMdzTta36b0U9en439/GePnfzbS8/d1a52PQxN2yvGuWt7fZyfCkuKsdayDemYxHEONIxza5vnZLBpnLX8fvV/t47z+SWOc3B+mKuq9TkfzQbyfz+TH6ehxh/rpeO0NSz7xT1Zll2dH3brOgv2lQ1km5qWDMw/P6PFjKxvoz6VXpINLWueblvCPK3XqR3N87T1NRGf/23hfkOLjKHxafrJJ0canvdfzt3IPI3qj7oYw9zg/LJiDK1zsNevlX6Zg3FePJM/6CfazsEd4fE/tnPxOdh27rSZg+lxN8zB7d3m4MDIYD7m9CTU8vvMz8E9TesP5nuq5fXZnZ3n4MSlsxcmZj/+iftmzp44PX16+ty+PXsm9x04cOjQoYlTM2emJ4u/b/Bo979N2UB6HW4Pxy6+Bl7dsm7jVJ378siC8++Nvg5H0+tw4feszS3r9vp1ONT64Gqr84JcOKeL18Z76wd99NpAtshrLH9+dq/8dZged8PrcKjhddj2e0qb1+HQEl6H9XUu7F7ae5ahhj/txrD494KVzcHNDXOw9f1I6xzs9fuRfpmDo2Fe/GD34t8LtobxPjG+3PcjgwvmYHq44dxTX5Le748eyku7eXl3/YZbRrLLs9MX73/0xKVLF/dkoayKlzbMldb5uqnhMWUL5uvAsufr0ZlXPHF3m+Wbw7Eava/+1+iiz1V9nf33d36u8u9u7Y9n09K9WSg9ttrHs9138/rxHMmyL37nkw9/67EvvmHR41nvNz81sfL34qkvbTj/Di9y/o19/wvF/tKmHh8cHipev4Pp6Aw3nY+bn6qh/NxVy/f9/MTSzsfD4c9qn4/v6HA+3tKybq/Px8OtDy6ej2vdftqxMq3P52iYJ2cmO5+P6+ts2bvcOTnU8Xx8T6i1cPxfEzqF1Bc1zJ3F5m3a19DQcHhcQ3EPzfN0X9P6w6E3q+/rqb3hTWEa5dLm6a57ivUHG+4XrdY8HWtZt9fzNP3sa7F5Wuv207cb0/p8joZ5cce+zvO0vs7T+1d+7twY/9lw7hzpNgeHB0fqYx5OkzA/32dzG+McvD87mZ3PzmRT+a0j+Xyq5fsaf2Bp58qR8Ge1z5VbOszBXS3r9noOpu9ji8292tDCB98Drc/naJgXTz7QeQ7W13njwd6+d90VlqR1Gt67tv58bbGfed3dcphu1lwZCuP8zsHOP5utr3Pm0HL7zM7H6d6w5JY2x6n19bvYa2oqW53jtCWM87lDix+n+njq63zh8BLn09Esy6589MH8573h9ytXLn//602/d2n3O50rH33wpy869U/LGT8A698LRdlUfK9r+M3UUn7/DwAAAKy9bv9BPf2MezT8DlP/DwAAAGUU+/74v8IT/T8AAACURuz7h0JNytD//3H3Vba88bmZF65kKZk/F8Tb02F4qFgvZlwnw9djc/Pqyx/86vR//+OVpQ1vIMuyXz70R23X3/JQHFdhLIzz+pualy/w9fuWtO/jj1xJ+23Mr38pbD8+nqVOg3YR3Mksy755++fy/Yx94Fpen37oeF4fvvrE4/V1nj9cfB3v/+xLi/X/KvzflaOnTjTd/9lwHH4c6uTb2h+PeL+vXXvN1oPvm99fvF9t+235w37yg8V24+fkfP7xYv14nBcb/7c++9TX6us/+qr2478y0H78T4XtfjXU/3l5sX7jc1D/Ot7v02H8cX/xfvd/5dttx3/9M8X6F95crHc81Lj/XeHrHW9+bqbxeD1aO9H0uLK3FOvF/U9+/0/z2+P24vZbxz967FrT8WidH0//W7GdiZb14/K4n+gfWvZf307j/Iz7f+pPjjcd5277v/7wsy+vb7d1//e2rHfho7vz/c9vr/kTm/76059ru784nqN/f6Hp8Rx9d3gdh/0/+cEwH8Pt/3u92F7rpyscf3fz+Seu/6XNV5oeT/TWnxf7v/6603ndMLpx0y23vui2q++qH7sse2ZDsb1u+z/9N+ebxv/lO4vjEW+P/8Wsdf+LufrKYv8XPzZ+7vzs5ZmpdFQfuz3/7Jy3F+OJ4709nFtbvz52/tKHpi+OTY5NZtlYeT9C74Z9JdSfFuVq57XnFpxBdz8Sns+7//Kbm3b+62fj8n9/b7H82tuK71uvDut9PizfHJ6/5e1/oSe33Zm/vmtPhxHOLfy84JXYuuO/Di1pxfD4W98XxPl+4WUfyo9D/bb8+0Z8Xa9w/D+cKrbzjXBc58InM2+/c35/jevHz0a49p7i9b7i4xdOc/F5/bvwfL/jx8X247ji4/1heB/z7S3N57s4P75xZaB1+/mneFwN55PsanF7XCse72vP39l2ePFzSLKrd+Vf/1nazl3LepiLmf347MSZmXOXH524ND17aWL24584dvb85XOXjuWf5Xnsw93uP39+2pSfn6amD+zP8rPV+aLcZGs9/guPnJw6OLlzavrUicunLj1yYfri6ZOzsyenp2Z3njh1avpj3e4/M3Vkz97D+w7uHT89M3Xk0OHD+w6Pz5w7Xx9GMaguDkx+ZPzcxWP5XWaP7D+854EH9k+Onz0/NX3k4OTk+OVu98+/N43X7/2H4xenz5y4NHN2enx25hPTR/YcPnBgb9dPAzx74dTs2MTFy+cmLs9OX5woHsvYpXxx/Xtft/tTTrP/UbyfbVUrPogve9e9B9Lns9Z99ZOLbqpYpeUDRJ8Ln0Xz3RdfOLSUr2PfPxxqUob+HwAAAMjFvn8k1ET/DwAAAKUR+/4NoSb6fwAAACiN2PePhpr+S0BF+v/S5f+3XFnS/uX/1zL/n1/9Wf5f/n/18/8hf//Me/ot/1+cL+T/e2Ol+Xv5/0D+X/5f/l/+X/6fHui3/H/s+zdmmd//AwAAQEnFvn9TqIn+HwAAAEoj9v23hJro/wEAAKA0Yt9/a6hJRfp/+X/5f9f/l/+X/2+/f/n/9Un+vzP5/y7k/yeyauX/r/Zy/GuQ/9/Y+IX8P/2o3/L/se9/UahJRfp/AAAAqILY998WaqL/BwAAgNKIff/toSb6fwAAACiN2PdvDjWpSP8v/7+i/H/KXMn/N49f/r+Z/H+YD/L/8v+rQP6/M/n/LuT/Xf9/feX/m8j/04/6Lf8f+/4Xh5pUpP8HAACAKoh9/0tCTfT/AAAA0H+GOtzW7j9nB7Hvf2moyYL+v9MOAAAAgH4W+/47spYgeEV+/y//7/r/8v/y//L/7fe/9Pz/YCb/3z/k/zuT/+9C/l/+X/5f/p+e6rf8f973Z6PZy0JNKtL/AwAAQBXEvv/OUJMl9P8bbtqoAAAAgF6Kff//CzXx+38AAAAojdj3bwk1qUj/L/9fmvz/LxqfOvl/+f9O+5f/d/3/MpP/70z+vwv5f/l/+f8bzP9f3SP/Tzv9lv+Pff9doSYV6f8BAACgCmLff3eoif4fAAAASiP2/f8/1ET/DwAAAKUR+/6toSYV6f/l//s8/x+To67/L/8v/9+X+f9R+f++I//fmfx/F0vJ/98q/78Y+f8q5/9d/5/2+i3/H/v+l4eaVKT/BwAAgCqIff8rQk30/wAAAFAase9/ZaiJ/h8AAABKI/b9Y6EmFen/l5P/r12V/1/MTb7+/8gSrv/fRP5f/r/T/uX/Xf+/zOT/O5P/78L1/+X/5f/l/+mpfsv/x75/W6hJRfp/AAAAqILY928PNdH/AwAAQGnEvv+eUBP9PwAAAJRG7Pt3hJpUpP93/f91kf/P5P/l/+X/5f/l/5dG/r8z+f8u5P/l/+X/5f/pqX7L/8e+/1WhJhXp/wEAAKAKYt+/M9RE/w8AAAClEfv+V4ea6P8BAACgNGLfvyvUpCL9v/y//L/8v/y//H/7/cv/r0/y/53J/3ch/y//L/8v/09P9Vv+P/b9rwk1qUj/DwAAAFUQ+/7doSb6fwAAACiN2PffG2qi/wcAAIDSiH3/eKhJRfp/+X/5f/l/+X/5//b7l/9fn+T/O5P/70L+X/5f/l/+n57qt/x/7PvvCzWpSP8PAAAAVRD7/vtDTfT/AAAAUBqx758INdH/AwAAQGnEvn8y1KQi/b/8v/y//L/8/7Ly/6+c3678f0H+v7/I/3cm/9+F/L/8/5rn/4fl/ymVfsv/x75/T6hJRfp/AAAAqILY9+8NNdH/AwAAQGnEvn9fqIn+HwAAAEoj9v37Q00q0v/L/8v/y//3NP9fazcfSpX/byD/X5D/7y/y/531Pv8fH6L8v/y//L/r/8v/s1C/5f9j3/9AqElF+n8AAACogtj3Hwg10f8DAABAacS+/2Coif4fAAAASiP2/YdCTSrS/8v/y//L/7v+v/x/+/3L/69P8v+duf5/F/L/8v/rOP9fn1vy//Sbfsv/x77/cKhJRfp/AAAAqILY97821ET/DwAAAKUR+/5fCzXR/wMAAEBpxL7/10NNKtL/y//L/8v/y//3e/5/RP5f/n8Z5P87k//vQv5f/n8d5/9d/59+1G/5/9j3Hwk1qUj/DwAAAFUQ+/7fCDXR/wMAAEBpxL7/daEm+n8AAAAojdj3Hw01qUj/L/+/Svn/uFD+X/5f/t/1/+X/byr5/87k/7uQ/5f/l/+X/6en+i3/H/v+14eaVKT/BwAAgCqIff+DoSb6fwAAACiN2Pe/IdRE/w8AAAClEfv+N4aaVKT/l/93/f+1z/8PN41d/n/+fvL/Bfl/+f/lkP/vTP6/C/l/+X/5f/l/eqrf8v+x739TqElF+n8AAACogtj3vznURP8PAAAApRH7/reEmuj/AQAAoDRi3//WUJOK9P/y//L/a5//d/1/+f+C/L/8fy/I/3cm/99F7/P/wy3bl/+/idZ6/PL/8v8s1G/5/9j3/2aoSUX6fwAAAKiC2Pc/FGqi/wcAAIDSiH3/20JN9P8AAABQGrHvf3uoSUX6f/l/+X/5f/l/+f/2+5f/X5/k/ztbZ/n/X90Wlq/j/H/r9uX/b6K1Hv9y8/9DLV/flPz/jxbL/89taL2//D83Q7/l/2Pf/45Qk4r0/wAAAFAFse9/Z6iJ/h8AAABKI/b97wo10f8DAABAacS+/7dCTSrS/8v/18cxn16W/5f/zxfI/8v/y/+vW/L/na2z/H8Zrv/fun35/5torcfv+v/y/yzUb/n/2Pe/O9SkIv0/AAAAVEHs+x8ONdH/AwAAQGnEvv89oSb6fwAAACiN2Pe/N9SkIv2//L/r/6/X/P8tDevL/8v/y/8Tyf93Jv/fhfy//H+/5f//U/6f9a3f8v+x738k1KQi/T8AAABUQez73xdqov8HAACA0oh9/2+Hmuj/AQAAoDRi3//+UJOK9P+rlv/fvHCR/P9y8v9j8v/LvP7/SFgm/y//L/9fLfL/ncn/dyH/L//fb/l/1/9nneu3/H/s+z8QarL0/n90yWsCAAAAayL2/b8TalKR3/8DAABAFcS+/3dDTfT/AAAAUBqx7/+9UJOK9P+u/79e8v+u/58tM//v+v+L71/+v4/z/wPy/yu1evn/eOaR/5f/l/+P5P/l/+X/adVv+f/Y9/9+qElF+n8AAACogtj3fzDURP8PAAAA60K7/5PdKvb9x0JN9P8AAABQGrHvPx5qUpH+X/5f/l/+/4by//lqNzX//xfb/+UH33vn8T3y/9XK/7v+/4qt6vX/6y9+1/+X/5f/T+T/5f/l/2nVb/n/2PefCDWZb/ze7gL/AAAAsL7Fvv8PQk0q8vt/AAAAqILY958MNdH/AwAAQGnEvn8q1KQi/b/8v/y//L/r//c6/x+Px3rK/49vWEf5/3jSlf9va1Xz/++bz4nL/y83/z/Sdmlr/r8m/99E/n/Z4/9ulmXy//L/rKF+y//Hvn861KQi/T8AAABUQej7B04Vdf4G/T8AAACURuz7T4ea6P8BAACgNGLf/6FQk4r0//L/8v/y//L/rv/ffv99m/93/f+O5P8765/8f3uu/y//v57HL/8v/89C/Zb/j33/TKhJRfp/AAAAqILY93841ET/DwAAAKUR+/6PhJro/wEAAKA0Yt9/JtSkIv2//P//sXcfT5aV5x3H70AzoahyeeeFF2bvP4GFWds7b7xg44Vd5XKVwTZOODEI5YByDigLBZSQEEooJ1BCQllIQjkHlEGqUTHzPE93T58+t3v6dt9z3vfzWfhBjUa3cVFCP4bvvPp//b/+X/8//Pn6/3nS/4/T/y+h/9f/6//1/6zU1Pr/3P3/FLd0sv8BAACgB7n7r4pb7H8AAABoRu7+q+MW+x8AAACakbv/n+OWTva//l//32z//xf6/90+X/+v/2+Z/n+c/n/IJZu/qf/X/+v/9f+s1NT6/9z9/xK3dLL/AQAAoAe5+/81brH/AQAAoBm5+6+JW+x/AAAAaEbu/n+LWzrZ/+f1/8cW6+n/j+/4vo62/8+MV//fUv/v/f9dP1//r/9v2dH2/9c/9N98+v/Z9/9b6P/1//p//T8rNbX+P3f/v8ctnex/AAAA6EHu/v+IW+x/AAAAaEbu/v+MW+x/AAAAaEbu/v+KWzrZ/97/9/6//l//r/8f/nz9/zx5/39cT/3/NfdcetX9t/3p7fv5fP2//l//r/9ntabW/+fuvzZu6WT/AwAAQA9y9/933GL/AwAAQDNy9/9P3GL/AwAAwAydGvxq7v7/jVs62f/6f/2//j/6/5P6f/2//r8F+v9xPfX/F/L5+n/9v/5f/89qTa3/z93/f3FLJ/sfAAAAepC7///jFvsfAAAApmvoH8Qekbv/urjF/gcAAIBm5O4/Hbd0sv/1/4ff//9e/z+P/t/7//p//X8T9P/j9P9L6P/1//p//T8rNbX+P3f/9XFLJ/sfAAAAepC7/2Fxi/0PAAAAzcjdf0PcYv8DAABAM3L3Pzxu6WT/6/+9/6//1//r/4c/X/8/T9Pu/zeWfr7+X/8/8/7/Ev2//l//z1b77P8fGPmv7ZX0/7n7HxG3dLL/AQAAoAe5+x8Zt9j/AAAA0Izc/Y+KW+x/AAAAaEbu/kfHLZ3sf/2//l//r/+/4P5/5596Z+n/h+n/j8a0+//luun/jw3/Wgj6/9n3/97/1//r/9lmau//5+5/TNzSyf4HAACAHuTuf2zcMrL/9/038wEAAIC1yt3/uLjFz/8DAADA7GV1lrv/8XFLJ/tf/6//1//r/73/P/z5Y/3/7Vu+P/3/tOj/x02m/9+F/l//P+fvX/+v/2enqfX/ufufELd0sv8BAACgB7n7b4xb7H8AAABoRu7+J8Yt9j8AAAA0I3f/k+KWTvb/cP+/+fv1/3uj/9/+/ev/h//8WFX/n/+J+v/R/v8K7//3Sf8/Tv+/xLb+/683Fgv9v/5f/x/9/6llP17/z5Cp9f+5+58ct3Sy/wEAAKAHufufErfY/wAAANCM3P1PjVvsfwAAAGhG7v6nxS2d7H/v/+v/9f/z6/+9/3/OOt//Xxx5/7+h/98j/f84/f8S3v/X/+v/x9//H/lVAPT/DDm6/n9jT/1/7v6nxy2d7H8AAADoQe7+Z8Qt9j8AAADMw9Z/duD8f6A05O5/Ztxi/wMAAEAzcvc/K25pZ/+PvtWp/9f/6//1//r/4c+fVv/v/f+90v+Pa73/P7HQ/x/EIfXzG431/zft9uOn0P9fd9j9/wj9P0O29f93bH59Xe//5+5/dtzSzv4HAACA7uXuf07cYv8DAABAM3L3Pzdusf8BAACgGbn7nxe3dLL/D73/H/nVB/T/+n/9v/5f/6//XzX9/7jW+3/v/x/Mut/Pn/v3P4X+/9Df/x+h/2fItv5/i3X1/7n7nx+3dLL/AQAAoAe5+18Qt9j/AAAA0Izc/TfFLfY/AAAANCN3/wvjlk72v/f/9f/6f/2//n/48/X/83Sg/v4i/X/R/+v/9f/6f/0/KzC1/j93/4vilk72PwAAAPQgd/+L4xb7HwAAAObkxNjvzN3/krjF/gcAAIBm5O5/adzSyf7X/x9u/59f1//r/xf6f/2//v9IdPv+/7GhvxLttEv/f9c/nP6r7V/R/+v/9f/6f/0/e/THI79vEv3/mc3/dZm7/2VxSyf7HwAAAHqQu//lcYv9DwAAAM3I3f+KuMX+BwAAgGbk7r85btnn/h9rHqZM/+/9f/2//l//P/z5+v956rb/3yPv/y+h/9f/6//1/6zUJPr/Lf86d/8r4xY//w8AAADNyN3/qrjF/gcAAIBm5O5/ddxi/wMAAEAzcve/Jm7pZP/r//X/+n/9v/5/+PP1//Ok/x+n/19iTv3/zQfo/zeGv7zufv6g1v396//1/+w0tf4/d/8tcUsn+x8AAAB6kLv/tXGL/Q8AAADNyN3/urjF/gcAAIBm5O5/fdzSyf7X/+v/9f/6f/3/8Ofr/+dJ/z9O/79YLN448g0M9f9nTkyz//f+/+S+f/2//p+dptb/5+5/Q9zSyf4HAACADlx26uw5GX8r2P4HAACAFuXuvzVusf8BAACgGbn73xS3dLL/9f/6f/3/Zv9ffyT6f/2//n+29P/j9P9LzOn9f/3/5L5//b/+n52m1v/n7n9z3NLJ/gcAAIAe5O6/LW6x/wEAAKAZufvfErfY/wAAANCM3P23xy2d7H/9v/5f/+/9f/3/8Ofr/+fp8Pr/hf5f/6//X0L/r//X/3O+qfX/ufvfGrd0sv8BAACgB7n73xa32P8AAADQjNz9b49b7H8AAABoRu7+d8Qtnex//b/+X/+v/9f/D3++/n+evP8/Tv+/hP5f/6//1/+zUsP9/3Vr6/9z978zbulk/wMAAEAPcvffEbfY/wAAANCM3P3vilvsfwAAAGhG7v53xy2d7H/9v/5/e/+/WOj/9f977/+v1/8frP8/udD/r5z+f5z+fwn9f5v9/0WLhvr/U7v+eP0/UzS19/9z978nbulk/wMAAEAPcve/N26x/wEAAKAZufvfF7fY/wAAANCM3P3vj1s62f/6f/2/9//1/97/H/587//Pk/5/nP5/Cf3/gfr//Ovx5Pp/7//r/1mbqfX/ufs/ELd0sv8BAACgB7n7Pxi32P8AAADQjNz9H4pb7H8AAABoRu7+D8ctnex//b/+X/+v/9f/D3++/n+e9P/j9P9L6P/bfP+/j/7/1EL/zwRNrf/P3f+RuKWT/Q8AAAA9yN1/Z9xi/wMAAEAzcvffFbfY/wAAANCM3P0fjVs62f/6f/2//n+e/f9J/b/+X/8/aCr9/+WX/+Xd+n/9v/5f/+/9f/1/76bW/+fu/1jc0sn+BwAAgB7k7v943GL/AwAAQDNy938ibrH/AQAAoBm5+z8Zt3Sy/3f2/5cszhWq5wz1/9Gozb7/P7Hl+0j6f/3/2S/MoP9f6P/1//r/QVPp/73/f2Hfv/5f/z/n739f/f9lO3+8/p8WTa3/z91/d9zSyf4HAACAHuTu/1TcYv8DAABAM3L3fzpusf8BAACgGbn774lbOtn/3v/X/+v/9f/6/+HP1//Pk/5/nP5/Cf2//t/7/1f/3cX6f1Znav1/7v7PxC2d7H8AAADoQe7+z8Yt9j8AAAA0I3f/5+IW+x8AAACakbv/83FLJ/tf/380/f8fxdf0//r/nvr/B8+cOaP/36T/Pxr6/3H6/3L+H9o5/fT/J4e+uO5+/qDW/f030/97/58Vmlr/n7v/C3FLJ/sfAAAAepC7/4txi/0PAAAAzcjd/6W4xf4HAACAZuTu/3Lc0sn+1/938/7/fce77f//Vv9/3ud7/1//3zL9f/4VfZj+f4l++v9B6+7n5/796//1/+w0tf4/d/+9cUsn+x8AAAB6kLv/K3GL/Q8AAADNyN3/1bjF/gcAAIBm5O7/WtzSyf7X/3fT/99w7vvssf/3/r/+X//fE/3/OP3/Evp//X/7/f/x3X68/p/DMLX+P3f/fcc2utz/AAAAMFd/8+f/eO9e/733nf2/Jxdfj1uuWJzZ409jAwAAABP30O4/trFYfOPsv/Lz/wAAANCi3P3fjFs62f/6/776/z7f/9f/6//1/z3R/4/T/y+h/9f/t9//70r/z2GYWv+fu/9bccuW4bex7z9KAAAAYEpy9387bunk5/8BAACgB7n7vxO37Nj/fjlAAAAAmKvc/d+NWzr5+f919v8X6/+X9/+LQ+r/49+n/z9H/6//H/p8/f886f/HHbD/P3NM/6//H6H/1//r/znf1Pr/3P3fi1s62f8AAADQqG1/RyF3//fjFvsfAAAAmpG7/wdxi/0PAAAAzcjd/8O4pZP97/3/Q+7/H/oP2N7PZ6p+iO//n6rf8v5/5/3/jScHP1//r/9vmf5/3Irf/79W/6//32pC/f8J/b/+n2mYWv+fu/9HcUsn+x8AAAB6kLv/x3GL/Q8AAADNyN3/k7jF/gcAAIBm5O7/adzSyf7X/0/8/f8L6v/38P6//r+P/n+Xz2+n//+TS0/feeXf33qL/p9NR9n/558LHff/3v/X/28zof7f+//6fyZi9f3/xrYv7rf/z93/s7ilk/0PAAAAPcjdf3/cYv8DAABAM3L3/zxusf8BAACgGbn7fxG3dLL/9f/6/6n0//n/6zX0/6cvuP8/tVgs1tL/Z1Pce//v/X/9/07e/x+n/19C/6//1//r/1mp1ff/27+43/4/d/8v45ZO9j8AAAD0IHf/r+KW3P/H9v237gEAAICJyd3/67jFz/8DAABAM3L3/yZu6WT/6//1/1Pp/5P3/zd/XFvv/19Zceq5zz++4/tru///s/ot/f/h0v+P0/8vof/X/+v/9f+s1NT6/9z9v41bOtn/AAAA0IPc/Q/ELfY/AAAANCN3/4Nxi/0PAAAAzcjd/7u4pZP9r/9vtf/PIl7/r/+fSv/v/X/v/x8N/f84/f8S+n/9v/5f/89KTa3/z93/hwAAAP//3wFdTQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x102) rmdir(&(0x7f00000009c0)='.\x00') mount(0x0, &(0x7f00000007c0)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./mnt\x00', 0x1ff) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000006f80)=0xffffffffffffffff, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000006fc0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000b80)="878c7bd92adafe4749557747348c72b87d1939c6722a7e059fa5f5efde4318c4067111bf843044e8bce048f3f11acffea66ab29ceb0204a5c1e8b49e6d033918c921e27fde05cad411e0d8dfa785094e8322a906d10e62729ec177b076d3e982f07a8f3364bba132e4bbfc", 0x6b, r1}, 0x68) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000980)=ANY=[@ANYBLOB="20000000020000000c"], 0x8600) 2m55.814976391s ago: executing program 8 (id=1116): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x25, 0x559a, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000005c80)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000005cc0)='./file1\x00', 0x145142, 0x0) r2 = syz_open_dev$loop(&(0x7f0000005d00), 0x0, 0x22400) sendfile(r1, r2, 0x0, 0x80000002) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000005d40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005dc0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000040) syz_mount_image$ext4(&(0x7f0000005e80)='ext4\x00', &(0x7f0000005ec0)='./mnt\x00', 0x2200054, &(0x7f0000005f00)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000005f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000006180)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000061c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000006200)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x10, 0x2, 0x7000000) mount$overlay(0x0, &(0x7f0000006240)='./file0\x00', &(0x7f0000006280), 0x0, &(0x7f00000062c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {@init_itable}, {@sysvgroups}, {@resuid}, {@init_itable}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000084c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000008a40)='./file1\x00', 0x88142, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) pwrite64(r5, &(0x7f0000000200)="38975f682412b2f0855d6c996fe7131432", 0x11, 0x84fed4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000008b00)='./file1\x00', 0x48042, 0x18c) fallocate(r6, 0x10, 0x6, 0x105ff) r7 = syz_open_dev$loop(&(0x7f0000006300), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000006340)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x12, 0x3, "d2273078cf6175866187bbf62372bbb65d940f27bc28a5a442ff5a8d374a182008a1fd92701ce53ee6aa5d922917aeecbfb3db24b09909c24cc157a3780cf5d5", "09b49809fc32a5fc7be9f88c6b84907998105e3111daa2bd51b0d0c3bc93fb2d0f0244a8c7a99a75e76613c745458f5c1212e72d93b272fed81941f04edd0059", "a960f08042e09119b6f87de59f19912c538884e7a95c3d50e4be66184e295eb1", [0x4, 0x6c]}) ioctl$BLKFLSBUF(r7, 0x1261, 0x0) fallocate(r0, 0x0, 0x0, 0xffff) 2m55.221157721s ago: executing program 8 (id=1120): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)="91fa5f0044470000449ce60865d008539e1a81deee68ba010000", 0x1a}], 0x1, 0x0, 0x0, 0x8885}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) timerfd_create(0x7, 0x800) mmap$IORING_OFF_CQ_RING(0x0, 0xd07, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x1, 0xf5, 0x81, 0x89, 0x2c, [], [{{0x9, 0x5, 0xc, 0x2, 0x400, 0x7, 0x7, 0xa}}]}}]}}]}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m55.063459927s ago: executing program 36 (id=1120): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)="91fa5f0044470000449ce60865d008539e1a81deee68ba010000", 0x1a}], 0x1, 0x0, 0x0, 0x8885}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) timerfd_create(0x7, 0x800) mmap$IORING_OFF_CQ_RING(0x0, 0xd07, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x1, 0xf5, 0x81, 0x89, 0x2c, [], [{{0x9, 0x5, 0xc, 0x2, 0x400, 0x7, 0x7, 0xa}}]}}]}}]}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m54.083121235s ago: executing program 3 (id=1126): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x200000, &(0x7f00000006c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x580, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) creat(0x0, 0x20) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r4, 0x0, 0x0, 0xc00) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'lo\x00', 0x0}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004dc0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x13ff}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) connect$inet(r1, 0x0, 0x0) 2m53.285492615s ago: executing program 3 (id=1132): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7fffffff) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 2m51.8382773s ago: executing program 3 (id=1137): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r0, 0x406, r3) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00003fe000/0x1000)=nil, 0x1000) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000280)='\x00'/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000380)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) membarrier(0x10, 0x0) ustat(0x801, &(0x7f0000000240)) 2m51.631223751s ago: executing program 37 (id=1137): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r0, 0x406, r3) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00003fe000/0x1000)=nil, 0x1000) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000280)='\x00'/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000380)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) membarrier(0x10, 0x0) ustat(0x801, &(0x7f0000000240)) 20.024682662s ago: executing program 1 (id=1570): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fchdir(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001540)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000001580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000015c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001600), 0x0, 0x0) read$msr(r5, &(0x7f0000001640)=""/102392, 0x18ff8) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) 18.85102051s ago: executing program 1 (id=1574): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) get_robust_list(0x0, 0x0, &(0x7f0000000440)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x1fc}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.06839835s ago: executing program 4 (id=1586): getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000001300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001440), 0x4000087, 0x2, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mount$9p_fd(0x0, &(0x7f0000001580)='./file0\x00', 0x0, 0x2004402, &(0x7f0000001600)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f00000005c0)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") 12.17171937s ago: executing program 1 (id=1588): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x4a102) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', 0x0}) 9.183187799s ago: executing program 4 (id=1590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) sendmsg$FOU_CMD_GET(r4, 0x0, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}}, 0x0) 8.324129295s ago: executing program 4 (id=1591): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000500)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f0000000540)=0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') syz_clone3(&(0x7f00000001c0)={0x180801600, &(0x7f0000000240), 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/rfcomm0\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_create_resource$futex(0x0) mount(0x0, 