last executing test programs: 26m43.528558176s ago: executing program 3 (id=108): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 26m42.822567208s ago: executing program 3 (id=111): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000080000008000200000000002c00018014000300ff010000000000000000000000000001140004"], 0xe4}}, 0x4000005) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x7c7d0eb92800643c) 26m42.716567541s ago: executing program 4 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x41) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003400)=@vmx={0x1, 0x0, 0x0, {0xc000, 0x0, {0x1}, 0x1, 0x800}, {"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", "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"}}) 26m42.195144544s ago: executing program 3 (id=113): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f0000006a80)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x40) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x1800, 0x0, 0x19) 26m40.380774019s ago: executing program 4 (id=116): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r3 = socket$inet6(0xa, 0x3, 0x3c) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x12020, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 26m37.734322369s ago: executing program 3 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x5, 0x810, 0x6, 0xf, 0x80000000000010, 0x5, 0x6, 0x29, 0x8, 0xa, 0x0, 0xbd9], 0x4000, 0x143140}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x40, 0x7, 0xe6, 0x40, 0xfd, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0xa, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x3b, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x40, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x8, 0xf7, 0x97}, {0x6000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x3, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0x10, 0x5, 0xd, 0x5, 0x7, 0x3, 0x8, 0x81, 0x1, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0xd, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x2000b]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26m37.336562829s ago: executing program 4 (id=123): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26m36.854260573s ago: executing program 3 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) 26m33.432907521s ago: executing program 3 (id=130): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x550e, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 26m33.432699613s ago: executing program 4 (id=131): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x83, 0xffe4, 0xfff3, 0x64ad, 0x6, "9c9ed63a6ad9bfea"}) 26m31.01844686s ago: executing program 4 (id=133): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x8000000000000000, 0x7fffffffffffffff, 0x58f24869, 0x3, 0x7f, 0x80000001, 0x2, 0xfffffffffffffffc, 0x4, 0x1002, 0x3ff, 0x8, 0x7, 0x8001], 0xf000, 0x368251}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26m27.90770409s ago: executing program 4 (id=136): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x71c9a1d5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x2000000000000e) 26m18.356584944s ago: executing program 32 (id=130): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x550e, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmuvUDFpo2dvv7weSZefPOM88bSuGZCQng3JpPfv25FDfiSkTMRsT1iGy/VGyZ9Ty8EBE3I2Lmsa1UjP85cDEirkbEjVHyPGepeOvz28Nbaz+99cs33126cO2Lr7+f3qqBaXsxIro7+f5+N49pK48Pi/HasJ3F7uqwiPkb3UfFcZrH/eZWlmG/Np5Xy+JKK5+f7uz1R3G7U6uPYqu9nY3v9PIL9oetcZ7shIe13ey40dzKYrufZrF1mNd1cJj/bzvsD/I8jSLfR1n6GAzGMR9vHjTz9ew8ymK9NyjG87xpo3kwisMiFpeLetppZHVsHeeT/n97u93bO0iGzd1+O+0la5XqS5XqnXJ1N200B83Vcq3buLOaLLQ6o2nlQbPWXW+laavTrNTT7mKy0KrXy9VqsnC3udWu9ZJqtbJSWSqvLRZ7t5PX77+XdBrJwii+2u7tDdqdfrKd7ib5GYvJcmXl5cXkVjV5Z2Mz2Xxw797G5rsf3H3//isbb75WTPpHWRHLS8vL5epSebm6eI7W/0lRdLIwsfXDsZSmXQDA2aP/B6bh5Pr/3QcRJ9//h/5/Is5U/zsua4L973lfPxyL/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Nz6Ye7LN7Kd+fz4WjH+TDH0XHFcioiZiPj9X8zGxSM5Z4s8c/8xf+5vNXxbiizD6BqXiu1qRKwX22/PnvSnAAAAAE+vrz6++Vnerecv809+6uzJVcUpyW/azFz/cEL5LkfE3PyPE8o2M3p5fkLJsr/XC3EwoWzZDazLE0qW33K7MKlsT2T2SLj8WCjlYeZUywEAAE7F0U7gdLsQAAAATtOn0y6A6SjF+FHm+Flw9s37vx4IXjlyBAAAAJxBpWkXAAAAAJy4rP/3+38AAADwdMt//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YuZ/ctIEoDsDPBhf6T0VV971Kd3CMHqHLLisO0EtwgCzIFXIBzkB2OUIEER6HQISiSB7bSvR9khlsmR9vECxmRgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl26r9eL638//bXN2+3by9AYAAAC4ZFutF/WTWTr/3Fz/2lz63pwXEVFGxKWx+yg+nGWOmpzq6f6r0/urZzXcRNQJh/eYNMeniPjVHPffuv4UAAAA4P3aLFfzNFpPD7OhC6JPadKm/PI7U14REdXsLlNaecj7kSms/n6P42+mtHoCa5opLE25jXOlvUr9cz/O2k1PmiI15cWXHYvM1ncAAKBHo7Om31EIAAAAffozdAEMo4jHpczjUuAkNc3y3sezMwAAAOANKoYuAAAAAOhcPf7vaf+/vf3/AAAAoDMv/qE/7f8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl7bVerFZruZtc3b7dvL0BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODN7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhfvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4m5mdra2Ka5Q9RETBg17sdltbexMPSvDgnyCEdFtjt/5oc7CliLl4k5x7ET2KCEq89X/IOYFc4i2HPUTwrMzsTHbyA1x/zWySzwfevO8Ow7zvm4WQ77yXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl0duTOMkOnXEcF+c29x4uZf3WoT7zeG17PmtZHNWZ9MnwYvVD1G0uEQAAAM6OpKzvQwg76fpC1sedvP5Py2uymv/bp8dxWc8frvvLvqz9s/bLz7vP7w/UGY+T3fTm8nBw6Wgqrf9vlrPtmb+8opU/+fzdS5J/IfF7q8+N0vx5Rl9vbLzTzsNzdWQLAPwTF8u+CMrfh7K+32RiAJwZrUrhXdb/SafZnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqMFoNT5ZxFEKYb03izNbew6Xj+sdr2/Nlu/bo0Vr4cnLP7BZpCOHm8nBwqdbZzLZ79x/cXhwOB3frD14KITQ1+lvF9G9/MMXFITTyfAT/URAXX/as5HMyggZ/KAEAcCqlRcvq+p10fSE7F82F8Md3B+v/VytxmLL+3/3w2mZ1rGr9369thrOvt3Ln0969+w9eX76zeGtwa/DxG5f7b/avXL969Xovf1fS88YEAACAf6ddtGr9H88dXf+/UInDlPX/Z9/0v6iOlaj/jzVZ9Gs6EwAAgLPt2Zd//y065nzUbofPF1dW7vbHx/3Pl8fHBlL9284VrVr/J3NNZwUAAADUYbQaHVj/v1GJw5Tr/099/8KP1XsmIYTzxfr/xaVPhjfqm85Mq+PPiZueIwAAAM06X7Tq+n+a7/+P97c8xCGE114Zx8W/AZyq/k/e/eqH6ljV/f9X6pviTIq74+eR990QWt2mMwIAAOA0e6JoWbH/a7q+8NFPF95v2/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULc/AwAA//8zZj5Y") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 26m10.783243175s ago: executing program 33 (id=136): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x71c9a1d5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x2000000000000e) 12m25.040325665s ago: executing program 2 (id=1317): r0 = socket(0x40000000015, 0x5, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r0, 0x0, 0x0, 0xfffffff7, &(0x7f0000000740), 0x0, 0x0, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@ifindex, 0xffffffffffffffff, 0x1d, 0x0, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000540)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000000)={0x5, 0x0, 0x7, 0x1000000, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0xf3, 0xff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960700000904cc070002596105052407000806"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4(r3, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x80, 0x80800) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x2}, 0x8) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x73, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000002000000000000000400abac7026d5000d32cca79654fbfcceafb24a132bbc14f3958a866609c43ff9d94713595866b1bb824f0c2eab53675a46392cfb8a1f093b42e42b90e5edfe74b7ebe0994e76898a56dafd70846c7a5382ac6f06346ac8097ba108ed0cc2cc6e6beebc490892985e9431"], 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000e22f00000027bd700017dc4bcd5e56e25120250600000008000a0011000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x4085) 12m18.224563437s ago: executing program 2 (id=1326): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r1, @ANYBLOB="080002007f00000108000400ac1e00"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 12m17.431306729s ago: executing program 2 (id=1327): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0x32, 0xffffffffffffffff, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRES8=r1, @ANYRESOCT=r1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x70, 0xa0, 0x8, {0xf400000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x270) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') getdents(r4, &(0x7f0000000300)=""/57, 0x96) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/51, 0x0}) getrlimit(0x5, &(0x7f00000000c0)) 12m16.592590852s ago: executing program 2 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc080) 12m16.301952617s ago: executing program 2 (id=1331): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000100)=0x28) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x14, 0x4, 0x8, 0x6, "ff0000000001ffff00"}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x1, 0x544, &(0x7f0000001000)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480)=ANY=[], 0xfffffffffffffffe, 0x1000) socket(0x15, 0x5, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000b40)=@vmx={0xb, 0x0, 0x2080, {0xe000, 0xf000, {0x1}, 0x0, 0x7}, {"8d84cc65723cbe548fd4178ffd9cf06b52f5896e3f1b4f25640f155ccb5444d15c0263cfb4bba62d019fad2cba9e58d58f85d92ba127962cc880af49ff5bfd8b951e400c89ce635da8d3a63e1ad9541ce6f164f8638ea72a1671e2c3050887d4b528d22a1c6ac12b361111ea6369e6a819732e3a617b830ab4721a7fc61c58108f0538f1a3f9387d9b6eb3074f24cdab2f4b6797f776d34cc7627e9acdc00b375445230ecdda749ccc710c3b736e42985e45a7df520c74ddb80cedc7df4ed239c37fb5245a4b78d0dadf9af32735fb1183a498d30c5fdc99b39db847c43430521ec907507ce9a4c03d6e0290849b73869165224f098bbca794affa3496bd4dee95f236c6f1c61ed1c4b35995e6f47a4772a4e28272f48a1247bb93fd825f7e6f31d91c62055891b8140d231be795e01db9f5df11af5d649d74b41a237402abbcec02e8ffda0c4562e2a08a6a8f892a32d11bc6834e0da75931cb301ac2b0ad834a9dabd335391adf5437eccc1ec529d50c5c47f80ce6d3cee5203371c8925cf35e9191f1c793cd5edcf6e79db7ba2ace8ca1dd60cf289689dd58e4384cdd77b2bdd5095249497037178d5e1a4a21a08f5a42db123433576271c50e1e2df878c26f707c3d81c2583e3ba6fd41111219e479598642806a167e7fe51b23e727588e6b1eb5b60ed58c77bf8f0a4cadd8bb1969a5e14150a30c370cea06d2a6cced710039cbfe9d9ee5f4cf591ab1ef7b7675a0031d7d4df96dfbebbc57bacbd67421bd520a1f2c5779ff272e86b9ba7a5b522ff844e9f68b6025d57ff26c5fe51a95d1e0968822e5fa95185a02f4d03e6007e522caad07f33777c81e201cfbcbbcb8b79e8138bf0d62372d485a2eb7b31c0078d30cebee845e7eef6994b720629685d7702cfbb3b213d46d934dee0f2168eb7838bd32195ebf96df8b40e6f8b546bfeccdad672f33853f5d8397fe12a0fa5da322ce6de1f07487a9fa516422d1f556b72d6df87df55f8d7483b0728713a091359daaddb804cd0cb15626c45d6923a9eab24b2a3bb9e7b1ec32ec6a47b5d288dad2b5ad2de22154da3e29d80db90f105e8db3af1cc43fd8a919267a40e9644cb7a7191d0a117b9d00bc20fa00c2b539f5552777c8c5c947da85af7fefc6e8f7c65625167f08f02c9ce0764beeebcc7a1c3649c0d29b4b9e94d8107707d36bacfaf32fa013de8c8e45138e99b21d2cf5f91be8bc7425c4fb2b22b3061075122f5c9a20f32d491faaf3c146dd8d35234ed995361243803d738c12857b4c007f507ab782db59184f888988b6c1f0badd54ed6137983e5ec1a2376af6cf7023e717dbb250fc74d68db70a8d9e59afc02444fb4ff503a6fbd0c8bf95c66f294ba602b2ff2579de50c345aea7f57904e306ff22c68f72718663a90398f3dd7e8737b04ac8131b52d243c50ad16b3847bf67905ee424fef69e1a38e1385873f9ae496a533aa0e7e27327b19eb7375473b9abd3bc33e59ae06350b644fefd320d19a62e937c97a8e2de44482cf5a896a6485553157b0d33eb0b80b0bba72c2423a904361ffd789964dfd358899babb743f5446ce6c6f2cc3ff8d35ce85fc47e142993cdf8169836b5e120afb882dc7fdd8496d08166b94d4ba64947d9797a0157e98852461d7f2d9da4a513f37e7fe46067965030113fa4c053ad68e28b7d870050c2c276b80e3e8b76d689c15786f19a2ddb9fb55ceb1009d70eba0064bc550dcbc09d17073ae3880579c032544de6d1c0d17e72defbd82cf12431d8fc95059a6dcf7e37e0f9a8d0311d4335437fec92c447247df82f424ed812a148a1cf7dd9411c0bb32c5105ef6b25c333329c7b45ef040197c0321ddd41019b354e2abf67134be17167119d9fae6f010d6ac35a9b30c291e0dea6d362ca90317b1960f04c79d03025cb283a150c5f5aeee5803ade33ba62c4d3ac945da3b77c71b015eca0a841fc13ffe3fcdeba96d4180959c441c9638822208e61fb7f28fb356701cb46c57c5c26a67c38553bd3e5274fc569ec2463a4898fde51c8e9433aeb03f587b8cc1491445fb253834de2f27b712530a52c46bbde5e7483644f7101ab745d9666ad5c3839d65019592981017c46414a8a301a9a324e1a7e64c57806d2b8cf99e751104c35f4b954f07c79aeb98fbd86bf78c1bcdf6e78370791d354ad2b13f0107adc23d7cdf4a318db901c2fe7fb7e3efe86185ba930f700c033e559f9a2c6c6ecf1b600bc3a106da087b0432ac82fa36e136ea800d982240357739a004841e2d3e00d59f3f9f9a6a68f9a02e752a8afb40a2e144aca1fd92f454192475979e8279d0d9d64bb8f0885555634a90488a54c7bfe30f89ac45f2e71dbd2163b66dee7f8f604bac9704040c855f1ddfea8149c1892d733da6743d6ec8f8d5474e913f15a82a2012842309c41ccd597ba397cfc38fa57362cf14c56a9cb5140f03a5938f93fd276942a6485ff298487f43b1bfd7ddd9ef2239bc0a2705a7bf7489933128361b8b17bb72209d86b85519d30017ea2405e75997aa89ee55c3a3717bdd7823b3774eead03addd1a94ab341dae1deb199180c2ddfe7b27969081eb3c084afe9b9e20958db8fd7a806639a7e07486986a6495fc95670292d15facd82f629c72ed4a4ea1a8aab341468cb719eddb062af85d05883548d2b848d83bd1652be9ccbfbd5b6550ba8afff378742fc29e69ed2834cdcf8198d109208aa45f696c9cf12eed6641963a72cf307e469571d796a078d8d5ab8e2c3bd071436e51ce4a22e4cc3e5e006ef074a330db750d8f521ccd541f564f9686e6e819b37dea835be1bef94cf93b330aace22bc2d4ab053103bcc01c6060d890a98c80349185533a00985aa4841a2b79d7938898aa406035bd97b70cf0960344a06544c46f7bd955fc150fe7a010c81cc78b9061cd5f67bcea1d3e1996e97112531fdec60909ca845b79235368d1db3727fc2812d7c335c7386599ceec3a14f17e7681531e0940c7c597e5a0584e5086e37c408bef6a5fefdb5d2fcdb9c6d8b03c8795f4b8ca0afd56e24ecf2bf92c4e2362d577bf3650a32a70e41b668c5d507bbee44d7216f5898a5ba329f008e0ef3858ba64b56d8e0cdaaf5fd6ed40c4bb3dca42ca7f8ed754ab77aed1cccfa534d2ca6b732bc0f97eff2c13e08828204720bae4c322ce87777ab9daf18311de9e0c3b3e4e5c817329a75dbd294594ff92391ebefed81012e318fcb3c5d729d119d171e171128f2e67d7192a31d85e826f4fc42316ec1f2973261819590e19d934e0e231195b2ab456523510661dcc0214737156e1a1bd99c1f5e45d10902b13d6975249624dfe44e681d957c2468b6c9cda9757a40a1f5c69dabbc6517f67f136fb56e106a5bb39424568d84316f2c9f924c9d87ac2062836711695a4bc67c9868d571c4128d57927e87074ce9209f7a775baf25663fb3f9ba2c50e05b1f4455acbfb251ef4528a7c21f5bf3925866fe28109b8663ce4d02a7fc8faad7896ea77fc8457f9e46c6add7ea3d4b35a021777ed1ba2a64591ece34bbeea6f45d8e3aa46133358f2e56df165a2eea8c004a9b0a82cc6e3adc5ed101ad54a246bdcce7262699c04934ae7a98491d5887065550cea42b550c3e1da504ca3578932474ff612809f98247b7145417a3770a9a4a0bf1df995af04df8595144b820aa250d7aff79e332b8da7ef9d7db501bd7168bcbc631787dae8a139457edb7edcdd7105442f632f02e46b54190091c8b7e783ac929b3f1b51817e113658554f7854de0f9184b42aa6da29c21254af2f2c8d2e791da56c1d254af359d5a10cc3dc9f6e401ea49ecdc91a98c277003b93fa3fc5e5c3d04d4f4327351a501307961887760c525fc294a7d09cd3ab88ae96b474514626ff92790fc4ee69c0c0cd73ffad86503bd9c39261dd9634165330da51fba3295e692b61a56fe86ef84c08ccdeb0a1f3e20862907b503bd2c8c079ac38642f970b3ca5341c936b9e92203263a157159a28d655b6e011bc5fd97c6083e0b1528f6fb1f743c266acf3ecff1b6bba818842acfb5b47f23077082df3d275c79ea1e311cdb69d0c3b9f8a0799307bd8e642828d2e4489996a1708105ea90d573a5fe15408537a1c210dde7a311aebd6d0c1b88c75cd58767b35d4636b68bb6c4557f38202db96cc6473eab7f7b1c0bf57a104116feecf6b238edadbaff9ce09680c0a1bb6fb42d7e976019c33c68d136231fbe01ab253f4ff607760b8ec4aac0a5170301b383d57adf8d245c11d52521b3ed7d47d1bd3a2e53d165230349b0608a42dc6f5cc19f55d1d31d7dc61358b4540fdf55a8e4955f7f96590ed0c41f1641f8475ebc1c8cd6020655191ba2724ce4fa79390939e1989fd491d36f4e5bda36f8d874379fcfb71fd9fab9867cfc9b995fdd582e45036a7d49d588fedc42cbf2a38ead9c13ff4b81e8723023df6e0a36c13467b69ba305723480f996eb9ec3d3c4e6cd0e3954c7a456755b3b632409e8956f4d4a7eb9f98935320f5688a947a7180d5860b7c5c5600cbe9afee725dbd1d06eb21360623735310686df96e3128145e6728f6c9b70c5cd459b72dd5ab7a6e503a7fe6fd27423d8f012efc7d74970ec3971f3503d5721096cfb507649f8b19e2f4e446de1780700b26f4f149e081955b7d409b401d953f13b75ff4113b7449c3d165c296348e209532126f5b74502a04ce42a9d2708a114a78978325c9687172e3378068986933ccedff276e9b751575a62509a36307f2be09eaa9f49243f4aa664ad6dbda91a614f3dc72b8cb6ce2f36701e48abf1f16ccea615bcc74ceb20d414c6a3d90308ae6479daf755b0f3a7850ebaf864e9cf5b66941fc0f1102d86425c286c4a609da1ee4b53797e4922df907eb186a524b8c7f533c61230b1cbc1d7b31cdfdadd45e2dbebc24b511ffa12ed3a1be4342c3fd5aa999e9d15474aaa28cacb29033ce156d3202c484100b5cc3588df9021e3521b8c11b19d24e364f9a396478ab7f0b477402387174aaf67e9ce5d07a12428a6b2802d7b5b0a18185a6ca6c0f0664ac701ac2b12efd7a487f657acda89a7faa90bcc8f99f83bea64c0a1e81969dd2d102720265e230301bd8a18e1b75d716913c798d0b52798ad94de9f3c1f8ab88a11d45ef3e86b0fd3771baa03364cc38f7c27ef05511fefd0c6ad84df54a3982b984a7baf6a34d31945228f80215389db195dc7802c4d344aab6ce09e389c80f4ce513ed5e27b9b3808f60a89fbe8135a4a986b74b8400507990037bec3b4f1126e8e50e40008ee23655a7f73d70c2b5cb5b8230fcb204597e13e7aa3d5bef9a650c0df41852d50f91c317726f42ff0a78366a20e9350423996150970078989bb18841ae29a5ae4dbfb6252044e1d4027fd63023f0abcf32c7fc69be1bd69d85959bd396fc45e6d9b6dfedcfc135c713c180c9d1ef86da78e898b9e460cacfddbd3992ebc577141acc6ae32a53856b10e368d2270aca81bb4afdcd85d4fa8c58879c626e7f5533fa1f34ca298e021641c8b4d5a4e34fc22447fb431f63c9985a588cf59160b0864e2810381af7c8bbc49403fd3f3e1c6db5a2073660796bada2d17d83db9f716049591f5cf41287edd0020beefd9653bafda72bf6ab7f7a9912dcb99c622a03506d326df7046076fb6e28f2d346690d755c954396f3617a01f240b2a31fdf720d1394f764d25ac3aa8b8f1c754ef02863d7e7f6e9d9f833e808e5971a1f578019975092693bb06acae42731dc7d0f4db1cb09dd3156ee418ea860ad95ec47a6bcce", "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"}}) r3 = syz_open_pts(r1, 0x141601) ioctl$TCSETS(r3, 0x5402, 0x0) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) landlock_restrict_self(0xffffffffffffffff, 0xa) 12m16.181294234s ago: executing program 2 (id=1332): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sysinfo(0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x400, 0x0, &(0x7f0000000180), 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = io_uring_setup(0x10db, &(0x7f0000000900)={0x0, 0x1786, 0x800, 0x1, 0xd3}) shutdown(0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000008c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x2}]}, 0x4, 0x1, 0x3}, 0x1) 11m59.90480316s ago: executing program 34 (id=1332): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sysinfo(0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x400, 0x0, &(0x7f0000000180), 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = io_uring_setup(0x10db, &(0x7f0000000900)={0x0, 0x1786, 0x800, 0x1, 0xd3}) shutdown(0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000008c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x2}]}, 0x4, 0x1, 0x3}, 0x1) 6m49.578541236s ago: executing program 0 (id=1809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x63, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x63, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0xc050) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) (async) r5 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0xbb193d29a7a59e0d, 0x9c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x1, 0x40, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x2a, 0x24, 0x6, 0x0, 0x1, "20e82e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xf, 0x66, 0x5}, {0x6, 0x24, 0x1a, 0x9, 0xc}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @obex={0x5, 0x24, 0x15, 0xde38}, @obex={0x5, 0x24, 0x15, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x6, 0x8, 0x6}, @mdlm={0x15, 0x24, 0x12, 0xfeff}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x9, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x80, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x1, 0x3}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0xd, 0x7, 0x10, 0x40}, 0xc6, &(0x7f00000003c0)={0x5, 0xf, 0xc6, 0x2, [@generic={0xad, 0x10, 0x1, "6e046f42366aa0fe517daea5f8de011b63369117e5e10b27e1e7d91fa77ab38bae7ecb9e5bed7d337949ce54efa15da3610c73b717d349f597b88052b57de74735061e0854eeb55634294dee487f6d948fa4a6bce872c771e7709112ab5787ef19f6f06b08567817261b7ad761ba43b9c9bd51865b90e05c3aa7b34847410991246f5f9bdbaa7e3f27ea066778ac2d498100938b8160ae9c4d87ffba5203d2058e3a9414b8e7824f42445f208b80aa6e4bae5863b49643669961a0ed8ea53ced46dfb86f57e0d724702587631e8f83fd0a6ec5101f062a08833c097b8ce96874ac9c4eca4eb31afabdb3e07457b6a53a07a12fb88d84783aa959ad2d8340a82d"}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7fffff8, 0xff00, 0x100, [0xff000f, 0xff0030]}]}, 0x1, [{0xc6, &(0x7f0000000280)=@string={0xc6, 0x3, "876cd29b8aa7aa18d1da4913b88fe780f8ee0974f00030e5986f3c300b1e7a6767a74bea38e41654737600c9da97bad4c77a9f85eb8904fa0b039e659bc51f6fb8f2f8c06ce114eba9bf867bd4e01351df6aad3fcc25939b9684cbc92f9456b06830394778fae8bd80fe9ed28f82e2c861cffd2f1e27dfa0bd384d320828b2d22f0d2f4c7b694580b3c65b4d39ba7a45f9ec4171e03038a965de4ac5a4271117351924be5072e712ce9ada24edd33075ca5192793989809ff39a406b2a80dc0a8b786d65"}}]}) (async) syz_usb_connect$cdc_ncm(0xbb193d29a7a59e0d, 0x9c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x1, 0x40, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x2a, 0x24, 0x6, 0x0, 0x1, "20e82e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xf, 0x66, 0x5}, {0x6, 0x24, 0x1a, 0x9, 0xc}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @obex={0x5, 0x24, 0x15, 0xde38}, @obex={0x5, 0x24, 0x15, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x6, 0x8, 0x6}, @mdlm={0x15, 0x24, 0x12, 0xfeff}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x9, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x80, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x1, 0x3}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0xd, 0x7, 0x10, 0x40}, 0xc6, &(0x7f00000003c0)={0x5, 0xf, 0xc6, 0x2, [@generic={0xad, 0x10, 0x1, "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"}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7fffff8, 0xff00, 0x100, [0xff000f, 0xff0030]}]}, 0x1, [{0xc6, &(0x7f0000000280)=@string={0xc6, 0x3, "876cd29b8aa7aa18d1da4913b88fe780f8ee0974f00030e5986f3c300b1e7a6767a74bea38e41654737600c9da97bad4c77a9f85eb8904fa0b039e659bc51f6fb8f2f8c06ce114eba9bf867bd4e01351df6aad3fcc25939b9684cbc92f9456b06830394778fae8bd80fe9ed28f82e2c861cffd2f1e27dfa0bd384d320828b2d22f0d2f4c7b694580b3c65b4d39ba7a45f9ec4171e03038a965de4ac5a4271117351924be5072e712ce9ada24edd33075ca5192793989809ff39a406b2a80dc0a8b786d65"}}]}) 6m46.026493324s ago: executing program 0 (id=1815): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000040), 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc4842, 0x1ff) preadv2(r0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/201, 0xc9}], 0x1, 0x1, 0x5, 0xc) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@acl}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x465, &(0x7f0000001480)="$eJzs3M1vFOUfAPDvzG4L5eXX/hRfQNAqGokvLS2vBy8YTTxoYqIHjKfaFoIsVGlNhBCtHvBoSLwbjyb+BZ70YtSTiVe9GxJiuIAmJmtmdqYs292WwpZF9vNJBp5n5pnM891nnt1nnme3AfSt0eyfJGJLRPwWEcON7I0FRhv/XbtyfvqvK+enk6jX3/gzyctdvXJ+uixanre5kanXi/yGNte98HbEVK02e6bIjy+cem98/uy550+cmjo+e3z29OThw/v37Ro8OHngdkPcEUVcV3d8NLdz+ytvXXxt+ujFd376JqvvlqJQcxxdMjTaeHXbeqrLF+u1rU3ppNrDirAmlYjImmsg7//DUYmhpWPD8fKnPa0csK7q9Xq93edzYbEO3MOS6HUNgN4oP+iz599yu0NDj7vC5SMR7x9qxH+t2BpHqpEWZQZanm+7aTQiji7+/WW2xfrMQwAA3OC7IxHxXLvxXxoPNpX7X7GGMhIR/4+I+yLi/ojYFhEPRORlH4qIh9d4/dYVkuXjn/TSLQV2k7Lx3wvF2tbS+O+feh5/YaRS5Lbm8Q8kx07UZvcWr8meGNiQ5SdWuMb3L/36eadjzeO/bMuuX44FG9JL1ZYJupmphanbDHvJ5U8idlRb4s8lUS7jJBGxvVxIu2nXnzBOPPP1zk6lVoy/WFAc6nRyF9aZ6l9FPN1o/8Voif96HJ3WJycOHZw8ML4xarN7x8u7Yrmff7nweqfrr97+6ytr/02t939uaRV4JNkYMX/23Ml8vXY+WleIV3Xh9886PtPc6v0/mLyZpweLfR9OLSycmYgYTF5dvn/y+rlFvtoc/57d7eJP8/e4MtpHIiK7iXdFxKMR8VhR98cj4omI2L1C/D+++OS7a49/hVn5Lsrin1mt/aO5/deeqJz84dtlF66uFn8pa//9eWpPsedm3v9urEWy2Lqn+W4GAACAe12afwc+SceW0mk6Ntb4Dv+22JTW5uYXnj0298HpmcZ35UdiIC1nuoab5kMnirnhMj/Zkt9XzBt/URnK82PTc7WZXgcPfW5zh/6f+aPS69oB687vtaB/6f/Qv/R/6F/6P/Qv/R/6V7v+/3EP6gHceT7/oX/p/9C/9H/oX/o/9KWOP95Pb+sn/xKrJwbvjmrcaiLStZ9VjZ7WOVn2hyH+C4nqetd5Q9tDvX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA//8wUOyn") 6m43.287712941s ago: executing program 0 (id=1822): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x40010, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0xff, @private2, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x6, 0x0, @val=0x80}}}}}}}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_open_procfs(0x0, 0x0) unlink(&(0x7f0000000100)='./file0/file0\x00') 6m42.549200682s ago: executing program 0 (id=1825): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2eb"], &(0x7f0000000280)='GPL\x00'}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="e33110495bfd00000000000092663a586ef058361fd5f37060afaa86dd60cb653e00283afffe80000000000000000000002ed6ef00000000ff020000000000000000000000000001890090780000000020010000000000000000000000000000ff010000000000000000000000000001"], 0x0) 6m42.542430552s ago: executing program 0 (id=1826): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000001040)={0xe, {0x6, 0x7, 0x7, 0xffffffde}, {0x8, 0x1, 0x4, 0x7ff}, {0x7, 0x6}}) 6m42.42829938s ago: executing program 0 (id=1827): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000480)=0xfffffffe, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 5m25.4964023s ago: executing program 1 (id=2060): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x153, &(0x7f0000000180)="$eJzs2z2r02AUB/AT+2J9GTqLQ8DFqaifQJEKYkBROuikUF1aKdglOvWj+AUF6dTtEY22tla490Kacvv7LT30n8B5huTJCeTt7Y+T8Wz+YfZiGb0si/bDyGOVRT+uRCsqiwAALpNVSvE9pZSuLuLa10gpNd0RAFC3C+7/3dobAwBqY/4HgNNj/weA0/Pq9Ztnj4pi+DLPexHfFuWoHFW/Vf7kaTG8l//S35y1LMtRa53fr/J8O+/E9d/5g715N+7eqfKf2ePnxU5+I8b/6Tl5SgEAAIBzGeRre+f7weaA/s2tvKr+ej+wM7+341b7cOsAAM5u/vnL5N10+v7T8Red42hDoTiFouk7E1C3zUX/55+s2YYAAAAAAAAAAAAAAIB/HOJzoqbXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALt+BAAA//+6LFXK") (async) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x153, &(0x7f0000000180)="$eJzs2z2r02AUB/AT+2J9GTqLQ8DFqaifQJEKYkBROuikUF1aKdglOvWj+AUF6dTtEY22tla490Kacvv7LT30n8B5huTJCeTt7Y+T8Wz+YfZiGb0si/bDyGOVRT+uRCsqiwAALpNVSvE9pZSuLuLa10gpNd0RAFC3C+7/3dobAwBqY/4HgNNj/weA0/Pq9Ztnj4pi+DLPexHfFuWoHFW/Vf7kaTG8l//S35y1LMtRa53fr/J8O+/E9d/5g715N+7eqfKf2ePnxU5+I8b/6Tl5SgEAAIBzGeRre+f7weaA/s2tvKr+ej+wM7+341b7cOsAAM5u/vnL5N10+v7T8Red42hDoTiFouk7E1C3zUX/55+s2YYAAAAAAAAAAAAAAIB/HOJzoqbXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALt+BAAA//+6LFXK") r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='.