0x0, &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000300)={'bridge0\x00', &(0x7f0000000580)=@ethtool_ringparam={0x12, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0684113, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x5402, 0x0) 7.821018126s ago: executing program 5 (id=1592): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000500)=ANY=[], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/rfcomm0\x00', 0x802, 0x0) syz_create_resource$futex(0x0) mount(0x0, 0x0, &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x844) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000300)={'bridge0\x00', &(0x7f0000000580)=@ethtool_ringparam={0x12, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000a40)=ANY=[], 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x5402, 0x0) 7.696105738s ago: executing program 9 (id=1594): r0 = openat$sysctl(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) openat$tun(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000740)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc98, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x28}}, 0x0) write$tun(r1, &(0x7f00000009c0)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='ABCD'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) 7.421263956s ago: executing program 6 (id=1595): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 7.269214311s ago: executing program 6 (id=1596): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000880)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000008c0)={0x2, 0x4e20}, 0x10) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7a4b}], 0x2, 0x40018022, 0x0) shutdown(r2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32=0x0], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)={0x10, 0x31, 0x2, 0x70bd26, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20, 0x40000c0}, 0x8800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000740)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xf, 0x1e}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}, @qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xee}]}}]}, 0x60}}, 0x4000010) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x6000, &(0x7f0000000640)=[{&(0x7f0000000680)='U', 0xa00120}], 0x1}, 0x3) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="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", 0x14e}, {&(0x7f0000000100)}], 0x2}, 0x4015) 7.116944167s ago: executing program 9 (id=1597): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) 7.105473228s ago: executing program 1 (id=1598): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7d, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x7, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x1, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.849314223s ago: executing program 5 (id=1599): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x4a102) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', 0x0}) 6.807641088s ago: executing program 9 (id=1600): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000006c0)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) io_uring_setup(0x523, &(0x7f00000007c0)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x109000, 0x13) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) r5 = dup2(r4, r4) poll(&(0x7f00000001c0)=[{r5, 0xe401}], 0x1, 0x4) 5.202808299s ago: executing program 9 (id=1601): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80a00, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48014) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0xfffffffd, "0680052c00007600c64e3b4e6f6fcd2c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/mcfilter6\x00') r2 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x75, 0x109301) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0)) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"4db4040119759c00158cf9d9a9df4003637fe845afd0ec3a198f9254fbd69097", r1}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0x10}}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000003f80)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.103574508s ago: executing program 6 (id=1602): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x4a102) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 4.061115893s ago: executing program 9 (id=1603): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='mtd0\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700)='jffs2\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r1 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000019d80), 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000019e00)='./mnt\x00', &(0x7f0000019e40)={0x44a801, 0x48, 0x30}, 0x18) renameat2(r1, &(0x7f0000019dc0)='./mnt/fillfile\x00', r2, &(0x7f0000019e80)='mtd0\x00', 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000007c0)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r4, &(0x7f0000000880)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000019c00)='./mnt/fillfile\x00', 0x42, 0x9f) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, 0x0, &(0x7f000001a040)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000019cc0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000019c80)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000019d00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xffffffff}, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, r6, 0x80000000}}, 0x48) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="62031400d70000000010122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}, {&(0x7f0000000200)="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", 0x1c7}, {&(0x7f0000000400)="68fc845e992f9239429637c2a63d00cc68f5808c91c9fd392da7fe6dbd", 0x1d}], 0x3}, 0x4041) syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002835690aadb36020000402505a7a400010000000109024300020100c101090400000102020100052400100104240202052401000105240600010705810308000a09040100020a0000000705827ec935a015b7621f000200070503c8f2b4"], 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_open_dev$vbi(&(0x7f0000000500), 0x2, 0x2) 4.060991433s ago: executing program 5 (id=1604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x4a102) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01", 0x53}], 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000006c0)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', 0x0}) 3.031908276s ago: executing program 1 (id=1605): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r1) r5 = fcntl$dupfd(r0, 0x406, r3) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00003fe000/0x1000)=nil, 0x1000) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000380)={0x0, r4}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) membarrier(0x10, 0x0) ustat(0x801, &(0x7f0000000240)) 3.009808019s ago: executing program 6 (id=1606): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000280)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000600)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000640)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001680)={&(0x7f00000016c0)=[0x80000000, 0x4, 0xfffffae7, 0x8, 0xb49b, 0xb9, 0x8, 0x7, 0x8, 0xc, 0x5, 0x7fffffff, 0x8000, 0x40, 0xc, 0x3, 0x2, 0x7fffffff, 0x81, 0x800, 0x2, 0xffffffff, 0xcbff, 0xd, 0x0, 0x8, 0x1, 0x5, 0x1, 0x5, 0x0, 0x1, 0x200, 0xa, 0x100, 0xfffffff8, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x9, 0xfffffff8, 0xde, 0x4, 0x7ff, 0x4, 0x101, 0x3c8eb757, 0x5, 0x0, 0x9, 0x1, 0x8, 0xd, 0xf, 0x1, 0x0, 0x2, 0xb3, 0x9, 0x5, 0x2, 0xfffffffe, 0x2, 0x3481, 0xf, 0x3ca, 0x40, 0x7fffffff, 0x1, 0x6, 0x5, 0x645c, 0xe367, 0xff, 0x1, 0x6, 0xb5, 0x7, 0xa, 0x6, 0x2, 0xba, 0x9, 0x80000001, 0x5, 0x8, 0x8, 0x0, 0x7, 0x0, 0x7fffffff, 0x1, 0x32b5c1bb, 0x1b5, 0x2, 0xa8, 0x2, 0x5, 0x163, 0x6, 0x3a, 0x7ff, 0xfffffff9, 0x9, 0x24, 0x9, 0x4, 0x3, 0xa5c, 0xfffffffb, 0x101, 0xd29, 0x5, 0x8, 0x401, 0x9, 0xfc, 0x9, 0x0, 0xffff, 0x120, 0x8, 0x7, 0x0, 0x3e0ccb75, 0x4c, 0x6, 0x1, 0xe, 0x7f, 0x0, 0xfffffff7, 0x1, 0x0, 0x115, 0x9, 0x41aeb496, 0xfffffff7, 0x6, 0x80000000, 0x2, 0x400, 0xfffffff0, 0x6, 0x485, 0x4, 0xd4e, 0x7, 0x0, 0x1, 0x1, 0x5, 0x6, 0x7fffffff, 0xc00, 0x4, 0x4, 0x6d, 0x5, 0x92, 0x7, 0x9, 0xfffff800, 0x9, 0x7, 0x8, 0x8a7, 0x2, 0x94, 0x6, 0x200, 0x4, 0x7, 0xe4, 0x80, 0x5, 0x0, 0x4, 0x8, 0x81, 0x7bcc, 0x0, 0x6, 0x1000, 0xd, 0x0, 0x0, 0x2, 0x5, 0x3, 0x8, 0x5, 0x100, 0x4, 0x58, 0x2, 0xe956, 0x5, 0x9, 0x0, 0xfdae, 0x8, 0x0, 0x7, 0x8001, 0x2, 0xa, 0x0, 0x8, 0x2, 0x7fff, 0xff, 0x8000, 0x10, 0x49, 0x0, 0x1, 0x55, 0x4, 0xc, 0x2, 0x8, 0xff1, 0xffffffc6, 0x1, 0x7, 0x3, 0x5, 0x7, 0x80000001, 0x10000, 0x83db, 0x2, 0xd, 0x1ff, 0x6, 0x0, 0x0, 0xb2, 0x61, 0x7, 0x80000001, 0xb9b, 0x4, 0x35, 0x8, 0x5, 0x7, 0x5, 0x0, 0x7, 0x9, 0x0, 0x4, 0x3, 0xffff, 0x5, 0xbfda, 0x3, 0x5, 0x0, 0x10001, 0x608, 0x0, 0x9, 0x6, 0x1, 0x63d, 0x6, 0xd92583, 0xa9, 0x2, 0x5, 0x6, 0x2, 0xffffffff, 0x9, 0xfffffc71, 0xfffffffe, 0xb, 0x4, 0x5, 0x9, 0x80, 0xfff, 0x2, 0x4, 0x2, 0x81, 0x3, 0x8, 0x682, 0x3, 0x5, 0x9f70, 0x0, 0x8, 0x0, 0x3, 0x3, 0x0, 0x8, 0x0, 0x7f, 0x9ecd, 0x5, 0xb3d, 0x3, 0x9, 0x5, 0xeea1, 0x0, 0xfffffffe, 0x9, 0x6, 0x0, 0x5, 0x101, 0xf5, 0x1, 0xfffffff0, 0xd121, 0x6, 0x4, 0xffffff00, 0x80000000, 0x5, 0xd, 0xf3c, 0x7fffffff, 0x1ff, 0x7, 0x94, 0x8001, 0x0, 0x2, 0x9, 0x6, 0x6, 0x8001, 0x6, 0x0, 0x8000, 0x6, 0x9, 0x4, 0x9d, 0x9, 0x80000001, 0x7, 0x7f8, 0xcb9c, 0x1, 0x6, 0xe, 0x400, 0x1, 0x6, 0x5, 0x51e, 0x7, 0xfffffffd, 0x7, 0x97f1, 0xb, 0x80000001, 0xaa, 0xffff81f5, 0x80, 0x8, 0x9, 0x8, 0x1, 0xffffffe3, 0x5086, 0x4, 0x8, 0x2, 0x8, 0x54d8, 0x1000, 0x7, 0x5848, 0x83, 0x2, 0x10001, 0x5, 0x65b97b8b, 0x1, 0x2, 0x400, 0x3, 0x5, 0x0, 0xa65, 0x280, 0x0, 0xf74, 0x3, 0x2, 0x3, 0x7, 0x400, 0x9, 0x2, 0xfffff122, 0x7fffffff, 0x8, 0x1, 0x1, 0x2, 0x1, 0x9, 0x8000, 0x7274, 0x8001, 0xffff46da, 0x469, 0x9, 0x6, 0x9, 0x3, 0xf, 0x0, 0x0, 0x8, 0x6, 0x3, 0x1, 0xfffffff8, 0x7df2, 0xe939, 0x7, 0x10, 0x6, 0x2, 0x1, 0x8, 0x1145, 0x7, 0xa, 0xe72, 0x2, 0x1, 0x40000, 0x9, 0xfffffffc, 0x5, 0x293400, 0x6c, 0x56, 0x9, 0xfffffff7, 0x80, 0x0, 0x9f, 0x2, 0x3, 0xfff, 0x0, 0x2, 0x9, 0x9cd5, 0x8, 0x10001, 0x6, 0x6, 0xc02f, 0xc, 0xfffffffa, 0x0, 0x2, 0xa, 0x9, 0x6, 0x6, 0xffffffff, 0x3, 0x7, 0x439b, 0x0, 0x8, 0x8, 0x1, 0x15e, 0x9, 0xfffffffa, 0x800, 0x3, 0xe, 0xfffffe01, 0xfffffffb, 0xed2, 0x800, 0xb, 0x2, 0x6, 0x2, 0xa82c, 0x100, 0x5, 0x7ff, 0x8, 0x9, 0x7f, 0xd9, 0x7d, 0x8, 0x2, 0x1, 0x2, 0x9, 0x6, 0x9, 0x8efe, 0x8, 0x5, 0xc9, 0x2, 0x81, 0x6, 0x5, 0x4, 0x0, 0x9, 0x9, 0xfffffffd, 0x8, 0x34, 0x1, 0xe, 0x6, 0x10, 0xe62, 0x8, 0x8, 0x4, 0x0, 0x9, 0x830, 0x3, 0x0, 0x1b3, 0x0, 0x7, 0x8, 0x7, 0x7, 0x80, 0x8, 0x0, 0x80000000, 0xfffffff8, 0x5, 0x6, 0xfffffff8, 0x4a, 0x3a2, 0x5, 0x400, 0x612, 0x401, 0x200, 0x7, 0x8000, 0x9, 0x9, 0x800, 0xfff, 0x0, 0x8, 0x10001, 0x1, 0x10000, 0x1, 0xb10, 0x43, 0x2, 0x2, 0x1, 0x1, 0x7, 0x6, 0x40, 0x3, 0x800, 0x101, 0x0, 0x6d3a, 0x3, 0xffffffff, 0x1, 0xa59, 0x5, 0x3e6, 0x90000000, 0x101, 0x3, 0xbbd3, 0x4, 0x6, 0xfe1, 0x2, 0x8003, 0xe00, 0xfffe0000, 0x5, 0xfffffffb, 0x8001, 0x10001, 0xfa, 0xb, 0x6, 0xe4, 0x6, 0x2, 0x8, 0x1, 0x1ff, 0x84e, 0x30, 0x2, 0x7, 0x0, 0x7fff, 0x1, 0xfffffffa, 0x300, 0x12c, 0x4, 0xc, 0x6, 0x9, 0x7, 0x40, 0x0, 0xcc, 0x4e6, 0x80000000, 0x2, 0xc202, 0x4cfda994, 0x2, 0x5, 0xfffffbff, 0x9, 0xb, 0x200, 0xd3, 0x0, 0x2, 0x3, 0x8, 0x1, 0x7, 0x5, 0xffffffff, 0x6, 0x8, 0x80, 0x7, 0x1, 0x0, 0x874c, 0x7f, 0x1, 0x4, 0x5, 0x9, 0x26d2, 0x8, 0x5, 0x0, 0x10, 0x40002, 0x8000, 0x101, 0x22, 0x0, 0x8, 0x5, 0xf75, 0x2, 0xce, 0x0, 0x5, 0x1d, 0x32d, 0x6, 0x8, 0x1951759c, 0x7, 0x4, 0x101, 0x2, 0x81, 0x9, 0xff, 0x8, 0x1ff, 0xaad3, 0x3, 0xc7, 0x2, 0x4, 0x296, 0x8000, 0x1, 0xfffffffe, 0xc9, 0x1000000, 0x9, 0x1, 0x3, 0x5, 0x4, 0x3, 0x10001, 0x3, 0x8, 0x3, 0x9, 0x3, 0x7, 0x9, 0x2, 0x25, 0x4, 0x6, 0xe, 0x6, 0x200, 0x1, 0x9, 0x6, 0x800, 0x5, 0xfffffffc, 0xfffffffa, 0xe6ba, 0x9, 0x8, 0x10000, 0x222eee1a, 0x4, 0x400000, 0x1000, 0xb9a3, 0x7, 0x1, 0xb0, 0x0, 0x0, 0x9, 0xc, 0x500, 0xf1b, 0x0, 0x8, 0x8, 0x6, 0x9, 0x8fd, 0x1, 0x0, 0x8c, 0xd25, 0xfffff001, 0x80000000, 0x5, 0x7ff, 0x4, 0x4, 0x6, 0x2, 0x1, 0x7, 0x9, 0x1, 0x8, 0x2, 0x6, 0x8, 0x4, 0x1, 0xfffffffe, 0x1, 0x3, 0x800, 0x5, 0x7, 0xff, 0x7, 0xc5aa, 0xc, 0x3, 0x7ff, 0xfffffc01, 0x6, 0x4, 0x4, 0x80, 0x4, 0x80000001, 0x80000000, 0xe, 0x0, 0x7, 0x0, 0x9, 0x1, 0x7, 0xa3, 0xfffffffd, 0x283e, 0x3, 0x5, 0x8, 0xb6, 0x4, 0x0, 0x1, 0x7fffffff, 0x1000, 0x4, 0x4, 0x8, 0x4, 0x8, 0xc25c, 0x3, 0xe, 0x9, 0x6, 0x9, 0x518d1433, 0x98, 0x0, 0x7, 0x3, 0x9, 0x9, 0x3, 0x6, 0x8, 0x100, 0x5, 0x2, 0x4, 0xa, 0x0, 0x0, 0xf4, 0x27e, 0x5, 0x557a23e2, 0x5, 0x7, 0xffffffc0, 0xc, 0xb11, 0x6b8d, 0x7, 0x1ff, 0x4, 0x80, 0xf022, 0x3, 0xffffffff, 0x3, 0x7, 0x80000001, 0x10001, 0x2, 0x8, 0xffffffc0, 0xe58, 0x9, 0x7, 0x9, 0x1, 0x6, 0x401, 0x401, 0x6, 0x2, 0xfffffffd, 0x4, 0x4, 0x5, 0xef3, 0x1000, 0x9, 0x5, 0x7, 0x1, 0x8, 0x8, 0x2, 0x8f0e, 0x1, 0x3, 0x860, 0xee4, 0x7f, 0x81, 0x5, 0x2, 0x3, 0x9, 0x1, 0x6, 0x5, 0x10, 0x2, 0x1, 0xff, 0xff, 0x6, 0xc, 0xb, 0x0, 0x7, 0x3, 0x8, 0x2, 0xf5, 0xfffffff9, 0x26ef, 0xffff95b8, 0x4, 0x76, 0x1, 0x0, 0xfff, 0x7, 0x374, 0x9, 0xff, 0x6, 0x7f, 0x80, 0x52, 0xfffffff6, 0x9, 0x9, 0x3, 0x2, 0x7f, 0x9, 0x2, 0x1000, 0x3, 0xf5c, 0x1908, 0xc50, 0x800, 0x0, 0x7fff, 0xffff0000, 0x1ff, 0xc019, 0x6, 0x0, 0x2, 0x9, 0x400, 0x1f95e79d, 0x10000, 0xefe, 0x8, 0x0, 0x8, 0x6fe2, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0x1, 0x6d2, 0x10000, 0x2, 0x9, 0x8, 0xe, 0xf6, 0x1, 0x8, 0x1, 0x1, 0x2, 0xffffffff, 0x2, 0x2, 0x1, 0x80000000, 0x6, 0x6, 0x92, 0x1, 0xf, 0x6, 0x40000000, 0x1, 0x4, 0xc10, 0xa349, 0xfffffe00, 0x0, 0xfffffff7, 0x5, 0x1, 0x2, 0x6, 0x1, 0x7, 0x4, 0x854, 0x1, 0x101], 0x1, 0x400, 0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000208000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x4, 0x1, 0xfffa7000, 0x200000, &(0x7f0000200000/0x200000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2}}, 0x20) 2.941911015s ago: executing program 5 (id=1607): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r1) r5 = fcntl$dupfd(r0, 0x406, r3) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000280)='\x00'/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000380)={0x0, r4}) 2.49409819s ago: executing program 5 (id=1608): r0 = openat$sysctl(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000740)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc98, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x28}}, 0x0) write$tun(r1, &(0x7f00000009c0)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='ABCD'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) 2.409301819s ago: executing program 4 (id=1609): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000500)=ANY=[], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/rfcomm0\x00', 0x802, 0x0) syz_create_resource$futex(0x0) mount(0x0, 0x0, &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x844) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000300)={'bridge0\x00', &(0x7f0000000580)=@ethtool_ringparam={0x12, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000a40)=ANY=[], 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x5402, 0x0) 2.107943979s ago: executing program 5 (id=1610): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x10002, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/sda\x00', 0x101042, 0x5) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000500)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x10001, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0x3, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff]], '\x00', [{0x10, 0x1007, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x270e, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000780)={0x1, 0x8, 0xa4b1, 0x3ff, 0x80000000, 0xc182, 0x8001, 0x8, 0x6, 0x2, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x3d, 0x0, &(0x7f0000000040)=0x37) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='./bus\x00', 0x0, &(0x7f00000008c0)=ANY=[], 0x1, 0x11f4, &(0x7f0000001100)="$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") ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000002300)=0x4) socket(0x28, 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000725f9c20ac050086cbe80102030109021be500c09610070904"], 0x0) 1.291893681s ago: executing program 4 (id=1611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 1.09277542s ago: executing program 1 (id=1612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x4a102) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 879.252632ms ago: executing program 6 (id=1613): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) 376.318032ms ago: executing program 6 (id=1614): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/events/irq/irq_handler_entry/filter\x00', 0x148282, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) syz_emit_vhci(0x0, 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f00000006c0)='\x00', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000740)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0xfd, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x6, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/142, 0x8e}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffe00}], 0x2, 0x140, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000440)={0xf400, 0x1000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x0, 0x40002) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f0000000540)) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f00000005c0)={0x0, {0x0, 0x0, @qam}}) 111.455299ms ago: executing program 4 (id=1615): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/events/irq/irq_handler_entry/filter\x00', 0x148282, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) syz_emit_vhci(0x0, 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f00000006c0)='\x00', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000740)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0xfd, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x6, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/142, 0x8e}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffe00}], 0x2, 0x140, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000440)={0xf400, 0x1000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x0, 0x40002) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f0000000540)) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f00000005c0)={0x0, {0x0, 0x0, @qam}}) 0s ago: executing program 9 (id=1616): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): maxpacket 1024 [ 440.490646][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.497007][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.504886][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 440.704041][ T4682] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 440.723077][ T4682] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.762410][ T4682] usb 7-1: Product: syz [ 440.792480][ T4682] usb 7-1: Manufacturer: syz [ 440.812696][ T4682] usb 7-1: SerialNumber: syz [ 440.874263][ T9058] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 441.106566][ T9055] device syz_tun left promiscuous mode [ 441.374324][ T4682] usb 7-1: probing VID:PID(0424:012C) [ 441.505872][ T4682] usb 7-1: vub300 testing BULK OUT EndPoint(0) 0C [ 441.512785][ T4682] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 441.537663][ T4682] vub300: probe of 7-1:127.138 failed with error -22 [ 441.744265][ T4682] usb 7-1: USB disconnect, device number 6 [ 444.410118][ T9123] ip_tables: iptables: counters copy to user failed while replacing table [ 445.994221][ T5558] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 446.914392][ T5558] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 446.922823][ T5558] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.086829][ T5558] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 447.107296][ T5558] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 447.146916][ T5558] usb 8-1: Manufacturer: syz [ 447.328944][ T5558] usb 8-1: config 0 descriptor?? [ 447.903943][ T5558] rc_core: IR keymap rc-hauppauge not found [ 447.909934][ T5558] Registered IR keymap rc-empty [ 447.919938][ T5558] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 447.960653][ T5558] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input15 [ 448.013947][ T4682] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 448.035979][ T9150] loop4: detected capacity change from 0 to 32768 [ 448.134516][ T9150] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.910 (9150) [ 448.178892][ T9150] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 448.303906][ T9150] BTRFS info (device loop4): use zlib compression, level 3 [ 448.376559][ T9150] BTRFS info (device loop4): using free space tree [ 448.394057][ T4682] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 448.423979][ T5558] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 448.432831][ T4682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.504111][ T9150] BTRFS info (device loop4): has skinny extents [ 448.624191][ T4682] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 448.624225][ T4682] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 448.624247][ T4682] usb 4-1: Manufacturer: syz [ 448.625980][ T4682] usb 4-1: config 0 descriptor?? [ 448.853899][ T4682] rc_core: IR keymap rc-hauppauge not found [ 448.853917][ T4682] Registered IR keymap rc-empty [ 448.854537][ T4682] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 448.855487][ T4682] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input16 [ 448.858298][ T5558] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 448.858340][ T5558] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.954056][ T5558] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 448.954090][ T5558] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 448.954112][ T5558] usb 6-1: Manufacturer: syz [ 449.096661][ T5558] usb 6-1: config 0 descriptor?? [ 449.375166][ T9150] BTRFS info (device loop4): enabling ssd optimizations [ 449.601636][ T6973] usb 4-1: USB disconnect, device number 13 [ 449.626120][ T13] usb 8-1: USB disconnect, device number 3 [ 449.651646][ T9214] overlayfs: missing 'lowerdir' [ 449.694093][ T5558] rc_core: IR keymap rc-hauppauge not found [ 449.700606][ T5558] Registered IR keymap rc-empty [ 449.739685][ T5558] rc rc2: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc2 [ 449.740842][ T5558] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc2/input17 [ 450.084065][ T13] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 450.444048][ T13] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 450.444094][ T13] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.524043][ T13] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 450.524113][ T13] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 450.524171][ T13] usb 8-1: Manufacturer: syz [ 450.528962][ T13] usb 8-1: config 0 descriptor?? [ 450.893989][ T13] rc_core: IR keymap rc-hauppauge not found [ 450.899996][ T13] Registered IR keymap rc-empty [ 450.974045][ T13] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 451.054351][ T13] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input18 [ 451.198029][ T6973] usb 8-1: USB disconnect, device number 4 [ 451.309746][ T4682] usb 6-1: USB disconnect, device number 7 [ 452.353956][ T5563] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 454.634046][ T5563] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 454.694015][ T5563] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.777089][ T9277] device syz_tun entered promiscuous mode [ 454.814107][ T5563] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 454.853696][ T5563] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 454.882161][ T5563] usb 7-1: Manufacturer: syz [ 454.910149][ T5563] usb 7-1: config 0 descriptor?? [ 455.103986][ T5563] rc_core: IR keymap rc-hauppauge not found [ 455.121156][ T5563] Registered IR keymap rc-empty [ 455.134931][ T5563] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 455.164021][ T5558] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 455.172919][ T5563] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 455.226522][ T5563] usb 7-1: USB disconnect, device number 7 [ 455.924212][ T5558] usb 4-1: config 127 has an invalid interface number: 138 but max is 0 [ 455.932637][ T5558] usb 4-1: config 127 has no interface number 0 [ 455.963013][ T5558] usb 4-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 456.134039][ T5558] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 456.208617][ T5558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.412475][ T5558] usb 4-1: Product: syz [ 457.416972][ T5558] usb 4-1: Manufacturer: syz [ 457.421624][ T5558] usb 4-1: SerialNumber: syz [ 457.514240][ T9278] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 458.723053][ T9276] device syz_tun left promiscuous mode [ 458.894072][ T5558] usb 4-1: probing VID:PID(0424:012C) [ 458.922607][ T5558] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0C [ 459.083919][ T5558] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 459.539902][ T4201] Bluetooth: hci1: link tx timeout [ 459.547178][ T4201] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 459.556765][ T4201] Bluetooth: hci1: link tx timeout [ 459.561961][ T4201] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 459.587346][ T5558] vub300: probe of 4-1:127.138 failed with error -22 [ 459.631542][ T5558] usb 4-1: USB disconnect, device number 14 [ 460.435608][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 460.453944][ T4263] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 460.616034][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 460.707425][ T9349] netlink: 64 bytes leftover after parsing attributes in process `syz.6.948'. [ 460.854068][ T4263] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 460.907774][ T4263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.643633][ T8568] Bluetooth: hci1: command 0x0406 tx timeout [ 462.954101][ T4263] usb 6-1: string descriptor 0 read error: -71 [ 462.975084][ T4263] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 463.026056][ T4263] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 463.174672][ T4263] usb 6-1: config 0 descriptor?? [ 463.194770][ T4263] usb 6-1: can't set config #0, error -71 [ 463.724350][ T4263] usb 6-1: USB disconnect, device number 8 [ 465.645146][ T9405] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 466.844009][ T6975] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 468.027299][ T9451] loop7: detected capacity change from 0 to 1024 [ 468.037547][ T6975] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 468.094265][ T6975] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.107360][ T6975] usb 4-1: config 0 interface 0 has no altsetting 0 [ 468.126056][ T6975] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 468.378437][ T9451] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 468.640401][ T6975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.652161][ T6975] usb 4-1: config 0 descriptor?? [ 469.034537][ T9470] ip_tables: iptables: counters copy to user failed while replacing table [ 471.983977][ T6919] syz-executor (6919) used greatest stack depth: 19888 bytes left [ 472.145142][ T1174] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.344150][ T6975] usbhid 4-1:0.0: can't add hid device: -71 [ 472.457741][ T6975] usbhid: probe of 4-1:0.0 failed with error -71 [ 473.365862][ T6975] usb 4-1: USB disconnect, device number 15 [ 473.475282][ T1174] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.520172][ T9522] device syz_tun entered promiscuous mode [ 473.563309][ T1174] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.770047][ T1174] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.181767][ T4266] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 474.481422][ T9530] rxe_eth0 speed is unknown, defaulting to 1000 [ 474.710669][ T4266] usb 5-1: config 127 has an invalid interface number: 138 but max is 0 [ 475.109241][ T4266] usb 5-1: config 127 has no interface number 0 [ 475.178347][ T4266] usb 5-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 475.374203][ T4266] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 475.383963][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.391976][ T4266] usb 5-1: Product: syz [ 475.403935][ T4266] usb 5-1: Manufacturer: syz [ 475.413927][ T4266] usb 5-1: SerialNumber: syz [ 475.415151][ T9530] chnl_net:caif_netlink_parms(): no params data found [ 475.444784][ T9522] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 475.629615][ T9530] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.663537][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.672322][ T9530] device bridge_slave_0 entered promiscuous mode [ 475.688560][ T9521] device syz_tun left promiscuous mode [ 475.710568][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.724024][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.775127][ T9530] device bridge_slave_1 entered promiscuous mode [ 475.805195][ T9530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.817195][ T9530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.824124][ T4266] usb 5-1: probing VID:PID(0424:012C) [ 475.840551][ T4266] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0C [ 475.874518][ T9530] team0: Port device team_slave_0 added [ 475.885134][ T4266] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 475.892639][ T9530] team0: Port device team_slave_1 added [ 475.931025][ T4266] vub300: probe of 5-1:127.138 failed with error -22 [ 475.983653][ T4266] usb 5-1: USB disconnect, device number 9 [ 476.116615][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.711193][ T9583] netlink: 64 bytes leftover after parsing attributes in process `syz.5.996'. [ 477.690164][ T5563] Bluetooth: hci1: command 0x0409 tx timeout [ 477.772836][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.825222][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 480.056626][ T9530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.073421][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.080507][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.131816][ T9530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.527270][ T9530] device hsr_slave_0 entered promiscuous mode [ 481.024385][ T9530] device hsr_slave_1 entered promiscuous mode [ 481.041426][ T9530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.070454][ T9530] Cannot create hsr debugfs directory [ 482.195386][ T5563] Bluetooth: hci1: command 0x040f tx timeout [ 482.695342][ T9530] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 482.745001][ T9530] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 482.826197][ T1174] device hsr_slave_0 left promiscuous mode [ 483.840119][ T1174] device hsr_slave_1 left promiscuous mode [ 483.951664][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.002122][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.114251][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.121985][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.134403][ T1174] device bridge_slave_1 left promiscuous mode [ 484.141175][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.250994][ T1174] device bridge_slave_0 left promiscuous mode [ 484.257251][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.270169][ T1174] device veth1_macvtap left promiscuous mode [ 484.276282][ T5563] Bluetooth: hci1: command 0x0419 tx timeout [ 484.282361][ T1174] device veth0_macvtap left promiscuous mode [ 484.288998][ T1174] device veth1_vlan left promiscuous mode [ 484.295003][ T1174] device veth0_vlan left promiscuous mode [ 484.926414][ T6975] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 485.027125][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 485.041641][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 485.060073][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.076594][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.119186][ T9658] loop3: detected capacity change from 0 to 32768 [ 485.142076][ T9658] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1009 (9658) [ 485.175332][ T1174] bond0 (unregistering): Released all slaves [ 485.198116][ T9658] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 485.212106][ T9530] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 485.212366][ T9658] BTRFS info (device loop3): use zlib compression, level 3 [ 485.228523][ T9658] BTRFS info (device loop3): using free space tree [ 485.235596][ T9658] BTRFS info (device loop3): has skinny extents [ 485.325636][ T9657] device syz_tun entered promiscuous mode [ 485.353132][ T9530] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 485.377179][ T6975] usb 5-1: config 127 has an invalid interface number: 138 but max is 0 [ 485.406038][ T6975] usb 5-1: config 127 has no interface number 0 [ 485.435584][ T6975] usb 5-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 485.509230][ T9530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.527108][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 485.535208][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 485.602893][ T9530] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.635625][ T9658] BTRFS info (device loop3): enabling ssd optimizations [ 485.684690][ T6975] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 485.732150][ T9658] overlayfs: missing 'workdir' [ 485.739906][ T6975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.792723][ T6975] usb 5-1: Product: syz [ 485.811689][ T6975] usb 5-1: Manufacturer: syz [ 485.839582][ T6975] usb 5-1: SerialNumber: syz [ 485.874286][ T9659] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 485.970194][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.995806][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 486.018301][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.025432][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.082976][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 486.135446][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 486.156161][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.163285][ T6090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.203341][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 486.261737][ T9655] device syz_tun left promiscuous mode [ 486.267489][ T6975] usb 5-1: probing VID:PID(0424:012C) [ 486.284063][ T6975] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0C [ 486.285492][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 486.304416][ T6975] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 486.436262][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 486.451849][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 486.477097][ T6975] vub300: probe of 5-1:127.138 failed with error -22 [ 486.506396][ T6975] usb 5-1: USB disconnect, device number 10 [ 486.699541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 486.862328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.077576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.217686][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 487.227199][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.238955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.269301][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 487.313799][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.249569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 488.283172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 488.436066][ T9530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.455516][ T9774] device syz_tun entered promiscuous mode [ 492.483998][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.503050][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.644783][ T9530] device veth0_vlan entered promiscuous mode [ 492.684464][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.715011][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.757008][ T9530] device veth1_vlan entered promiscuous mode [ 492.773967][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.833999][ T4265] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 492.856984][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 492.912416][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 493.003700][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 493.030222][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 493.070426][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 493.114448][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.153672][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.194545][ T9530] device veth0_macvtap entered promiscuous mode [ 493.224032][ T4265] usb 5-1: config 127 has an invalid interface number: 138 but