\x00', 0x6ac00, 0x8e) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x1, 0xb620, 0xa}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r2], 0x40}}, 0x8080) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 5m24.491824579s ago: executing program 1 (id=2064): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0xc, &(0x7f0000000340)=ANY=[], 0x4, 0x24a, &(0x7f0000000680)="$eJzsmDtrFFEUx//3zmvH1aCNhY2FARXJPmabNCkiCFYiJL4qXcwYYjZZ2R3BXRAJNjbaWQg2Fn4Bi4CpUtj5BSJaqCAouIWFTZqR+5jZyc5kdzLY5fyKu/8599x7zzlz5xQLgiAOLd+//f36/OLsIhhwFNNwtP2nATCmNE/4f3n18MLLuUuv331++2F96vFWZDf0r1gShokFDCiNOd8EsD1v4El8Urx6N8QnTOuHRXChfwl9DRzntf0GGCpa3wHHda19MNzS+n5Ct4V/pXJvpeVX7rZbS0LUxFAXgyeGhna1ovgGGwxL2hiGBlgi/m6vv9pstfxOQph6LmOqkIgLm4EFG4N5LmPF9pSMUFTx5rOnG8IU1aam6iepg6Ou92uAYUHbZ+FEtVElSeR/yozyFxUYzT+d7e576SsmJiVZUmLuz38plhA2lDgxU2yfqNqjU8dTlvGCy7KM7GNF9ev2+kLl3dAodnWkMPe5iyx6g3b8Qg92RFksv5I3ixcugOIvF+g5GRFaKctBs1DCUKtODrY+pn1+pFc5eyoWsslHsPz3p5T/riLzruYXLvqrvFDFJgS2s6n6R/iG4SyG/cNM9I9qsPag2u31Z1bWmsv+sr/ueQ2nHHc8v1aV7Sjd+OJ+6Mr+dCSxv5XdKmFzG4+aQdCpq9FmNlwEQceTz17is1nYbP++rZcFuAzgzPDY4cdipMOylQ+XvkKdSzuhvE+EBEEQBEEQBEEQBEEQBEEQ4zgNJv8FFewcA1xtD/fiXZXWfwEAAP//XYhBpQ==") mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001e00010026bd7000fedbdf2507"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) 5m19.219931153s ago: executing program 1 (id=2075): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc4001}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x3c, r2, 0x603, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x10) io_setup(0x1, 0x0) sendmmsg(r0, &(0x7f0000006500)=[{{&(0x7f0000002ac0)=@in6={0xa, 0x4e21, 0x3, @private1, 0x2}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002b40)="04", 0x1}], 0xc, &(0x7f0000000240)=[{0x10, 0x84, 0x7}], 0x10}}], 0x1, 0x4) 5m18.343590444s ago: executing program 1 (id=2080): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x80000, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m18.250058954s ago: executing program 1 (id=2081): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1806e53, 0x0, 0xfa, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x48, 0x30, 0x1, 0x2, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, 0x0, 0xfffffffffffffffe) prlimit64(r2, 0x7, &(0x7f00000005c0)={0x6, 0x800000000000}, &(0x7f0000000600)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x11, 0x0, 0x0, 0x4, 0xccce, {0x5, 0x4, 0x2, 0x1, 0x8, 0x67, 0x3, 0xe7, 0x33, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e000103020000200000000001000000eb4734cb9734b8aadc917b6eba464f0dded4421cd5aa7f96d31a011a5dd0d378ded6085d5e7983"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x58, r4, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28ef}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x40810) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000e20000000000a0300000000000000000001000000090001007379fa300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3020000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000140003aec522b9dac1b6ce750f08475424aa6f8bc204b40d9156556c57906fdf0c2aca54d4be1069d26a082736575a9a9b84eec59d78a4eaaf116dcf0934898b8cb41aca44"], 0xc8}}, 0x20020850) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3524bc93940b761572c725e40f8ac79293819b2a5d5c3a764339f87624f310c4c9a6f2d0f83e97c732609ae64c36aa3ff42081bb75d999d56e7f570bfecf8e436451d88008edbe84bcb5af3ff38de0ff47496ad4f3312cc34fa1d95a7fbe20", @ANYRES8=r0, @ANYRES8=r0], 0x54}, 0x1, 0x0, 0x0, 0x40850}, 0x40810) 5m13.399525621s ago: executing program 1 (id=2089): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000f40104000401"], 0x28}, 0x4004004) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000200)='.\x00', 0x100, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) unshare(0x60000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0xa3c, 0x4}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 4m59.524629564s ago: executing program 6 (id=2115): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0700000000000000000000000000000057ef5340", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000200"/28], 0x50) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e22, 0xc, @mcast2, 0x34}, 0x19, 0x0}, 0x44048) r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0x3ff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977f"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x67) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x89980, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) 4m56.974796843s ago: executing program 35 (id=2089): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000f40104000401"], 0x28}, 0x4004004) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000200)='.\x00', 0x100, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) unshare(0x60000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0xa3c, 0x4}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 4m56.437284771s ago: executing program 6 (id=2119): r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x8100}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x7028, 0x6, 0x3, 0x0, 0xffffbffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 4m54.858562571s ago: executing program 6 (id=2121): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="6bac58bd860000bd7000fbdbdf2501000000790ee9b5312cdf47a134ffb9084ae7e4099513a0445b98824755efb88e86629b756b265d83fbc945c8f4edcefa2ab07ce04ad9087a52361e502fe73e080cab55a6e71ddb19f30e3ea8cbe40de10a1ed784b0378a5f"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) socket$key(0xf, 0x3, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) socket(0x2, 0x3, 0x6) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10042, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x4, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e21, 0x800, @empty}, 0x3, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x440c5}, 0x0) 4m53.9921616s ago: executing program 6 (id=2124): pipe(&(0x7f00000002c0)={0xffffffffffffffff}) name_to_handle_at(r0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000280)=ANY=[], 0xfffffffffffffffe, 0x1200) 4m53.818227987s ago: executing program 6 (id=2126): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sysinfo(0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x400, 0x0, &(0x7f0000000180), 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = io_uring_setup(0x10db, &(0x7f0000000900)={0x0, 0x1786, 0x800, 0x1, 0xd3}) shutdown(0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f00000008c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x2}]}, 0x4, 0x1, 0x3}, 0x1) 4m51.168236079s ago: executing program 6 (id=2127): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000340)='./file2\x00', 0x2a0400b, &(0x7f0000000040)=ANY=[], 0x41, 0x24b, &(0x7f0000000840)="$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") getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.id\x00', 0x0, 0x0) select(0xff00, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100}, 0x0, &(0x7f0000000040)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone3(&(0x7f0000000080)={0x901400, 0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0xfffffc83) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000380)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100), 0x0) r3 = shmget$private(0x0, 0x400000, 0x4, &(0x7f000000e000/0x400000)=nil) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc0405602, &(0x7f00000001c0)=@multiplanar_fd={0x0, 0x1, 0x4, 0x24, 0x8, {}, {0x2, 0xc, 0x3, 0xff, 0xc, 0x7, 'P[9A'}, 0x56b, 0x4, {0x0}, 0xe}) r5 = shmat(r3, &(0x7f0000232000/0x1000)=nil, 0x0) unshare(0x2c020400) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/141, 0x8d}], 0x1, &(0x7f0000000800)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESHEX=r5, @ANYRES64=r2, @ANYBLOB="6b8a92a18870cfe1a4c87e05ac52b33eb3365b8752ce4a0484490af747c56284d32b99a9e3ff4c049552ed8f933ee2e9ff3690cb2dbcae83f9f9761ea3ca6b7bf6a4c04a64a9aaffc5e303f7617cb0ab2a499af562373ca94a00c6d45e221a297071eb51757fe28815f2d660f3ccc1be9f0c723894be289888a48d2e54bc485d06a0bf23714c5fa92a92bc105a21c856b2011247ffcc45ded918"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001", @ANYRES16=r2], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) 4m35.874002404s ago: executing program 36 (id=2127): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000340)='./file2\x00', 0x2a0400b, &(0x7f0000000040)=ANY=[], 0x41, 0x24b, &(0x7f0000000840)="$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") getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.id\x00', 0x0, 0x0) select(0xff00, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100}, 0x0, &(0x7f0000000040)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone3(&(0x7f0000000080)={0x901400, 0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0xfffffc83) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000380)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100), 0x0) r3 = shmget$private(0x0, 0x400000, 0x4, &(0x7f000000e000/0x400000)=nil) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc0405602, &(0x7f00000001c0)=@multiplanar_fd={0x0, 0x1, 0x4, 0x24, 0x8, {}, {0x2, 0xc, 0x3, 0xff, 0xc, 0x7, 'P[9A'}, 0x56b, 0x4, {0x0}, 0xe}) r5 = shmat(r3, &(0x7f0000232000/0x1000)=nil, 0x0) unshare(0x2c020400) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/141, 0x8d}], 0x1, &(0x7f0000000800)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESHEX=r5, @ANYRES64=r2, @ANYBLOB="6b8a92a18870cfe1a4c87e05ac52b33eb3365b8752ce4a0484490af747c56284d32b99a9e3ff4c049552ed8f933ee2e9ff3690cb2dbcae83f9f9761ea3ca6b7bf6a4c04a64a9aaffc5e303f7617cb0ab2a499af562373ca94a00c6d45e221a297071eb51757fe28815f2d660f3ccc1be9f0c723894be289888a48d2e54bc485d06a0bf23714c5fa92a92bc105a21c856b2011247ffcc45ded918"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001", @ANYRES16=r2], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) 15.083694179s ago: executing program 5 (id=2537): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x9}]}) close_range(r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x4, @loopback}}}, 0x88) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = shmget(0x2, 0x2000, 0x780002e0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r7, 0x0) shmctl$SHM_INFO(r7, 0xe, &(0x7f0000001040)=""/180) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r8, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x4048084) 14.496396048s ago: executing program 7 (id=2538): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) pread64(r0, 0x0, 0x0, 0x255) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000400)={{r1}, "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"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000000000)={0x28, 0x21, 0x1, 0x80000, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xe0, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x70f838f2d555c854}, 0x4014) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000000)={0x8, &(0x7f0000000340)=[{0x16, '\x00', @st={0x4, [{0x3, @uvalue=0x3482}, {0x1, @uvalue=0x1e}, {0x1, @uvalue=0x2}, {0x3, @uvalue=0x8000000000000001}]}, 0x100}, {0x14, '\x00', @data=0x10000, 0x12}]}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0xa, 0x5, "a3e181493d"}, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x1, "ba"}, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x85, 0x3, "d7e4bc"}}) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x3014c0, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) 10.704000721s ago: executing program 5 (id=2539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40000043, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r1) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x3e1200) setresuid(0xee00, 0x0, 0x0) 10.285223579s ago: executing program 7 (id=2540): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 10.026301555s ago: executing program 7 (id=2541): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2001, 0x0) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, &(0x7f00000001c0)={0x20, 0x22, 0x78, {0x78, 0x23, "910f69fb3b8c4057759c64b98291140e08db7ab8ae20c2f1f5f612ce1baaef91443e73de50051abda4ae1f35f4c41d2fad93d0d85814724957a17116ddf3ed72170d40b9a0c8c1479c4c3c380713d6c6a11720aaa6f1fcf5ff5a90bde7fd4ae051e60df3d7a456763ab3c3c7e9591c71e8eac2ba7471"}}, 0x0, 0x0, 0x0}, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x8}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 9.565759985s ago: executing program 5 (id=2542): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2d5f"], 0xe0}], 0x1}, 0x0) 9.327648378s ago: executing program 5 (id=2543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') socketpair(0x5, 0x1, 0x1ad5, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x140d, 0x400, 0x0, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048084}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="0803bd0f0001000001000000000065"]}, {0x0, 0x0}]}) 7.920135646s ago: executing program 5 (id=2544): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000140)={{&(0x7f00004e2000/0x1000)=nil, 0x1000}}) syz_open_dev$audion(&(0x7f0000000080), 0x2, 0xe32b4807e74be397) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$char_usb(r2, &(0x7f0000000600)="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", 0x150) write$UHID_INPUT(r2, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x10683, &(0x7f0000011040)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)) 6.5122276s ago: executing program 5 (id=2545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x12, r0, 0x0) timer_create(0x2, &(0x7f0000000200)={0x0, 0x8, 0x1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4004e24, 0x4}}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000400), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20080011}, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x80000001}, 0x10) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x44) sched_setscheduler(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 6.22095156s ago: executing program 7 (id=2546): capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x0, 0x700, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @remote, @local}}}}) r1 = socket(0xa, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9c64e00755c139ed0ee04200", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0x541b, 0x0) sendmmsg$unix(r1, &(0x7f0000000180)=[{{&(0x7f00000006c0)=@file={0x0, './bus/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004001}}], 0x1, 0x44012) io_setup(0x7, &(0x7f00000000c0)=0x0) io_destroy(r5) r6 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r7 = fcntl$dupfd(r6, 0x406, r6) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000b40)={0x8, {"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", 0x1000}}, 0x1006) 1.848862863s ago: executing program 7 (id=2547): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) (fail_nth: 6) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=2548): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="000100001a000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000040)="c894", 0x2}], 0x1, &(0x7f00000017c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x1, 0x4005) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000100)=""/228, 0xe4}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) kernel console output (not intermixed with test programs): ng to 9 [ 1538.584728][ T823] usb 8-1: config 64 interface 44 has no altsetting 0 [ 1538.588487][ T823] usb 8-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 1538.588519][ T823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.588542][ T823] usb 8-1: Product: syz [ 1538.588558][ T823] usb 8-1: Manufacturer: syz [ 1538.588574][ T823] usb 8-1: SerialNumber: syz [ 1538.908510][T16423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.911193][T16423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.958860][ T823] iowarrior 8-1:64.44: no interrupt-out endpoint found [ 1538.982917][ T823] usb 8-1: USB disconnect, device number 17 [ 1538.999725][ T5862] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1539.012197][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 1539.180659][T15952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1539.227580][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 1539.230203][ T5862] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.230231][ T5862] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1539.232948][ T5862] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1539.232977][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.232997][ T5862] usb 6-1: Product: syz [ 1539.233011][ T5862] usb 6-1: Manufacturer: syz [ 1539.233025][ T5862] usb 6-1: SerialNumber: syz [ 1539.254922][ T5627] Bluetooth: hci6: command 0x0c1a tx timeout [ 1539.338173][ T5862] usb 6-1: 0:2 : does not exist [ 1539.359834][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1539.414549][T15952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1539.781403][ T5862] usb 6-1: USB disconnect, device number 19 [ 1539.809207][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1539.851319][T15952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1539.909403][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1540.170810][T16452] kAFS: No cell specified [ 1540.358568][T15952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1540.372178][ T5627] Bluetooth: hci3: command tx timeout [ 1540.398266][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1540.642237][T11243] hsr_slave_0: left promiscuous mode [ 1540.682303][T11243] hsr_slave_1: left promiscuous mode [ 1540.825705][T11243] hsr_slave_0: left promiscuous mode [ 1540.842217][T11243] hsr_slave_1: left promiscuous mode [ 1540.843247][T11243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.883055][T11243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.974781][T11243] veth1_macvtap: left promiscuous mode [ 1540.974896][T11243] veth0_macvtap: left promiscuous mode [ 1540.975504][T11243] veth1_vlan: left promiscuous mode [ 1540.975655][T11243] veth0_vlan: left promiscuous mode [ 1541.522274][ T5862] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1541.654249][ T5862] usb 6-1: device descriptor read/64, error -71 [ 1541.912379][ T5862] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1542.042183][ T5862] usb 6-1: device descriptor read/64, error -71 [ 1542.152635][ T5862] usb usb6-port1: attempt power cycle [ 1542.462205][ T5627] Bluetooth: hci3: command tx timeout [ 1542.492120][ T5862] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1542.513387][ T5862] usb 6-1: device descriptor read/8, error -71 [ 1542.552973][T11243] team0 (unregistering): Port device team_slave_1 removed [ 1542.613104][T11243] team0 (unregistering): Port device team_slave_0 removed [ 1542.782322][ T5862] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1542.806253][ T5862] usb 6-1: device descriptor read/8, error -71 [ 1542.916689][ T5862] usb usb6-port1: unable to enumerate USB device [ 1543.203998][T16013] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1544.534961][T16013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1544.556122][T16483] kAFS: No cell specified [ 1544.726437][T16013] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1545.326825][T16013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1545.347071][T16013] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1545.446298][T16013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1545.451246][T16013] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1545.545832][T16013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1547.156841][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1547.215683][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1547.247287][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1547.271720][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1547.309218][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1548.052193][ T5862] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1548.250009][ T5862] usb 6-1: device descriptor read/64, error -71 [ 1548.562348][ T5862] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1548.692228][ T5862] usb 6-1: device descriptor read/64, error -71 [ 1550.742936][ T5619] Bluetooth: hci4: command tx timeout [ 1550.769127][ T5862] usb usb6-port1: attempt power cycle [ 1550.895257][T16541] afs: Bad value for 'source' [ 1550.957967][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1551.187806][T16013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.288709][T16329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.289115][T16329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.289453][T16329] bridge_slave_0: entered allmulticast mode [ 1551.319216][T16329] bridge_slave_0: entered promiscuous mode [ 1551.370314][T16329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.370759][T16329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.371092][T16329] bridge_slave_1: entered allmulticast mode [ 1551.407345][T16329] bridge_slave_1: entered promiscuous mode [ 1551.462129][ T5862] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1551.487084][ T5862] usb 6-1: device descriptor read/8, error -71 [ 1551.595298][T16329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.636290][T16329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.732562][ T5862] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1551.769589][ T5862] usb 6-1: device descriptor read/8, error -71 [ 1551.868436][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1551.873978][ T5862] usb usb6-port1: unable to enumerate USB device [ 1551.880340][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1551.919344][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1551.961711][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1551.987440][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1552.329078][T16329] team0: Port device team_slave_0 added [ 1552.722230][ T823] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1552.789759][ T5619] Bluetooth: hci4: command tx timeout [ 1552.885615][ T823] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1552.885648][ T823] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1552.885677][ T823] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1552.885701][ T823] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1552.888752][ T823] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1552.888786][ T823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.888810][ T823] usb 8-1: Product: syz [ 1552.888837][ T823] usb 8-1: Manufacturer: syz [ 1552.888853][ T823] usb 8-1: SerialNumber: syz [ 1552.984775][ T823] usb 8-1: config 0 descriptor?? [ 1553.005185][T16329] team0: Port device team_slave_1 added [ 1553.033599][ T823] ums-isd200 8-1:0.0: USB Mass Storage device detected [ 1553.238378][ T823] scsi host1: usb-storage 8-1:0.0 [ 1553.462433][ T823] usb 8-1: USB disconnect, device number 18 [ 1553.562951][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1554.000911][T16329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.000931][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.000962][T16329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.052327][ T5619] Bluetooth: hci0: command tx timeout [ 1554.098321][T16329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.098341][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.098373][T16329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.055810][ T5619] Bluetooth: hci4: command tx timeout [ 1557.946377][ T5619] Bluetooth: hci0: command tx timeout [ 1557.946414][ T5619] Bluetooth: hci4: command tx timeout [ 1558.114065][T16615] afs: Bad value for 'source' [ 1559.693500][T16329] hsr_slave_0: entered promiscuous mode [ 1559.702819][T16329] hsr_slave_1: entered promiscuous mode [ 1559.705291][T16329] debugfs: 'hsr0' already exists in 'hsr' [ 1559.705319][T16329] Cannot create hsr debugfs directory [ 1559.972468][ T5627] Bluetooth: hci0: command tx timeout [ 1560.119410][ T5595] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1560.367003][ T5595] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1560.367051][ T5595] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1560.367077][ T5595] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.407119][ T5595] usb 6-1: config 0 descriptor?? [ 1560.851144][ T5595] video4linux radio48: keene_cmd_main failed (-71) [ 1560.851177][ T5595] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 1560.872568][ T5595] usb 6-1: USB disconnect, device number 28 [ 1561.906840][ T5269] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1563.560694][T16519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.561122][T16519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.578574][ T5627] Bluetooth: hci0: command tx timeout [ 1563.624580][T16519] bridge_slave_0: entered allmulticast mode [ 1563.648869][T16519] bridge_slave_0: entered promiscuous mode [ 1563.983971][T16519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.984223][T16519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.984439][T16519] bridge_slave_1: entered allmulticast mode [ 1563.989967][T16519] bridge_slave_1: entered promiscuous mode [ 1564.969146][ T5595] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1566.967141][ T5269] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1567.279973][T16519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.591355][T16715] FAULT_INJECTION: forcing a failure. [ 1567.591355][T16715] name failslab, interval 1, probability 0, space 0, times 0 [ 1567.591394][T16715] CPU: 1 UID: 0 PID: 16715 Comm: syz.5.2282 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1567.591440][T16715] Tainted: [L]=SOFTLOCKUP [ 1567.591453][T16715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1567.591471][T16715] Call Trace: [ 1567.591478][T16715] [ 1567.591486][T16715] dump_stack_lvl+0xe8/0x150 [ 1567.591520][T16715] should_fail_ex+0x467/0x600 [ 1567.591555][T16715] should_failslab+0xa8/0x100 [ 1567.591580][T16715] ? alloc_empty_file+0x5b/0x1d0 [ 1567.591602][T16715] kmem_cache_alloc_noprof+0x9e/0x680 [ 1567.591626][T16715] ? alloc_empty_file+0x5b/0x1d0 [ 1567.591652][T16715] alloc_empty_file+0x5b/0x1d0 [ 1567.591675][T16715] path_openat+0x8f/0x3850 [ 1567.591708][T16715] ? __x64_sys_creat+0x8f/0xc0 [ 1567.591730][T16715] ? do_syscall_64+0x174/0x580 [ 1567.591751][T16715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.591791][T16715] do_file_open+0x23e/0x4a0 [ 1567.591817][T16715] ? lockdep_hardirqs_on+0x7a/0x110 [ 1567.591842][T16715] ? __pfx_do_file_open+0x10/0x10 [ 1567.591888][T16715] ? alloc_fd+0x654/0x6d0 [ 1567.591920][T16715] do_sys_openat2+0x115/0x200 [ 1567.591947][T16715] ? __pfx_do_sys_openat2+0x10/0x10 [ 1567.591974][T16715] ? ksys_write+0x248/0x270 [ 1567.592004][T16715] ? __pfx_ksys_write+0x10/0x10 [ 1567.592032][T16715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.592052][T16715] __x64_sys_creat+0x8f/0xc0 [ 1567.592078][T16715] do_syscall_64+0x174/0x580 [ 1567.592100][T16715] ? trace_irq_disable+0x3b/0x140 [ 1567.592127][T16715] ? clear_bhb_loop+0x40/0x90 [ 1567.592149][T16715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.592169][T16715] RIP: 0033:0x7fbe8b9cde59 [ 1567.592191][T16715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.592207][T16715] RSP: 002b:00007fbe89c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1567.592225][T16715] RAX: ffffffffffffffda RBX: 00007fbe8bc55fa0 RCX: 00007fbe8b9cde59 [ 1567.592238][T16715] RDX: 0000000000000000 RSI: 0000000000000044 