max is 0 [ 493.232401][ T4265] usb 5-1: config 127 has no interface number 0 [ 493.268134][ T9530] device veth1_macvtap entered promiscuous mode [ 493.288385][ T4265] usb 5-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 493.332175][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.387931][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.413067][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.426269][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.439451][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.451118][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.464300][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.514019][ T4265] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 493.613994][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.638458][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.648646][ T4265] usb 5-1: Product: syz [ 493.652974][ T4265] usb 5-1: Manufacturer: syz [ 494.005418][ T4265] usb 5-1: SerialNumber: syz [ 494.034184][ T9775] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 494.055351][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.076467][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 494.100073][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 494.130785][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 494.155297][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 494.248806][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.299885][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.351514][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.379290][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.399633][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.429592][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.463452][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.475458][ T4265] usb 5-1: probing VID:PID(0424:012C) [ 494.488100][ T4265] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0C [ 494.504580][ T4265] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 494.516906][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.544739][ T4265] vub300: probe of 5-1:127.138 failed with error -22 [ 494.561210][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.568999][ T9530] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.569075][ T9530] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.569101][ T9530] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.569126][ T9530] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.570180][ T4265] usb 5-1: USB disconnect, device number 11 [ 494.572611][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 494.573192][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 494.573931][ T9772] device syz_tun left promiscuous mode [ 494.925657][ T8723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.925717][ T8723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.926373][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 495.472971][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.472994][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.625155][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 495.916415][ T9855] device syzkaller0 entered promiscuous mode [ 495.952625][ T9855] tipc: Started in network mode [ 496.101025][ T9855] tipc: Node identity 8a7ed39252cd, cluster identity 4711 [ 496.271370][ T9855] tipc: Enabled bearer , priority 0 [ 497.371186][ T9855] tipc: Resetting bearer [ 497.390503][ T9854] tipc: Resetting bearer [ 497.472330][ T9854] tipc: Disabling bearer [ 497.533790][ T9876] tipc: Started in network mode [ 497.704669][ T9876] tipc: Node identity fa1b20546472, cluster identity 4711 [ 497.712507][ T9876] tipc: Enabled bearer , priority 0 [ 498.125390][ T9875] tipc: Disabling bearer [ 499.364248][ T9897] ip_tables: iptables: counters copy to user failed while replacing table [ 499.623940][ T9901] ip_tables: iptables: counters copy to user failed while replacing table [ 501.001730][ T9914] ip_tables: iptables: counters copy to user failed while replacing table [ 501.107692][ T9910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 501.664942][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.671254][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.244745][ T4280] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 505.424070][ T8568] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 505.654619][ T4280] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 505.654650][ T4280] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.744516][ T4280] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 505.864050][ T8568] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 506.713969][ T8568] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.714072][ T4280] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 506.714094][ T4280] usb 7-1: Manufacturer: syz [ 506.723788][ T4280] usb 7-1: config 0 descriptor?? [ 506.814033][ T8568] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 506.814068][ T8568] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 506.814090][ T8568] usb 6-1: Manufacturer: syz [ 506.815758][ T8568] usb 6-1: config 0 descriptor?? [ 506.903942][ T4280] rc_core: IR keymap rc-hauppauge not found [ 506.903959][ T4280] Registered IR keymap rc-empty [ 506.904718][ T4280] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 506.905787][ T4280] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input20 [ 507.037232][ T8568] rc_core: IR keymap rc-hauppauge not found [ 507.037251][ T8568] Registered IR keymap rc-empty [ 507.037848][ T8568] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 507.038779][ T8568] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input21 [ 508.874196][ T4682] usb 6-1: USB disconnect, device number 9 [ 508.885940][ T4401] usb 7-1: USB disconnect, device number 8 [ 509.682986][T10001] loop4: detected capacity change from 0 to 32768 [ 509.740480][T10001] ERROR: (device loop4): diRead: i_ino != di_number [ 509.740480][T10001] [ 513.243225][T10078] device syzkaller0 entered promiscuous mode [ 513.257673][T10078] tipc: Enabled bearer , priority 0 [ 513.289992][T10078] tipc: Resetting bearer [ 513.329691][T10077] tipc: Resetting bearer [ 513.347150][T10077] tipc: Disabling bearer [ 513.413829][T10087] device syzkaller0 entered promiscuous mode [ 513.472673][T10087] tipc: Started in network mode [ 513.497964][T10087] tipc: Node identity 0a25636c959f, cluster identity 4711 [ 513.510128][T10087] tipc: Enabled bearer , priority 0 [ 513.571300][T10087] tipc: Resetting bearer [ 513.599368][T10086] tipc: Resetting bearer [ 513.621833][T10086] tipc: Disabling bearer [ 514.727611][T10092] loop8: detected capacity change from 0 to 32768 [ 514.800468][T10092] ERROR: (device loop8): diRead: i_ino != di_number [ 514.800468][T10092] [ 519.836883][T10208] device syzkaller0 entered promiscuous mode [ 519.869360][T10208] tipc: Enabled bearer , priority 0 [ 519.886742][T10180] loop3: detected capacity change from 0 to 32768 [ 519.914325][T10180] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1096 (10180) [ 519.948167][T10207] tipc: Resetting bearer [ 519.991551][T10207] tipc: Disabling bearer [ 520.010020][T10180] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 520.025717][ T4201] Bluetooth: hci1: link tx timeout [ 520.032036][ T4201] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 520.040436][T10180] BTRFS info (device loop3): use zlib compression, level 3 [ 520.053311][T10180] BTRFS info (device loop3): using free space tree [ 520.082736][T10180] BTRFS info (device loop3): has skinny extents [ 520.271791][T10196] loop4: detected capacity change from 0 to 32768 [ 520.380510][T10196] ERROR: (device loop4): diRead: i_ino != di_number [ 520.380510][T10196] [ 520.774687][T10180] BTRFS info (device loop3): enabling ssd optimizations [ 522.242904][ T5559] Bluetooth: hci1: command 0x0406 tx timeout [ 522.950454][ T4201] Bluetooth: hci1: link tx timeout [ 522.955649][ T4201] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 523.681549][T10289] usb usb7: usbfs: process 10289 (syz.6.1112) did not claim interface 0 before use [ 523.770290][T10295] device syz_tun entered promiscuous mode [ 523.891729][T10302] loop8: detected capacity change from 0 to 1024 [ 523.978945][T10302] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 524.048815][T10302] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 524.069766][ T4201] Bluetooth: hci1: link tx timeout [ 524.075109][ T4401] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 524.082749][ T4201] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 524.444176][ T4401] usb 5-1: config 127 has an invalid interface number: 138 but max is 0 [ 524.462941][ T4401] usb 5-1: config 127 has no interface number 0 [ 524.469505][ T4401] usb 5-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 524.616240][T10299] loop3: detected capacity change from 0 to 32768 [ 524.649999][T10299] ERROR: (device loop3): diRead: i_ino != di_number [ 524.649999][T10299] [ 524.674409][ T4401] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 524.710832][ T4401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.735843][ T4401] usb 5-1: Product: syz [ 524.770238][ T4401] usb 5-1: Manufacturer: syz [ 524.791602][ T4401] usb 5-1: SerialNumber: syz [ 524.824227][T10295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 524.938262][ T4348] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.006818][ T4348] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.052094][T10294] device syz_tun left promiscuous mode [ 525.714665][ T4348] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.794171][ T4401] usb 5-1: probing VID:PID(0424:012C) [ 525.801730][T10348] rxe_eth0 speed is unknown, defaulting to 1000 [ 525.809172][ T4401] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0C [ 525.816061][ T4401] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 525.832727][ T4348] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.844015][ T4401] vub300: probe of 5-1:127.138 failed with error -22 [ 525.853801][ T4401] usb 5-1: USB disconnect, device number 12 [ 526.210409][ T4348] tipc: Left network mode [ 526.249232][T10362] loop3: detected capacity change from 0 to 1024 [ 526.366511][T10367] usb usb7: usbfs: process 10367 (syz.6.1129) did not claim interface 0 before use [ 526.411851][T10362] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 526.514426][T10348] chnl_net:caif_netlink_parms(): no params data found [ 526.573412][T10362] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 526.703212][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.713195][T10348] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.721417][T10348] device bridge_slave_0 entered promiscuous mode [ 526.730546][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.737757][T10348] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.746134][T10348] device bridge_slave_1 entered promiscuous mode [ 526.779730][T10348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.802078][T10348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.014686][T10348] team0: Port device team_slave_0 added [ 527.043343][T10348] team0: Port device team_slave_1 added [ 527.125205][T10348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.132299][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.794019][ T4401] Bluetooth: hci1: command 0x0409 tx timeout [ 527.854812][T10348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.881836][T10348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.904102][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.940833][T10348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.405425][T10348] device hsr_slave_0 entered promiscuous mode [ 528.443329][T10348] device hsr_slave_1 entered promiscuous mode [ 528.460587][T10348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.482105][T10348] Cannot create hsr debugfs directory [ 528.958385][ T4348] device hsr_slave_0 left promiscuous mode [ 528.982742][ T4348] device hsr_slave_1 left promiscuous mode [ 528.991632][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.999963][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.013076][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.027241][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.037505][ T4348] device bridge_slave_1 left promiscuous mode [ 529.044596][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.053415][ T4348] device bridge_slave_0 left promiscuous mode [ 529.066595][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.082048][ T4348] device veth1_macvtap left promiscuous mode [ 529.088757][ T4348] device veth0_macvtap left promiscuous mode [ 529.095454][ T4348] device veth1_vlan left promiscuous mode [ 529.101259][ T4348] device veth0_vlan left promiscuous mode [ 529.310398][ T4348] team0 (unregistering): Port device team_slave_1 removed [ 529.326075][ T4348] team0 (unregistering): Port device team_slave_0 removed [ 529.342081][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.370487][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.446659][ T4348] bond0 (unregistering): Released all slaves [ 529.452880][T10441] loop6: detected capacity change from 0 to 32768 [ 529.513801][T10430] rxe_eth0 speed is unknown, defaulting to 1000 [ 529.531985][T10441] ERROR: (device loop6): diRead: i_ino != di_number [ 529.531985][T10441] [ 529.668944][T10348] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 529.696493][T10348] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 529.744179][T10348] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 529.786992][T10348] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 529.883063][ T4401] Bluetooth: hci1: command 0x041b tx timeout [ 530.047556][T10348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.163708][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 530.182436][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.216623][T10348] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.256148][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1145'. [ 530.328761][T10477] process 'syz.4.1145' launched '/dev/fd/8' with NULL argv: empty string added [ 530.336565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 530.354732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 530.364321][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.371405][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.404228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 530.433306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 530.451888][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.459038][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.502005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 530.549201][T10430] chnl_net:caif_netlink_parms(): no params data found [ 530.591231][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 530.621223][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 530.643164][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 530.665770][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 530.714902][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 530.753068][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 530.831479][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 530.839416][ T4404] Bluetooth: hci3: command 0x0409 tx timeout [ 530.860685][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 530.920693][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 530.959860][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 531.005468][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.027381][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 531.751689][T10430] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.769210][T10430] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.800648][T10430] device bridge_slave_0 entered promiscuous mode [ 531.833121][T10430] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.873994][T10430] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.908715][T10430] device bridge_slave_1 entered promiscuous mode [ 531.954085][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 532.003113][T10430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.054240][T10430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.132308][T10430] team0: Port device team_slave_0 added [ 532.186416][T10430] team0: Port device team_slave_1 added [ 532.222686][T10348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.292311][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.310314][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.348301][T10430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.352298][T10504] loop5: detected capacity change from 0 to 32768 [ 532.397408][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.424704][T10504] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1150 (10504) [ 532.469693][T10504] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 532.494245][T10504] BTRFS info (device loop5): use zlib compression, level 3 [ 532.505468][T10430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.532260][T10504] BTRFS info (device loop5): using free space tree [ 532.561009][T10430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.578147][T10504] BTRFS info (device loop5): has skinny extents [ 532.606439][ T25] audit: type=1804 audit(1794309465.160:5): pid=10508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1151" name="bus" dev="ramfs" ino=49651 res=1 errno=0 [ 532.643711][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.691309][ T25] audit: type=1804 audit(1794309465.200:6): pid=10508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1151" name="bus" dev="ramfs" ino=49651 res=1 errno=0 [ 532.763749][T10430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.913962][ T4404] Bluetooth: hci3: command 0x041b tx timeout [ 532.950636][T10504] BTRFS info (device loop5): enabling ssd optimizations [ 533.060691][T10430] device hsr_slave_0 entered promiscuous mode [ 533.114794][T10430] device hsr_slave_1 entered promiscuous mode [ 533.130856][T10430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.176494][T10430] Cannot create hsr debugfs directory [ 533.319100][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 533.335586][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 