RDI: 00002000000009c0 [ 1567.592250][T16715] RBP: 00007fbe89c26090 R08: 0000000000000000 R09: 0000000000000000 [ 1567.592272][T16715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1567.592282][T16715] R13: 00007fbe8bc56038 R14: 00007fbe8bc55fa0 R15: 00007ffd1ba99e38 [ 1567.592309][T16715] [ 1567.693365][T16717] netlink: 'syz.7.2281': attribute type 28 has an invalid length. [ 1567.693426][T16717] netlink: 'syz.7.2281': attribute type 3 has an invalid length. [ 1567.693467][T16717] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2281'. [ 1567.950708][T16519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1572.141505][T16736] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2285'. [ 1572.196630][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1572.196764][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1573.185440][T16565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.186736][T16565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.187091][T16565] bridge_slave_0: entered allmulticast mode [ 1573.199823][T16565] bridge_slave_0: entered promiscuous mode [ 1573.553016][T16565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.553344][T16565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.553707][T16565] bridge_slave_1: entered allmulticast mode [ 1573.558402][T16565] bridge_slave_1: entered promiscuous mode [ 1573.594128][T16519] team0: Port device team_slave_0 added [ 1573.674232][T16519] team0: Port device team_slave_1 added [ 1577.587873][T16565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.690769][T16565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.701158][T16519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.701177][T16519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.701211][T16519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.830072][T16519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.830092][T16519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.830127][T16519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.893680][T16565] team0: Port device team_slave_0 added [ 1577.905802][T16565] team0: Port device team_slave_1 added [ 1578.041906][T16565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.041926][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.042498][T16565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.062453][T16519] hsr_slave_0: entered promiscuous mode [ 1578.064973][T16519] hsr_slave_1: entered promiscuous mode [ 1578.067025][T16519] debugfs: 'hsr0' already exists in 'hsr' [ 1578.067058][T16519] Cannot create hsr debugfs directory [ 1578.070951][T16565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.070968][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.071002][T16565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.322832][T16565] hsr_slave_0: entered promiscuous mode [ 1578.325485][T16565] hsr_slave_1: entered promiscuous mode [ 1578.327623][T16565] debugfs: 'hsr0' already exists in 'hsr' [ 1578.327653][T16565] Cannot create hsr debugfs directory [ 1580.179521][T16797] FAULT_INJECTION: forcing a failure. [ 1580.179521][T16797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1580.179554][T16797] CPU: 1 UID: 0 PID: 16797 Comm: syz.7.2296 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1580.179580][T16797] Tainted: [L]=SOFTLOCKUP [ 1580.179587][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1580.179598][T16797] Call Trace: [ 1580.179605][T16797] [ 1580.179613][T16797] dump_stack_lvl+0xe8/0x150 [ 1580.179643][T16797] should_fail_ex+0x467/0x600 [ 1580.179685][T16797] prepare_alloc_pages+0x223/0x690 [ 1580.179723][T16797] __alloc_frozen_pages_noprof+0x12f/0x390 [ 1580.179754][T16797] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1580.179784][T16797] ? __pfx_policy_nodemask+0x10/0x10 [ 1580.179819][T16797] alloc_pages_mpol+0xce/0x280 [ 1580.179850][T16797] ___kmalloc_large_node+0x4c/0x120 [ 1580.179873][T16797] ? __rds_conn_create+0x7e8/0x2260 [ 1580.179899][T16797] __kmalloc_large_node_noprof+0x18/0x90 [ 1580.179923][T16797] ? __rds_conn_create+0x7e8/0x2260 [ 1580.179948][T16797] __kmalloc_noprof+0x4bc/0x790 [ 1580.179970][T16797] ? __rds_conn_create+0x7bc/0x2260 [ 1580.180002][T16797] ? __rds_conn_create+0x7e8/0x2260 [ 1580.180032][T16797] __rds_conn_create+0x7e8/0x2260 [ 1580.180056][T16797] ? __rds_conn_create+0x2d4/0x2260 [ 1580.180090][T16797] ? __pfx___rds_conn_create+0x10/0x10 [ 1580.180112][T16797] ? rcu_is_watching+0x15/0xb0 [ 1580.180133][T16797] ? trace_kmalloc+0x2a/0xf0 [ 1580.180161][T16797] ? __rt_spin_lock_init+0x3e/0x50 [ 1580.180187][T16797] rds_conn_create_outgoing+0x43/0x60 [ 1580.180218][T16797] rds_sendmsg+0xfca/0x20e0 [ 1580.180249][T16797] ? __pfx_rds_sendmsg+0x10/0x10 [ 1580.180266][T16797] ? aa_sk_perm+0x703/0x950 [ 1580.180289][T16797] ? __lock_acquire+0x683/0x2ce0 [ 1580.180318][T16797] ? __pfx_aa_sk_perm+0x10/0x10 [ 1580.180338][T16797] ? aa_sock_msg_perm+0x122/0x200 [ 1580.180364][T16797] ? __pfx_rds_sendmsg+0x10/0x10 [ 1580.180380][T16797] sock_sendmsg_nosec+0x13a/0x180 [ 1580.180411][T16797] ____sys_sendmsg+0x565/0x870 [ 1580.180433][T16797] ? __might_fault+0xaf/0x130 [ 1580.180462][T16797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1580.180491][T16797] ? import_iovec+0x73/0xa0 [ 1580.180520][T16797] ___sys_sendmsg+0x2a5/0x360 [ 1580.180542][T16797] ? __lock_acquire+0x683/0x2ce0 [ 1580.180573][T16797] ? __pfx____sys_sendmsg+0x10/0x10 [ 1580.180625][T16797] ? __fget_files+0x2a/0x420 [ 1580.180648][T16797] ? __fget_files+0x3a8/0x420 [ 1580.180680][T16797] __x64_sys_sendmsg+0x1b7/0x290 [ 1580.180705][T16797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1580.180743][T16797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.180762][T16797] do_syscall_64+0x174/0x580 [ 1580.180783][T16797] ? trace_irq_disable+0x3b/0x140 [ 1580.180810][T16797] ? clear_bhb_loop+0x40/0x90 [ 1580.180833][T16797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.180851][T16797] RIP: 0033:0x7f03755ade59 [ 1580.180868][T16797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.180884][T16797] RSP: 002b:00007f0373806028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1580.180903][T16797] RAX: ffffffffffffffda RBX: 00007f0375835fa0 RCX: 00007f03755ade59 [ 1580.180917][T16797] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1580.180928][T16797] RBP: 00007f0373806090 R08: 0000000000000000 R09: 0000000000000000 [ 1580.180940][T16797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1580.180951][T16797] R13: 00007f0375836038 R14: 00007f0375835fa0 R15: 00007fff300552f8 [ 1580.180979][T16797] [ 1580.594096][ T5269] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1584.369167][ T38] kauditd_printk_skb: 35 callbacks suppressed [ 1584.369187][ T38] audit: type=1326 audit(1782982045.429:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16813 comm="syz.5.2301" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8b9cde59 code=0x7ffc0000 [ 1584.369706][ T38] audit: type=1326 audit(1782982045.429:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16813 comm="syz.5.2301" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8b9cde59 code=0x7ffc0000 [ 1584.369758][ T38] audit: type=1326 audit(1782982045.429:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16813 comm="syz.5.2301" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8b9cde59 code=0x7ffc0000 [ 1584.370957][ T38] audit: type=1326 audit(1782982045.429:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16813 comm="syz.5.2301" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8b9cde59 code=0x7ffc0000 [ 1584.371491][ T38] audit: type=1326 audit(1782982045.429:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16813 comm="syz.5.2301" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fbe8b9cde59 code=0x7ffc0000 [ 1584.371558][ T38] audit: type=1326 audit(1782982045.429:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16813 comm="syz.5.2301" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8b9cde59 code=0x7ffc0000 [ 1584.371917][ T38] audit: type=1326 audit(1782982045.429:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16813 comm="syz.5.2301" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8b9cde59 code=0x7ffc0000 [ 1584.405375][ T38] audit: type=1326 audit(1782982045.459:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16813 comm="syz.5.2301" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8b9cde59 code=0x7ffc0000 [ 1584.552893][ T38] audit: type=1326 audit(1782982045.589:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16813 comm="syz.5.2301" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8b9cde59 code=0x7ffc0000 [ 1584.553060][ T38] audit: type=1326 audit(1782982045.599:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16813 comm="syz.5.2301" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8b9cde59 code=0x7ffc0000 [ 1585.807696][T16830] kAFS: unable to