533.390810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 533.411701][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 533.448507][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 533.474616][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 533.504916][T10348] device veth0_vlan entered promiscuous mode [ 533.610388][T10348] device veth1_vlan entered promiscuous mode [ 533.751871][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 533.765609][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 533.814667][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 533.822901][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 533.902682][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 533.954844][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 534.019902][T10348] device veth0_macvtap entered promiscuous mode [ 534.034085][ T4404] Bluetooth: hci1: command 0x0419 tx timeout [ 534.041345][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 534.058582][T10348] device veth1_macvtap entered promiscuous mode [ 534.122172][T10584] device syzkaller0 entered promiscuous mode [ 534.307763][T10562] loop4: detected capacity change from 0 to 32768 [ 534.353576][T10562] ERROR: (device loop4): diRead: i_ino != di_number [ 534.353576][T10562] [ 534.355228][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.406928][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.423757][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.440869][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.451063][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.468455][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.479744][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.490520][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.501904][T10348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.527226][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 534.539722][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 534.550964][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.561750][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.571947][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.583054][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.593001][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.603544][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.616801][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.627354][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.638255][T10348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.699643][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 534.709300][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 534.720256][T10348] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.735517][T10348] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.744541][T10348] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.753658][T10348] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.801238][ T4348] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.912152][ T4348] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.022409][ T4313] Bluetooth: hci3: command 0x040f tx timeout [ 535.069706][ T4348] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.283099][ T4348] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.310244][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.336045][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.376565][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 535.403345][ T8723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.419546][ T8723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.429641][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 536.347606][T10430] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 536.462227][T10430] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 536.551176][T10430] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 536.974786][T10430] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 537.079064][ T4313] Bluetooth: hci3: command 0x0419 tx timeout [ 537.801494][T10430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.888230][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 537.909837][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.942321][T10430] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.975611][ T25] audit: type=1804 audit(1794309470.530:7): pid=10633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1165" name="bus" dev="ramfs" ino=50737 res=1 errno=0 [ 537.995474][T10635] loop5: detected capacity change from 0 to 32768 [ 538.015005][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 538.023608][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 538.066405][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.073493][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.087817][T10635] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1164 (10635) [ 538.092767][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 538.122528][ T25] audit: type=1804 audit(1794309470.580:8): pid=10633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1165" name="bus" dev="ramfs" ino=50737 res=1 errno=0 [ 538.164176][T10635] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 538.181361][T10635] BTRFS info (device loop5): use zlib compression, level 3 [ 538.199104][T10635] BTRFS info (device loop5): using free space tree [ 538.200594][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 538.235925][T10635] BTRFS info (device loop5): has skinny extents [ 538.244400][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.251485][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.310905][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 538.357734][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 538.464208][T10635] BTRFS info (device loop5): enabling ssd optimizations [ 538.472663][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 538.500812][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 538.555335][T10642] loop6: detected capacity change from 0 to 32768 [ 538.573720][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 538.626073][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 538.635024][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 538.642835][T10642] ERROR: (device loop6): diRead: i_ino != di_number [ 538.642835][T10642] [ 538.643581][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 538.708722][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 538.739832][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 538.789790][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 538.806775][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 538.828332][T10430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 540.234443][T10430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.241514][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.254113][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 540.344494][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 540.360275][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 540.394056][ T4310] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 540.447392][T10430] device veth0_vlan entered promiscuous mode [ 540.522880][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 540.533363][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 540.638117][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 540.646325][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 540.660488][T10430] device veth1_vlan entered promiscuous mode [ 540.694977][ T4348] device hsr_slave_0 left promiscuous mode [ 540.706502][ T4348] device hsr_slave_1 left promiscuous mode [ 540.715496][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.723058][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.735429][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.742943][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.752409][ T4348] device bridge_slave_1 left promiscuous mode [ 540.760510][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.770399][ T4348] device bridge_slave_0 left promiscuous mode [ 540.779846][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.791137][ T4348] device veth1_macvtap left promiscuous mode [ 540.799461][ T4348] device veth0_macvtap left promiscuous mode [ 540.807399][ T4348] device veth1_vlan left promiscuous mode [ 540.813181][ T4348] device veth0_vlan left promiscuous mode [ 540.814089][ T4310] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 540.828614][ T4310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.914103][ T4310] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 540.923670][ T4310] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 540.931929][ T4310] usb 5-1: Manufacturer: syz [ 540.947530][ T4310] usb 5-1: config 0 descriptor?? [ 541.029265][ T4348] team0 (unregistering): Port device team_slave_1 removed [ 541.050221][ T4348] team0 (unregistering): Port device team_slave_0 removed [ 541.061852][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.084023][ T4310] rc_core: IR keymap rc-hauppauge not found [ 541.090279][ T4310] Registered IR keymap rc-empty [ 541.094687][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.096324][ T4310] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 541.115441][ T4310] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 541.227794][ T4348] bond0 (unregistering): Released all slaves [ 541.268262][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 541.288377][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 541.304771][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 541.327564][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 541.339424][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 541.342062][T10430] device veth0_macvtap entered promiscuous mode [ 541.360534][T10430] device veth1_macvtap entered promiscuous mode [ 541.386113][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.386135][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.386145][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.425926][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.442692][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.442714][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.442732][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.482249][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.483726][T10430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.507739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 541.519897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 541.526234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 541.549821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 541.571071][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.571092][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.571103][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.642754][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.664666][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.687279][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.710350][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.721594][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.733015][T10430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.755604][ T4267] usb 5-1: USB disconnect, device number 13 [ 541.760588][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 541.770797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 541.803577][T10430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.812749][T10430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.822025][T10430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.832083][T10430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.850615][T10718] usb usb7: usbfs: process 10718 (syz.6.1177) did not claim interface 0 before use [ 542.736672][T10724] loop6: detected capacity change from 0 to 32768 [ 542.756479][T10724] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1179 (10724) [ 542.789672][T10724] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 542.813956][T10724] BTRFS info (device loop6): use zlib compression, level 3 [ 542.834205][T10724] BTRFS info (device loop6): using free space tree [ 542.840860][T10724] BTRFS info (device loop6): has skinny extents [ 543.054601][T10724] BTRFS info (device loop6): enabling ssd optimizations [ 543.369054][T10692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.543271][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.563109][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.599248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 543.680062][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.735043][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.790491][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 544.006604][T10762] block device autoloading is deprecated and will be removed. [ 545.200691][T10795] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 545.790229][T10818] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 546.020139][T10832] usb usb7: usbfs: process 10832 (syz.6.1197) did not claim interface 0 before use [ 549.004082][ T6974] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 549.320342][ T4404] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 549.374130][ T4267] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 549.451247][ T6974] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 549.459829][ T6974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.578482][ T6974] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 549.597954][ T6974] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 549.613919][ T6974] usb 6-1: Manufacturer: syz [ 549.631382][ T6974] usb 6-1: config 0 descriptor?? [ 549.694156][ T4404] usb 10-1: config 127 has an invalid interface number: 138 but max is 0 [ 549.702618][ T4404] usb 10-1: config 127 has no interface number 0 [ 549.739174][ T4404] usb 10-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 549.764194][ T4267] usb 2-1: config 127 has an invalid interface number: 138 but max is 0 [ 549.764226][ T4267] usb 2-1: config 127 has no interface number 0 [ 549.764256][ T4267] usb 2-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 549.816075][ T6974] rc_core: IR keymap rc-hauppauge not found [ 549.816092][ T6974] Registered IR keymap rc-empty [ 549.816654][ T6974] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 549.855147][ T6974] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 549.898187][ T4404] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 549.898221][ T4404] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.898243][ T4404] usb 10-1: Product: syz [ 549.898259][ T4404] usb 10-1: Manufacturer: syz [ 549.898275][ T4404] usb 10-1: SerialNumber: syz [ 549.914282][T10909] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 549.944158][ T4267] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 549.944193][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.944216][ T4267] usb 2-1: Product: syz [ 549.944231][ T4267] usb 2-1: Manufacturer: syz [ 549.944248][ T4267] usb 2-1: SerialNumber: syz [ 549.992838][T10912] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 550.294021][ T4404] usb 10-1: probing VID:PID(0424:012C) [ 550.308523][ T4404] usb 10-1: vub300 testing BULK OUT EndPoint(0) 0C [ 550.325632][ T4404] usb 10-1: Could not find two sets of bulk-in/out endpoint pairs [ 550.327001][ T6974] usb 6-1: USB disconnect, device number 10 [ 550.347300][ T4404] vub300: probe of 10-1:127.138 failed with error -22 [ 550.358769][ T4404] usb 10-1: USB disconnect, device number 2 [ 550.374125][ T4267] usb 2-1: probing VID:PID(0424:012C) [ 550.380548][ T4267] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0C [ 550.416375][ T4267] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 550.442786][ T4267] vub300: probe of 2-1:127.138 failed with error -22 [ 550.484754][ T4267] usb 2-1: USB disconnect, device number 4 [ 550.791625][T10991] device syzkaller0 entered promiscuous mode [ 550.810413][T10993] device syzkaller0 entered promiscuous mode [ 550.841986][T10991] tipc: Enabled bearer , priority 0 [ 550.852074][T10993] tipc: Started in network mode [ 550.857710][T10993] tipc: Node identity 2aaa2c5a12d9, cluster identity 4711 [ 550.865603][T10993] tipc: Enabled bearer , priority 0 [ 550.880291][T10991] tipc: Resetting bearer [ 550.911736][T10993] tipc: Resetting bearer [ 550.924430][T10990] tipc: Resetting bearer [ 550.942254][T10990] tipc: Disabling bearer [ 550.952989][T10992] tipc: Resetting bearer [ 550.963219][T10992] tipc: Disabling bearer [ 553.983665][ T6974] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 554.389311][ T6974] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 554.402122][ T6974] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.574151][ T6974] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 554.593602][ T6974] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 554.641720][ T6974] usb 10-1: Manufacturer: syz [ 554.694833][ T6974] usb 10-1: config 0 descriptor?? [ 554.734508][ T4313] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 555.174068][ T6974] rc_core: IR keymap rc-hauppauge not found [ 555.180227][ T6974] Registered IR keymap rc-empty [ 555.213893][ T6974] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 555.432924][ T6974] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input24 [ 555.483697][ T6974] usb 10-1: USB disconnect, device number 3 [ 555.494000][ T4313] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 556.024970][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.081098][T11146] tipc: Started in network mode [ 556.104076][T11146] tipc: Node identity aa84e0f4217, cluster identity 4711 [ 556.114085][ T4313] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 556.121505][T11146] tipc: Enabled bearer , priority 0 [ 556.143480][ T4313] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 556.163713][ T4313] usb 5-1: Manufacturer: syz [ 556.184521][T11146] tipc: Resetting bearer [ 556.205778][ T4313] usb 5-1: config 0 descriptor?? [ 556.237405][T11145] tipc: Disabling bearer [ 556.258330][T11155] device syzkaller0 entered promiscuous mode [ 556.295174][T11155] tipc: Started in network mode [ 556.300106][T11155] tipc: Node identity aee6bb9b67b5, cluster identity 4711 [ 556.349699][T11155] tipc: Enabled bearer , priority 0 [ 556.374087][ T4313] rc_core: IR keymap rc-hauppauge not found [ 556.383079][ T4313] Registered IR keymap rc-empty [ 556.389704][ T4313] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 556.401408][ T4313] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 556.506772][T11155] tipc: Resetting bearer [ 556.558313][T11154] tipc: Resetting bearer [ 556.606258][T11154] tipc: Disabling bearer [ 556.637733][ T4404] usb 5-1: USB disconnect, device number 14 [ 558.650071][T11212] loop1: detected capacity change from 0 to 4096 [ 559.055511][T11212] EXT4-fs (loop1): Test dummy encryption mode enabled [ 559.062414][T11212] EXT4-fs (loop1): inline encryption not supported [ 559.069217][T11212] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 559.510545][T11212] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 562.143121][T11296] device syzkaller0 entered promiscuous mode [ 562.342968][T11306] loop1: detected capacity change from 0 to 512 [ 562.426114][T11306] EXT4-fs (loop1): 1 truncate cleaned up [ 562.438798][T11306] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 563.540063][T11312] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 563.554321][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.607151][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.673670][T11305] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1272: bg 0: block 465: padding at end of block bitmap is not set [ 564.384227][ T4404] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 564.794448][ T4404] usb 6-1: config 0 has no interfaces? [ 564.894234][ T4404] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 564.928061][ T4404] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 564.949713][ T4404] usb 6-1: Manufacturer: syz [ 564.993476][ T4404] usb 6-1: config 0 descriptor?? [ 565.231515][T11353] FAULT_INJECTION: forcing a failure. [ 565.231515][T11353] name failslab, interval 1, probability 0, space 0, times 1 [ 565.269636][T11353] CPU: 1 PID: 11353 Comm: syz.9.1274 Not tainted syzkaller #0 [ 565.277139][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 565.287240][T11353] Call Trace: [ 565.290602][T11353] [ 565.293616][T11353] dump_stack_lvl+0x188/0x250 [ 565.298398][T11353] ? show_regs_print_info+0x20/0x20 [ 565.303632][T11353] ? load_image+0x410/0x410 [ 565.308224][T11353] ? __might_sleep+0xf0/0xf0 [ 565.312912][T11353] ? __lock_acquire+0x7d40/0x7d40 [ 565.318072][T11353] should_fail+0x383/0x4b0 [ 565.322587][T11353] should_failslab+0x5/0x20 [ 565.327145][T11353] slab_pre_alloc_hook+0x51/0xc0 [ 565.333890][T11353] ? kvm_mmu_topup_memory_cache+0xd4/0x200 [ 565.334024][T11353] kmem_cache_alloc+0x3d/0x280 [ 565.334052][T11353] kvm_mmu_topup_memory_cache+0xd4/0x200 [ 565.334089][T11353] kvm_mmu_load+0x88/0x1aa0 [ 565.354834][T11353] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 565.354871][T11353] ? lockdep_hardirqs_on+0x94/0x140 [ 565.366110][T11353] ? kvm_apic_accept_events+0x576/0x580 [ 565.366176][T11353] ? lock_chain_count+0x20/0x20 [ 565.366202][T11353] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 565.366304][T11353] ? kvm_apic_has_interrupt+0x72d/0x740 [ 565.366327][T11353] ? kvm_lapic_enable_pv_eoi+0x140/0x140 [ 565.366361][T11353] vcpu_enter_guest+0x60da/0x6f70 [ 565.366431][T11353] ? local_bh_enable+0x20/0x20 [ 565.366453][T11353] ? is_bpf_text_address+0x254/0x270 [ 565.366513][T11353] ? mark_lock+0x94/0x320 [ 565.366536][T11353] ? __lock_acquire+0x13b3/0x7d40 [ 565.366563][T11353] ? kfree+0xef/0x2a0 [ 565.366614][T11353] ? llist_add_batch+0x85/0xa0 [ 565.366646][T11353] ? mark_lock+0x94/0x320 [ 565.366668][T11353] ? __lock_acquire+0x12df/0x7d40 [ 565.366708][T11353] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 565.366736][T11353] ? lock_chain_count+0x20/0x20 [ 565.366764][T11353] ? verify_lock_unused+0x140/0x140 [ 565.366788][T11353] ? vmx_vcpu_load_vmcs+0x184/0x790 [ 565.366817][T11353] ? vmx_vcpu_load_vmcs+0x2de/0x790 [ 565.366844][T11353] ? vmx_vcpu_load_vmcs+0x5a0/0x790 [ 565.366871][T11353] ? mark_lock+0x94/0x320 [ 565.366892][T11353] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 565.366930][T11353] ? __local_bh_enable_ip+0x136/0x1c0 [ 565.366978][T11353] ? lockdep_hardirqs_on+0x94/0x140 [ 565.367002][T11353] ? read_lock_is_recursive+0x10/0x10 [ 565.367025][T11353] ? __local_bh_enable_ip+0x136/0x1c0 [ 565.367047][T11353] ? _local_bh_enable+0xa0/0xa0 [ 565.367088][T11353] kvm_arch_vcpu_ioctl_run+0x804/0x1e40 [ 565.367120][T11353] kvm_vcpu_ioctl+0x8f2/0xc10 [ 565.367147][T11353] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 565.367194][T11353] ? bpf_lsm_file_ioctl+0x5/0x10 [ 565.367238][T11353] ? security_file_ioctl+0x7c/0xa0 [ 565.367314][T11353] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 565.367336][T11353] __se_sys_ioctl+0xfa/0x170 [ 565.367389][T11353] do_syscall_64+0x4c/0xa0 [ 565.367407][T11353] ? clear_bhb_loop+0x30/0x80 [ 565.367428][T11353] ? clear_bhb_loop+0x30/0x80 [ 565.367451][T11353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 565.367481][T11353] RIP: 0033:0x7ff66cd6af19 [ 565.367529][T11353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.367579][T11353] RSP: 002b:00007ff66afb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.367604][T11353] RAX: ffffffffffffffda RBX: 00007ff66cfe7fa0 RCX: 00007ff66cd6af19 [ 565.367621][T11353] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 565.367635][T11353] RBP: 00007ff66cdf9f6d R08: 0000000000000000 R09: 0000000000000000 [ 565.367650][T11353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.367663][T11353] R13: 00007ff66cfe8038 R14: 00007ff66cfe7fa0 R15: 00007fff21e79968 [ 565.367694][T11353] [ 565.386896][ T4404] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 565.484533][T11371] loop1: detected capacity change from 0 to 4096 [ 565.644013][T11371] EXT4-fs (loop1): Test dummy encryption mode enabled [ 565.644045][T11371] EXT4-fs (loop1): inline encryption not supported [ 565.644094][T11371] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 565.800029][T11371] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 565.814142][ T4404] usb 5-1: config 0 has no interfaces? [ 565.915930][ T4404] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 565.916403][ T4404] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 565.916706][ T4404] usb 5-1: Manufacturer: syz [ 565.983518][ T4404] usb 5-1: config 0 descriptor?? [ 567.122183][T11389] loop9: detected capacity change from 0 to 4096 [ 567.250050][T11389] EXT4-fs (loop9): Test dummy encryption mode enabled [ 567.250163][T11389] EXT4-fs (loop9): inline encryption not supported [ 567.250361][T11389] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 567.366007][T11389] EXT4-fs (loop9): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 570.821346][ T4267] usb 5-1: USB disconnect, device number 15 [ 570.839214][ T4310] usb 6-1: USB disconnect, device number 11 [ 572.346265][ T4310] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 572.734326][ T4310] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 572.742819][ T4310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.873964][ T4267] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 572.884285][ T4310] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 572.903558][ T4310] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 572.918014][ T4310] usb 6-1: Manufacturer: syz [ 572.951527][ T4310] usb 6-1: config 0 descriptor?? [ 573.213920][ T4310] rc_core: IR keymap rc-hauppauge not found [ 573.239625][ T4310] Registered IR keymap rc-empty [ 573.664012][T11495] loop9: detected capacity change from 0 to 4096 [ 573.838826][ T4310] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 574.288081][ T4310] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input26 [ 575.071411][T11495] EXT4-fs (loop9): Test dummy encryption mode enabled [ 575.078424][T11495] EXT4-fs (loop9): inline encryption not supported [ 575.085212][T11495] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 575.205997][T11495] EXT4-fs (loop9): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 575.920507][ T4267] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 575.933745][ T4267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.010177][ T4267] usb 2-1: string descriptor 0 read error: -71 [ 576.019058][ T4267] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 576.094127][ T4267] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 576.113197][ T6984] usb 6-1: USB disconnect, device number 12 [ 576.175612][ T4267] usb 2-1: config 0 descriptor?? [ 576.202294][ T4267] usb 2-1: can't set config #0, error -71 [ 576.236769][ T4267] usb 2-1: USB disconnect, device number 5 [ 576.362606][T11526] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 576.613970][ T4267] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 576.926011][ T4267] usb 2-1: Using ep0 maxpacket: 16 [ 577.054231][ T4267] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.079927][ T4267] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.114679][ T4267] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.168405][ T4267] usb 2-1: config 0 interface 0 has no altsetting 0 [ 577.185550][ T4267] usb 2-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 577.213936][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.247239][ T4267] usb 2-1: config 0 descriptor?? [ 577.730263][ T4267] input: HID 046d:c215 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C215.0009/input/input27 [ 577.837878][ T4267] logitech 0003:046D:C215.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.1-1/input0 [ 577.968414][ T4267] usb 2-1: USB disconnect, device number 6 [ 578.021245][T11579] fuse: Bad value for 'fd' [ 578.878801][T11587] device syzkaller0 entered promiscuous mode [ 578.919124][T11583] fido_id[11583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 578.950011][T11596] tipc: Enabled bearer , priority 0 [ 578.997712][T11587] tipc: Resetting bearer [ 579.075402][T11585] tipc: Resetting bearer [ 579.103692][T11585] tipc: Disabling bearer [ 582.405913][ T4404] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 582.614152][T11654] loop1: detected capacity change from 0 to 4096 [ 584.116571][T11654] EXT4-fs (loop1): Test dummy encryption mode enabled [ 584.123528][T11654] EXT4-fs (loop1): inline encryption not supported [ 584.130397][T11654] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 584.555635][ T4404] usb 7-1: Using ep0 maxpacket: 16 [ 584.614115][T11661] fuse: Bad value for 'fd' [ 585.378664][T11654] EXT4-fs: error -4 creating inode table initialization thread [ 585.387578][T11654] EXT4-fs (loop1): mount failed [ 585.514030][ T4404] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 585.524338][ T4404] usb 7-1: can't read configurations, error -71 [ 586.860341][T11691] tipc: Enabling of bearer rejected, failed to enable media [ 587.013929][ T4267] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 587.434306][ T4267] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 587.546161][ T4267] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.224107][ T4267] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 588.245498][ T4267] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 588.261404][ T4267] usb 2-1: Manufacturer: syz [ 588.279743][ T4267] usb 2-1: config 0 descriptor?? [ 588.345549][ T4267] igorplugusb 2-1:0.0: incorrect number of endpoints [ 588.574015][ T4404] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 588.853993][ T4404] usb 6-1: Using ep0 maxpacket: 16 [ 588.994363][ T4404] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.994400][ T4404] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.994426][ T4404] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 588.994456][ T4404] usb 6-1: config 0 interface 0 has no altsetting 0 [ 588.994487][ T4404] usb 6-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 588.994513][ T4404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.996221][ T4404] usb 6-1: config 0 descriptor?? [ 589.479820][ T4404] input: HID 046d:c215 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C215.000A/input/input28 [ 589.593643][ T4404] logitech 0003:046D:C215.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.5-1/input0 [ 589.909913][ T4404] usb 6-1: USB disconnect, device number 13 [ 590.205329][T11768] fido_id[11768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 591.059995][T11778] device syzkaller0 entered promiscuous mode [ 591.105637][T11778] tipc: Enabled bearer , priority 0 [ 591.119593][ T6984] usb 2-1: USB disconnect, device number 7 [ 591.158134][T11778] tipc: Resetting bearer [ 591.203041][T11775] tipc: Resetting bearer [ 591.315690][T11775] tipc: Disabling bearer [ 591.599215][T11793] loop1: detected capacity change from 0 to 4096 [ 593.095529][T11793] EXT4-fs (loop1): Test dummy encryption mode enabled [ 593.102456][T11793] EXT4-fs (loop1): inline encryption not supported [ 593.109267][T11793] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 594.058876][T11793] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 594.865675][ T6974] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 595.114137][ T6974] usb 2-1: Using ep0 maxpacket: 16 [ 595.249570][ T6974] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.522936][ T6974] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.596900][ T6974] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 595.615373][ T6974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.622017][ T6974] usb 2-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 595.631571][ T6974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.694997][ T6974] usb 2-1: config 0 descriptor?? [ 597.226136][ T6974] input: HID 046d:c215 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C215.000B/input/input29 [ 597.922911][ T6974] logitech 0003:046D:C215.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.1-1/input0 [ 597.994201][ T6974] usb 2-1: USB disconnect, device number 8 [ 598.127309][T11864] fido_id[11864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 602.656240][T11956] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 605.840068][ T25] audit: type=1326 audit(1794309538.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.1.1387" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 605.841119][ T25] audit: type=1326 audit(1794309538.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.1.1387" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 605.848536][ T25] audit: type=1326 audit(1794309538.400:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.1.1387" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 605.852079][ T25] audit: type=1326 audit(1794309538.400:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.1.1387" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 605.853204][ T25] audit: type=1326 audit(1794309538.400:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.1.1387" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 605.855652][ T25] audit: type=1326 audit(1794309538.410:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.1.1387" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 605.856333][ T25] audit: type=1326 audit(1794309538.410:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.1.1387" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 605.856828][ T25] audit: type=1326 audit(1794309538.410:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.1.1387" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 605.858837][ T25] audit: type=1326 audit(1794309538.410:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.1.1387" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 605.859336][ T25] audit: type=1326 audit(1794309538.410:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.1.1387" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 607.818083][T12032] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 610.541633][T12052] loop1: detected capacity change from 0 to 512 [ 610.834092][T12052] EXT4-fs (loop1): 1 truncate cleaned up [ 610.850175][T12052] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 610.925135][T12051] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1395: bg 0: block 465: padding at end of block bitmap is not set [ 612.159893][T12096] loop9: detected capacity change from 0 to 512 [ 612.326611][T12096] EXT4-fs (loop9): 1 truncate cleaned up [ 612.332413][T12096] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 612.497646][T12115] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 612.614384][T12117] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm vhost-12096: bg 0: block 465: padding at end of block bitmap is not set [ 614.952264][T12149] device syzkaller0 entered promiscuous mode [ 614.973457][T12149] tipc: Enabled bearer , priority 0 [ 614.984177][T12148] tipc: Resetting bearer [ 615.181107][T12148] tipc: Disabling bearer [ 616.176672][T12171] loop9: detected capacity change from 0 to 512 [ 616.799532][T12171] EXT4-fs (loop9): 1 truncate cleaned up [ 616.813776][T12171] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 616.901519][T12170] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1417: bg 0: block 465: padding at end of block bitmap is not set [ 618.014191][ T4404] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 618.291124][ T4404] usb 7-1: device descriptor read/64, error -71 [ 618.573922][T12217] loop4: detected capacity change from 0 to 4096 [ 618.662045][T12217] EXT4-fs (loop4): Test dummy encryption mode enabled [ 618.669024][T12217] EXT4-fs (loop4): inline encryption not supported [ 618.675807][T12217] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 618.754607][ T4404] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 619.272578][T12217] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 620.908115][ T4404] usb 7-1: device descriptor read/64, error -71 [ 621.400628][T12223] device syzkaller0 entered promiscuous mode [ 621.408026][ T4404] usb usb7-port1: attempt power cycle [ 621.410524][T12223] tipc: Enabled bearer , priority 0 [ 621.514623][T12222] tipc: Resetting bearer [ 621.624566][T12222] tipc: Disabling bearer [ 624.198174][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.204529][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.414208][ T4401] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 626.444450][T12283] tipc: Enabled bearer , priority 0 [ 626.654182][ T4401] usb 2-1: device descriptor read/64, error -71 [ 626.761181][T12281] tipc: Disabling bearer [ 626.953934][ T4401] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 627.153993][ T4401] usb 2-1: device descriptor read/64, error -71 [ 627.210690][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 627.210728][ T25] audit: type=1326 audit(1794309559.760:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.9.1441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 628.444311][ T4401] usb usb2-port1: attempt power cycle [ 628.653299][ T25] audit: type=1326 audit(1794309559.790:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.9.1441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 628.680280][ T25] audit: type=1326 audit(1794309559.800:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.9.1441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 628.704872][ T25] audit: type=1326 audit(1794309559.800:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.9.1441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 628.729318][ T25] audit: type=1326 audit(1794309559.800:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.9.1441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 628.756318][ T25] audit: type=1326 audit(1794309559.800:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.9.1441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 628.781280][ T25] audit: type=1326 audit(1794309559.800:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.9.1441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 628.812182][ T25] audit: type=1326 audit(1794309559.800:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.9.1441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 628.871494][ T25] audit: type=1326 audit(1794309559.810:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.9.1441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 628.897473][ T25] audit: type=1326 audit(1794309559.810:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.9.1441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 629.018821][ T4401] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 629.794080][ T4401] usb 2-1: device descriptor read/8, error -71 [ 630.936450][T12337] vivid-001: kernel_thread() failed [ 632.860335][T12355] device syzkaller0 entered promiscuous mode [ 633.281720][T12355] tipc: Enabled bearer , priority 0 [ 633.303635][T12351] tipc: Resetting bearer [ 633.965059][T12351] tipc: Disabling bearer [ 634.273144][ T25] kauditd_printk_skb: 25 callbacks suppressed [ 634.273159][ T25] audit: type=1326 audit(1794309566.820:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.4.1456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 634.466460][ T25] audit: type=1326 audit(1794309566.860:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.4.1456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 634.491041][ T25] audit: type=1326 audit(1794309566.870:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.4.1456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 634.554087][ T25] audit: type=1326 audit(1794309566.870:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.4.1456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 636.177094][ T25] audit: type=1326 audit(1794309566.870:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.4.1456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 636.263966][ T25] audit: type=1326 audit(1794309566.870:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.4.1456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 636.310572][ T25] audit: type=1326 audit(1794309566.870:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.4.1456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 636.335256][ T25] audit: type=1326 audit(1794309566.880:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.4.1456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 636.403052][ T25] audit: type=1326 audit(1794309566.880:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.4.1456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 636.435243][ T25] audit: type=1326 audit(1794309566.880:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.4.1456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 637.095236][ T6974] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 637.433941][ T6974] usb 10-1: device descriptor read/64, error -71 [ 638.517451][T12447] jffs2: notice: (12447) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 638.664133][ T6974] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 638.954405][ T6974] usb 10-1: device descriptor read/64, error -71 [ 639.181180][T12456] device syzkaller0 entered promiscuous mode [ 639.210592][ T6974] usb usb10-port1: attempt power cycle [ 639.316990][T12456] tipc: Enabled bearer , priority 0 [ 640.264394][T12455] tipc: Resetting bearer [ 640.328199][T12455] tipc: Disabling bearer [ 641.895882][T12503] FAULT_INJECTION: forcing a failure. [ 641.895882][T12503] name failslab, interval 1, probability 0, space 0, times 0 [ 641.908991][T12503] CPU: 1 PID: 12503 Comm: syz.1.1472 Not tainted syzkaller #0 [ 641.916473][T12503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 641.926538][T12503] Call Trace: [ 641.929825][T12503] [ 641.932763][T12503] dump_stack_lvl+0x188/0x250 [ 641.937462][T12503] ? show_regs_print_info+0x20/0x20 [ 641.942675][T12503] ? load_image+0x410/0x410 [ 641.947204][T12503] ? __might_sleep+0xf0/0xf0 [ 641.951813][T12503] ? __lock_acquire+0x7d40/0x7d40 [ 641.956859][T12503] should_fail+0x383/0x4b0 [ 641.961296][T12503] should_failslab+0x5/0x20 [ 641.965812][T12503] slab_pre_alloc_hook+0x51/0xc0 [ 641.970759][T12503] ? kvm_mmu_topup_memory_cache+0xd4/0x200 [ 641.976578][T12503] kmem_cache_alloc+0x3d/0x280 [ 641.981358][T12503] kvm_mmu_topup_memory_cache+0xd4/0x200 [ 641.987008][T12503] kvm_mmu_load+0x88/0x1aa0 [ 641.991541][T12503] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 641.997539][T12503] ? lockdep_hardirqs_on+0x94/0x140 [ 642.002750][T12503] ? kvm_apic_accept_events+0x576/0x580 [ 642.008315][T12503] ? lock_chain_count+0x20/0x20 [ 642.013175][T12503] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 642.019078][T12503] ? kvm_apic_has_interrupt+0x72d/0x740 [ 642.024634][T12503] ? kvm_lapic_enable_pv_eoi+0x140/0x140 [ 642.030296][T12503] vcpu_enter_guest+0x60da/0x6f70 [ 642.035343][T12503] ? local_bh_enable+0x20/0x20 [ 642.040112][T12503] ? is_bpf_text_address+0x254/0x270 [ 642.045399][T12503] ? mark_lock+0x94/0x320 [ 642.049727][T12503] ? __lock_acquire+0x13b3/0x7d40 [ 642.054758][T12503] ? kfree+0xef/0x2a0 [ 642.058741][T12503] ? mark_lock+0x94/0x320 [ 642.063064][T12503] ? __lock_acquire+0x12df/0x7d40 [ 642.068096][T12503] ? __lock_acquire+0x12df/0x7d40 [ 642.073214][T12503] ? verify_lock_unused+0x140/0x140 [ 642.078411][T12503] ? verify_lock_unused+0x140/0x140 [ 642.083599][T12503] ? vmx_vcpu_load_vmcs+0x4ac/0x790 [ 642.088802][T12503] ? mark_lock+0x94/0x320 [ 642.093135][T12503] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 642.099124][T12503] ? __local_bh_enable_ip+0x136/0x1c0 [ 642.104494][T12503] ? lockdep_hardirqs_on+0x94/0x140 [ 642.109696][T12503] ? read_lock_is_recursive+0x10/0x10 [ 642.115063][T12503] ? __local_bh_enable_ip+0x136/0x1c0 [ 642.120431][T12503] ? _local_bh_enable+0xa0/0xa0 [ 642.125279][T12503] kvm_arch_vcpu_ioctl_run+0x804/0x1e40 [ 642.130825][T12503] kvm_vcpu_ioctl+0x8f2/0xc10 [ 642.135493][T12503] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 642.141134][T12503] ? bpf_lsm_file_ioctl+0x5/0x10 [ 642.146060][T12503] ? security_file_ioctl+0x7c/0xa0 [ 642.151249][T12503] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 642.156869][T12503] __se_sys_ioctl+0xfa/0x170 [ 642.161452][T12503] do_syscall_64+0x4c/0xa0 [ 642.165856][T12503] ? clear_bhb_loop+0x30/0x80 [ 642.170525][T12503] ? clear_bhb_loop+0x30/0x80 [ 642.175190][T12503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 642.181074][T12503] RIP: 0033:0x7f68307e1f19 [ 642.185483][T12503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.205082][T12503] RSP: 002b:00007f682ea2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.213493][T12503] RAX: ffffffffffffffda RBX: 00007f6830a5efa0 RCX: 00007f68307e1f19 [ 642.221457][T12503] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 642.229422][T12503] RBP: 00007f6830870f6d R08: 0000000000000000 R09: 0000000000000000 [ 642.237381][T12503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.245339][T12503] R13: 00007f6830a5f038 R14: 00007f6830a5efa0 R15: 00007fff5ec3dcc8 [ 642.253314][T12503] [ 643.697192][T12519] jffs2: notice: (12519) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 643.808126][T12527] device syzkaller0 entered promiscuous mode [ 644.094242][T12528] tipc: Enabled bearer , priority 0 [ 644.572201][T12537] tipc: Resetting bearer [ 644.841953][T12537] tipc: Disabling bearer [ 645.643247][T12550] tipc: Enabling of bearer rejected, failed to enable media [ 645.957168][ T5558] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 646.187268][ T5558] usb 10-1: device descriptor read/64, error -71 [ 647.455063][ T5558] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 647.599581][T12610] device syzkaller0 entered promiscuous mode [ 647.664180][ T5558] usb 10-1: device descriptor read/64, error -71 [ 647.681201][T12610] tipc: Enabled bearer , priority 0 [ 647.794997][ T5558] usb usb10-port1: attempt power cycle [ 647.852045][T12607] tipc: Resetting bearer [ 647.975787][T12607] tipc: Disabling bearer [ 648.324048][ T6974] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 648.353356][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 648.353369][ T25] audit: type=1326 audit(1794309580.900:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.4.1499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 648.393990][ T5558] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 648.614520][ T25] audit: type=1326 audit(1794309580.940:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.4.1499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 648.734219][ T6974] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 648.770712][ T6974] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.849971][ T25] audit: type=1326 audit(1794309580.940:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.4.1499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 649.914754][ T6974] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 649.989391][ T6974] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 650.085656][ T6974] usb 6-1: Manufacturer: syz [ 650.202407][ T6974] usb 6-1: config 0 descriptor?? [ 650.211612][ T25] audit: type=1326 audit(1794309580.940:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.4.1499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 650.415515][ T25] audit: type=1326 audit(1794309580.940:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.4.1499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 650.464122][ T5558] usb 10-1: device descriptor read/8, error -71 [ 651.010349][ T25] audit: type=1326 audit(1794309580.950:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.4.1499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 651.035083][ T25] audit: type=1326 audit(1794309580.960:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.4.1499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 651.059388][ T25] audit: type=1326 audit(1794309580.960:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.4.1499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 651.083890][ T25] audit: type=1326 audit(1794309580.960:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.4.1499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 651.121906][ T25] audit: type=1326 audit(1794309580.960:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.4.1499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 651.146187][ T6974] usb 6-1: can't set config #0, error -71 [ 651.161277][ T6974] usb 6-1: USB disconnect, device number 14 [ 651.884098][ T4313] Bluetooth: hci1: command 0x0406 tx timeout [ 654.544153][ T6974] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 654.774061][ T6974] usb 5-1: device descriptor read/64, error -71 [ 656.057626][ T6974] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 656.509428][T12711] loop5: detected capacity change from 0 to 4096 [ 658.380169][ T6974] usb 5-1: device descriptor read/64, error -71 [ 659.464160][ T6974] usb usb5-port1: attempt power cycle [ 659.900838][ T25] kauditd_printk_skb: 25 callbacks suppressed [ 659.900878][ T25] audit: type=1326 audit(1794309592.450:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.4.1523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 660.239712][ T25] audit: type=1326 audit(1794309592.480:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.4.1523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 660.539648][ T25] audit: type=1326 audit(1794309592.490:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.4.1523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 660.675506][ T25] audit: type=1326 audit(1794309592.490:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.4.1523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 660.700046][ T25] audit: type=1326 audit(1794309592.500:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.4.1523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 660.724667][ T25] audit: type=1326 audit(1794309592.500:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.4.1523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 660.750355][ T25] audit: type=1326 audit(1794309592.500:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.4.1523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 660.774954][ T25] audit: type=1326 audit(1794309592.500:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.4.1523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 660.800362][ T25] audit: type=1326 audit(1794309592.500:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.4.1523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 660.824894][ T25] audit: type=1326 audit(1794309592.500:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.4.1523" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 662.943661][T12772] vivid-001: kernel_thread() failed [ 664.958204][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 665.619080][T12819] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 666.272551][ T25] kauditd_printk_skb: 10 callbacks suppressed [ 666.272592][ T25] audit: type=1326 audit(1794309598.820:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.1540" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 666.695630][ T25] audit: type=1326 audit(1794309598.860:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.1540" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 667.015076][ T25] audit: type=1326 audit(1794309598.860:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.1540" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 667.381988][ T25] audit: type=1326 audit(1794309598.860:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.1540" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 667.637748][ T25] audit: type=1326 audit(1794309598.860:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.1540" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 667.662078][ T25] audit: type=1326 audit(1794309598.860:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.1540" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 667.686286][ T25] audit: type=1326 audit(1794309598.860:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.1540" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 667.711034][ T25] audit: type=1326 audit(1794309598.870:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.1540" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 667.737957][ T25] audit: type=1326 audit(1794309598.870:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.1540" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 667.762892][ T25] audit: type=1326 audit(1794309598.870:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.1.1540" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68307e1f19 code=0x7ffc0000 [ 669.098851][T10769] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 669.514214][T10769] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 669.543259][T10769] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 669.714411][T10769] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 669.748219][T10769] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 669.787081][T10769] usb 6-1: Manufacturer: syz [ 669.830697][T10769] usb 6-1: config 0 descriptor?? [ 669.895771][T10769] igorplugusb 6-1:0.0: incorrect number of endpoints [ 673.121545][ T4401] usb 6-1: USB disconnect, device number 15 [ 673.310671][ T25] kauditd_printk_skb: 19 callbacks suppressed [ 673.310687][ T25] audit: type=1326 audit(1794309605.860:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.9.1556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 674.658462][ T25] audit: type=1326 audit(1794309605.890:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.9.1556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 674.741663][ T25] audit: type=1326 audit(1794309605.900:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.9.1556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 674.842054][ T25] audit: type=1326 audit(1794309605.910:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.9.1556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 675.389567][ T25] audit: type=1326 audit(1794309605.910:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.9.1556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 675.913379][ T25] audit: type=1326 audit(1794309605.910:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.9.1556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 675.919208][T12953] jffs2: notice: (12953) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 675.959879][ T25] audit: type=1326 audit(1794309605.910:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.9.1556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 676.006502][ T25] audit: type=1326 audit(1794309605.910:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.9.1556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 676.078029][ T25] audit: type=1326 audit(1794309605.910:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.9.1556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 676.103649][ T25] audit: type=1326 audit(1794309605.910:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.9.1556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 677.142912][ T6978] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 677.553980][ T6978] usb 2-1: device descriptor read/64, error -71 [ 677.834061][ T6978] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 678.537524][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 678.537566][ T25] audit: type=1326 audit(1794309611.090:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.5.1567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 678.891228][ T25] audit: type=1326 audit(1794309611.130:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.5.1567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 679.244714][ T25] audit: type=1326 audit(1794309611.130:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.5.1567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 679.669272][ T25] audit: type=1326 audit(1794309611.130:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.5.1567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 679.795430][ T25] audit: type=1326 audit(1794309611.130:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.5.1567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 679.819939][ T25] audit: type=1326 audit(1794309611.140:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.5.1567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 679.844155][ T25] audit: type=1326 audit(1794309611.140:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.5.1567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 679.870879][ T25] audit: type=1326 audit(1794309611.140:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.5.1567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 679.897358][ T25] audit: type=1326 audit(1794309611.140:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.5.1567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 679.922527][ T25] audit: type=1326 audit(1794309611.140:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.5.1567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 682.659405][T13033] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 684.180838][ T25] kauditd_printk_skb: 28 callbacks suppressed [ 684.180853][ T25] audit: type=1326 audit(1794309616.730:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.5.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 684.366722][ T25] audit: type=1326 audit(1794309616.760:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.5.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219d9a4f19 code=0x7ffc0000 [ 684.948443][ T25] audit: type=1326 audit(1794309617.500:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.1581" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 685.200624][ T25] audit: type=1326 audit(1794309617.520:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.1581" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 685.228545][ T25] audit: type=1326 audit(1794309617.530:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.1581" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 685.253801][ T25] audit: type=1326 audit(1794309617.530:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.1581" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 685.282722][ T25] audit: type=1326 audit(1794309617.540:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.1581" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 685.310849][ T25] audit: type=1326 audit(1794309617.540:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.1581" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 685.335550][ T25] audit: type=1326 audit(1794309617.540:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.1581" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 685.405753][ T25] audit: type=1326 audit(1794309617.540:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.1581" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c2307f19 code=0x7ffc0000 [ 685.635986][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.642388][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.140841][T13097] jffs2: notice: (13097) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 687.574461][ T5558] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 687.979612][T13112] loop4: detected capacity change from 0 to 4096 [ 688.053962][ T5558] usb 6-1: device descriptor read/64, error -71 [ 688.087930][T13112] EXT4-fs (loop4): Test dummy encryption mode enabled [ 688.094981][T13112] EXT4-fs (loop4): inline encryption not supported [ 688.101698][T13112] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 689.124018][ T5558] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 690.401820][T13112] EXT4-fs: error -4 creating inode table initialization thread [ 690.409654][T13112] EXT4-fs (loop4): mount failed [ 691.805030][ T25] kauditd_printk_skb: 27 callbacks suppressed [ 691.805046][ T25] audit: type=1326 audit(1794309624.360:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.9.1589" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 692.014871][T13125] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 692.308484][ T25] audit: type=1326 audit(1794309624.400:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.9.1589" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 692.416179][ T25] audit: type=1326 audit(1794309624.400:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.9.1589" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 692.520941][ T25] audit: type=1326 audit(1794309624.400:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.9.1589" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 692.637982][ T25] audit: type=1326 audit(1794309624.400:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.9.1589" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 692.721493][ T25] audit: type=1326 audit(1794309624.400:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.9.1589" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 692.827234][ T25] audit: type=1326 audit(1794309624.400:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.9.1589" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66cd6af19 code=0x7ffc0000 [ 692.872307][ T25] audit: type=1326 audit(1794309624.400:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.9.1589" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff66cd2b74e code=0x7ffc0000 [ 694.355188][T13170] vivid-001: kernel_thread() failed [ 695.156340][T13178] usb usb7: usbfs: process 13178 (syz.9.1601) did not claim interface 0 before use [ 696.927575][T13195] jffs2: notice: (13195) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 697.413953][ T6974] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 697.628792][ T6974] usb 10-1: device descriptor read/64, error -71 [ 697.914133][ T6974] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 698.189234][T13232] loop5: detected capacity change from 0 to 8192 [ 698.354041][ T6974] usb 10-1: device descriptor read/64, error -71 [ 698.517367][ T6974] usb usb10-port1: attempt power cycle [ 698.679151][ T6978] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 698.944039][ T6974] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 698.984003][ T6978] usb 6-1: Using ep0 maxpacket: 32 [ 700.034488][ T6978] usb 6-1: config index 0 descriptor too short (expected 58651, got 27) [ 700.119959][ T25] audit: type=1326 audit(1794309632.670:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.6.1614" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f40d6f19 code=0x7ffc0000 [ 700.144699][ T6974] usb 10-1: device not accepting address 13, error -71 [ 700.170332][T13255] ================================================================== [ 700.179365][T13255] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 700.186740][T13255] Read of size 8 at addr ffff88802b18fe18 by task syz.6.1614/13255 [ 700.194661][T13255] [ 700.197088][T13255] CPU: 1 PID: 13255 Comm: syz.6.1614 Not tainted syzkaller #0 [ 700.204715][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 700.214786][T13255] Call Trace: [ 700.218090][T13255] [ 700.221028][T13255] dump_stack_lvl+0x188/0x250 [ 700.225737][T13255] ? show_regs_print_info+0x20/0x20 [ 700.230955][T13255] ? _printk+0xda/0x130 [ 700.235128][T13255] ? dvb_device_open+0xc5/0x360 [ 700.239995][T13255] ? load_image+0x410/0x410 [ 700.244518][T13255] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 700.250013][T13255] print_address_description+0x60/0x2d0 [ 700.255661][T13255] ? dvb_device_open+0xc5/0x360 [ 700.260533][T13255] kasan_report+0xdf/0x130 [ 700.264986][T13255] ? dvb_device_open+0xc5/0x360 [ 700.269863][T13255] dvb_device_open+0xc5/0x360 [ 700.274585][T13255] chrdev_open+0x585/0x5f0 [ 700.279108][T13255] ? cd_forget+0x160/0x160 [ 700.283545][T13255] ? fsnotify_perm+0x3a7/0x560 [ 700.288336][T13255] ? cd_forget+0x160/0x160 [ 700.292771][T13255] do_dentry_open+0x7f7/0xf90 [ 700.297460][T13255] ? vfs_open+0x2b/0x80 [ 700.301633][T13255] path_openat+0x2718/0x2fb0 [ 700.306267][T13255] ? finish_lock_switch+0x12d/0x290 [ 700.311533][T13255] ? __schedule+0x11cb/0x4350 [ 700.316241][T13255] ? do_filp_open+0x400/0x400 [ 700.320957][T13255] ? mark_lock+0x94/0x320 [ 700.325420][T13255] do_filp_open+0x1df/0x400 [ 700.329954][T13255] ? vfs_tmpfile+0x300/0x300 [ 700.334560][T13255] ? preempt_schedule_common+0xa5/0xd0 [ 700.340060][T13255] ? _raw_spin_unlock+0x36/0x40 [ 700.344926][T13255] ? alloc_fd+0x59e/0x650 [ 700.349306][T13255] do_sys_openat2+0x14b/0x500 [ 700.354179][T13255] ? __lock_acquire+0x7d40/0x7d40 [ 700.359241][T13255] ? do_sys_open+0xe0/0xe0 [ 700.363678][T13255] ? lock_chain_count+0x20/0x20 [ 700.368545][T13255] __x64_sys_openat+0x135/0x160 [ 700.373538][T13255] do_syscall_64+0x4c/0xa0 [ 700.377969][T13255] ? clear_bhb_loop+0x30/0x80 [ 700.382637][T13255] ? clear_bhb_loop+0x30/0x80 [ 700.387476][T13255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 700.393796][T13255] RIP: 0033:0x7f29f409774e [ 700.398209][T13255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 700.418010][T13255] RSP: 002b:00007f29f2302b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 700.426423][T13255] RAX: ffffffffffffffda RBX: 00007f29f23036c0 RCX: 00007f29f409774e [ 700.434416][T13255] RDX: 0000000000040002 RSI: 00007f29f2302c00 RDI: ffffffffffffff9c [ 700.442484][T13255] RBP: 00007f29f2302c00 R08: 0000000000000000 R09: 0000000000000000 [ 700.450446][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 700.458406][T13255] R13: 00007f29f4354128 R14: 00007f29f4354090 R15: 00007fff6f94d048 [ 700.466395][T13255] [ 700.469410][T13255] [ 700.471712][T13255] Allocated by task 1: [ 700.475823][T13255] __kasan_kmalloc+0xaf/0xe0 [ 700.480400][T13255] dvb_register_device+0x300/0x1dc0 [ 700.485575][T13255] dvb_register_frontend+0x629/0x900 [ 700.490836][T13255] vidtv_bridge_probe+0x9c1/0xf30 [ 700.495910][T13255] platform_probe+0x137/0x1c0 [ 700.500746][T13255] really_probe+0x276/0xc70 [ 700.505432][T13255] __driver_probe_device+0x1f5/0x390 [ 700.510711][T13255] driver_probe_device+0x4f/0x420 [ 700.515725][T13255] __driver_attach+0x45d/0x660 [ 700.520479][T13255] bus_for_each_dev+0x182/0x1f0 [ 700.525312][T13255] bus_add_driver+0x324/0x5d0 [ 700.529968][T13255] driver_register+0x32d/0x430 [ 700.534703][T13255] vidtv_bridge_init+0x45/0x80 [ 700.539573][T13255] do_one_initcall+0x272/0x730 [ 700.544426][T13255] do_initcall_level+0x13d/0x1f0 [ 700.549379][T13255] do_initcalls+0x4b/0x90 [ 700.553687][T13255] kernel_init_freeable+0x3d5/0x560 [ 700.558866][T13255] kernel_init+0x19/0x1b0 [ 700.563183][T13255] ret_from_fork+0x1f/0x30 [ 700.567599][T13255] [ 700.569909][T13255] Freed by task 13125: [ 700.573955][T13255] kasan_set_track+0x4b/0x70 [ 700.578545][T13255] kasan_set_free_info+0x1f/0x40 [ 700.583485][T13255] ____kasan_slab_free+0xd5/0x110 [ 700.588491][T13255] slab_free_freelist_hook+0xec/0x170 [ 700.593844][T13255] kfree+0xef/0x2a0 [ 700.597642][T13255] dvb_device_open+0x2d2/0x360 [ 700.602387][T13255] chrdev_open+0x585/0x5f0 [ 700.606779][T13255] do_dentry_open+0x7f7/0xf90 [ 700.611449][T13255] path_openat+0x2718/0x2fb0 [ 700.616017][T13255] do_filp_open+0x1df/0x400 [ 700.620496][T13255] do_sys_openat2+0x14b/0x500 [ 700.625152][T13255] __x64_sys_openat+0x135/0x160 [ 700.629978][T13255] do_syscall_64+0x4c/0xa0 [ 700.634371][T13255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 700.640333][T13255] [ 700.642644][T13255] The buggy address belongs to the object at ffff88802b18fe00 [ 700.642644][T13255] which belongs to the cache kmalloc-256 of size 256 [ 700.656777][T13255] The buggy address is located 24 bytes inside of [ 700.656777][T13255] 256-byte region [ffff88802b18fe00, ffff88802b18ff00) [ 700.669973][T13255] The buggy address belongs to the page: [ 700.675596][T13255] page:ffffea0000ac6380 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802b18fc00 pfn:0x2b18e [ 700.687049][T13255] head:ffffea0000ac6380 order:1 compound_mapcount:0 [ 700.693621][T13255] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 700.701595][T13255] raw: 00fff00000010200 ffffea00006fe588 ffffea0000adee08 ffff888017841b40 [ 700.710161][T13255] raw: ffff88802b18fc00 0000000000100001 00000001ffffffff 0000000000000000 [ 700.718717][T13255] page dumped because: kasan: bad access detected [ 700.725121][T13255] page_owner tracks the page as allocated [ 700.730838][T13255] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 13159430106, free_ts 0 [ 700.748810][T13255] get_page_from_freelist+0x24f6/0x2670 [ 700.754399][T13255] __alloc_pages+0x1ee/0x480 [ 700.758977][T13255] alloc_page_interleave+0x24/0x1e0 [ 700.764193][T13255] new_slab+0xc0/0x4b0 [ 700.768262][T13255] ___slab_alloc+0x807/0xdd0 [ 700.775568][T13255] __kmalloc_node+0x142/0x3a0 [ 700.780443][T13255] kvmalloc_node+0x84/0x130 [ 700.785000][T13255] v4l2_ctrl_new+0x70f/0x1310 [ 700.790640][T13255] v4l2_ctrl_new_std+0x247/0x300 [ 700.795581][T13255] vivid_create_controls+0x2023/0x3380 [ 700.801112][T13255] vivid_probe+0x39ff/0x6240 [ 700.805692][T13255] platform_probe+0x137/0x1c0 [ 700.810358][T13255] really_probe+0x276/0xc70 [ 700.814861][T13255] __driver_probe_device+0x1f5/0x390 [ 700.820133][T13255] driver_probe_device+0x4f/0x420 [ 700.825137][T13255] __driver_attach+0x45d/0x660 [ 700.830146][T13255] page_owner free stack trace missing [ 700.835516][T13255] [ 700.837838][T13255] Memory state around the buggy address: [ 700.843517][T13255] ffff88802b18fd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 700.851561][T13255] ffff88802b18fd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 700.859788][T13255] >ffff88802b18fe00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 700.867832][T13255] ^ [ 700.872681][T13255] ffff88802b18fe80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 700.880732][T13255] ffff88802b18ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 700.888773][T13255] ================================================================== [ 700.896829][T13255] Disabling lock debugging due to kernel taint [ 700.905270][T13255] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 700.912471][T13255] CPU: 1 PID: 13255 Comm: syz.6.1614 Tainted: G B syzkaller #0 [ 700.921317][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 700.931513][T13255] Call Trace: [ 700.934796][T13255] [ 700.937729][T13255] dump_stack_lvl+0x188/0x250 [ 700.942422][T13255] ? show_regs_print_info+0x20/0x20 [ 700.947628][T13255] ? load_image+0x410/0x410 [ 700.952145][T13255] panic+0x2f8/0x850 [ 700.956047][T13255] ? bpf_jit_dump+0xd0/0xd0 [ 700.960569][T13255] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 700.966209][T13255] ? check_panic_on_warn+0x6c/0xa0 [ 700.971418][T13255] ? dvb_device_open+0xc5/0x360 [ 700.976307][T13255] check_panic_on_warn+0x80/0xa0 [ 700.981347][T13255] ? dvb_device_open+0xc5/0x360 [ 700.986208][T13255] end_report+0x6d/0xf0 [ 700.990376][T13255] kasan_report+0x102/0x130 [ 700.994892][T13255] ? dvb_device_open+0xc5/0x360 [ 700.999775][T13255] dvb_device_open+0xc5/0x360 [ 701.004736][T13255] chrdev_open+0x585/0x5f0 [ 701.009348][T13255] ? cd_forget+0x160/0x160 [ 701.013888][T13255] ? fsnotify_perm+0x3a7/0x560 [ 701.018668][T13255] ? cd_forget+0x160/0x160 [ 701.023100][T13255] do_dentry_open+0x7f7/0xf90 [ 701.027791][T13255] ? vfs_open+0x2b/0x80 [ 701.031953][T13255] path_openat+0x2718/0x2fb0 [ 701.036550][T13255] ? finish_lock_switch+0x12d/0x290 [ 701.041768][T13255] ? __schedule+0x11cb/0x4350 [ 701.046454][T13255] ? do_filp_open+0x400/0x400 [ 701.051138][T13255] ? mark_lock+0x94/0x320 [ 701.055465][T13255] do_filp_open+0x1df/0x400 [ 701.059971][T13255] ? vfs_tmpfile+0x300/0x300 [ 701.064557][T13255] ? preempt_schedule_common+0xa5/0xd0 [ 701.070029][T13255] ? _raw_spin_unlock+0x36/0x40 [ 701.074918][T13255] ? alloc_fd+0x59e/0x650 [ 701.079272][T13255] do_sys_openat2+0x14b/0x500 [ 701.083974][T13255] ? __lock_acquire+0x7d40/0x7d40 [ 701.089112][T13255] ? do_sys_open+0xe0/0xe0 [ 701.093553][T13255] ? lock_chain_count+0x20/0x20 [ 701.098416][T13255] __x64_sys_openat+0x135/0x160 [ 701.103274][T13255] do_syscall_64+0x4c/0xa0 [ 701.107703][T13255] ? clear_bhb_loop+0x30/0x80 [ 701.112386][T13255] ? clear_bhb_loop+0x30/0x80 [ 701.117070][T13255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 701.123005][T13255] RIP: 0033:0x7f29f409774e [ 701.127425][T13255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 701.147036][T13255] RSP: 002b:00007f29f2302b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 701.155485][T13255] RAX: ffffffffffffffda RBX: 00007f29f23036c0 RCX: 00007f29f409774e [ 701.163462][T13255] RDX: 0000000000040002 RSI: 00007f29f2302c00 RDI: ffffffffffffff9c [ 701.171440][T13255] RBP: 00007f29f2302c00 R08: 0000000000000000 R09: 0000000000000000 [ 701.179425][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 701.187404][T13255] R13: 00007f29f4354128 R14: 00007f29f4354090 R15: 00007fff6f94d048 [ 701.195387][T13255] [ 701.198521][T13255] Kernel Offset: disabled [ 701.202862][T13255] Rebooting in 86400 seconds..