lookup cell 'yz0' [ 1586.962331][T11251] bridge_slave_1: left allmulticast mode [ 1586.962370][T11251] bridge_slave_1: left promiscuous mode [ 1586.962791][T11251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.000308][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2309'. [ 1589.155262][T11251] bridge_slave_0: left allmulticast mode [ 1589.155301][T11251] bridge_slave_0: left promiscuous mode [ 1589.155596][T11251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.412379][T11251] bridge_slave_1: left allmulticast mode [ 1590.412410][T11251] bridge_slave_1: left promiscuous mode [ 1590.412632][T11251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.544135][T11251] bridge_slave_0: left allmulticast mode [ 1590.544178][T11251] bridge_slave_0: left promiscuous mode [ 1590.544464][T11251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.033256][T11251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.113657][T11251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1591.174395][T11251] bond0 (unregistering): Released all slaves [ 1591.749148][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1591.804647][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1591.832967][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1591.860226][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1591.860994][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1591.865457][T11251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.976034][T11251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.032897][T11251] bond0 (unregistering): Released all slaves [ 1592.148734][ T5269] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1592.537670][T16873] kAFS: unable to lookup cell 'yz0' [ 1593.972200][ T5627] Bluetooth: hci5: command tx timeout [ 1596.611232][ T5627] Bluetooth: hci5: command tx timeout [ 1598.833849][ T5627] Bluetooth: hci5: command tx timeout [ 1599.182186][T11251] hsr_slave_0: left promiscuous mode [ 1599.222189][T11251] hsr_slave_1: left promiscuous mode [ 1599.223325][T11251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.230956][T16925] kAFS: unable to lookup cell 'yz0' [ 1599.253497][T11251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.423515][T11251] hsr_slave_0: left promiscuous mode [ 1599.462144][T11251] hsr_slave_1: left promiscuous mode [ 1599.463320][T11251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.505177][T11251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.342513][ T5627] Bluetooth: hci5: command tx timeout [ 1605.326403][T16953] kAFS: unable to lookup cell 'yz0' [ 1605.339975][T11251] team0 (unregistering): Port device team_slave_1 removed [ 1605.414475][T11251] team0 (unregistering): Port device team_slave_0 removed [ 1607.013183][T11251] team0 (unregistering): Port device team_slave_1 removed [ 1607.053141][T11251] team0 (unregistering): Port device team_slave_0 removed [ 1608.485862][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1608.542309][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1608.584606][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1608.616448][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1608.646108][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1609.129032][T16983] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1610.772822][ T5627] Bluetooth: hci6: command tx timeout [ 1612.858935][ T5627] Bluetooth: hci6: command tx timeout [ 1613.255452][ T5619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1613.381554][ T5619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1613.572950][ T5619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1613.574436][ T5619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1613.575530][ T5619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1615.609917][ T5619] Bluetooth: hci6: command tx timeout [ 1615.664533][T12791] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1615.822103][T12791] usb 6-1: Using ep0 maxpacket: 8 [ 1615.824548][T12791] usb 6-1: config 1 has no interfaces? [ 1615.828800][T12791] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1615.828832][T12791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.828855][T12791] usb 6-1: Product: syz [ 1615.828872][T12791] usb 6-1: Manufacturer: syz [ 1615.828895][T12791] usb 6-1: SerialNumber: syz [ 1616.224341][ T5627] Bluetooth: hci7: command tx timeout [ 1617.654968][ T5627] Bluetooth: hci6: command tx timeout [ 1620.581517][ T5627] Bluetooth: hci7: command tx timeout [ 1620.742595][T17055] FAULT_INJECTION: forcing a failure. [ 1620.742595][T17055] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1620.742642][T17055] CPU: 1 UID: 0 PID: 17055 Comm: syz.7.2347 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1620.742679][T17055] Tainted: [L]=SOFTLOCKUP [ 1620.742688][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1620.742704][T17055] Call Trace: [ 1620.742714][T17055] [ 1620.742724][T17055] dump_stack_lvl+0xe8/0x150 [ 1620.742765][T17055] should_fail_ex+0x467/0x600 [ 1620.742830][T17055] prepare_alloc_pages+0x223/0x690 [ 1620.742872][T17055] __alloc_frozen_pages_noprof+0x12f/0x390 [ 1620.742914][T17055] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1620.742949][T17055] ? __alloc_frozen_pages_noprof+0x1f4/0x390 [ 1620.742990][T17055] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1620.743043][T17055] ? __pfx_policy_nodemask+0x10/0x10 [ 1620.743079][T17055] ? lockdep_hardirqs_on+0x7a/0x110 [ 1620.743113][T17055] __alloc_pages_noprof+0x10/0x100 [ 1620.743150][T17055] alloc_pages_bulk_noprof+0x67e/0x890 [ 1620.743194][T17055] ? alloc_pages_mpol+0x115/0x280 [ 1620.743242][T17055] ? alloc_pages_noprof+0x161/0x2f0 [ 1620.743285][T17055] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1620.743316][T17055] ? rt_spin_unlock+0x163/0x200 [ 1620.743357][T17055] alloc_vmap_area+0xd1a/0x1420 [ 1620.743404][T17055] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1620.743441][T17055] ? __kmalloc_cache_node_noprof+0x459/0x670 [ 1620.743478][T17055] ? __get_vm_area_node+0x136/0x300 [ 1620.743505][T17055] ? __get_vm_area_node+0x136/0x300 [ 1620.743541][T17055] __get_vm_area_node+0x1f2/0x300 [ 1620.743577][T17055] __vmalloc_node_range_noprof+0x358/0x1730 [ 1620.743610][T17055] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1620.743639][T17055] ? __lock_acquire+0x683/0x2ce0 [ 1620.743704][T17055] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1620.743737][T17055] ? aa_file_perm+0x18b/0x1600 [ 1620.743778][T17055] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1620.743802][T17055] __vmalloc_noprof+0xd2/0x120 [ 1620.743833][T17055] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1620.743862][T17055] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1620.743885][T17055] ? bpf_prog_alloc+0x2a/0x1a0 [ 1620.743912][T17055] bpf_prog_alloc+0x3c/0x1a0 [ 1620.743939][T17055] bpf_prog_load+0x7f8/0x1c00 [ 1620.743979][T17055] ? __pfx_bpf_prog_load+0x10/0x10 [ 1620.744043][T17055] __sys_bpf+0xd0d/0xd90 [ 1620.744090][T17055] ? __pfx___sys_bpf+0x10/0x10 [ 1620.744131][T17055] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1620.744166][T17055] ? rt_mutex_slowunlock+0x219/0x460 [ 1620.744225][T17055] ? ksys_write+0x248/0x270 [ 1620.744267][T17055] ? __pfx_ksys_write+0x10/0x10 [ 1620.744312][T17055] __x64_sys_bpf+0xba/0xd0 [ 1620.744347][T17055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.744376][T17055] do_syscall_64+0x174/0x580 [ 1620.744403][T17055] ? trace_irq_disable+0x3b/0x140 [ 1620.744440][T17055] ? clear_bhb_loop+0x40/0x90 [ 1620.744470][T17055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.744494][T17055] RIP: 0033:0x7f03755ade59 [ 1620.744518][T17055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.744539][T17055] RSP: 002b:00007f0373806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1620.744566][T17055] RAX: ffffffffffffffda RBX: 00007f0375835fa0 RCX: 00007f03755ade59 [ 1620.744585][T17055] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1620.744600][T17055] RBP: 00007f0373806090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.744617][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1620.744631][T17055] R13: 00007f0375836038 R14: 00007f0375835fa0 R15: 00007fff300552f8 [ 1620.744670][T17055] [ 1620.745113][T10313] usb 6-1: USB disconnect, device number 30 [ 1620.807972][T17055] syz.7.2347: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1620.808250][T17055] CPU: 0 UID: 0 PID: 17055 Comm: syz.7.2347 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1620.808356][T17055] Tainted: [L]=SOFTLOCKUP [ 1620.808382][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1620.808427][T17055] Call Trace: [ 1620.808452][T17055] [ 1620.808477][T17055] dump_stack_lvl+0xe8/0x150 [ 1620.808600][T17055] warn_alloc+0x24c/0x270 [ 1620.808693][T17055] ? kasan_quarantine_put+0xbb/0x1f0 [ 1620.808784][T17055] ? __pfx_warn_alloc+0x10/0x10 [ 1620.808879][T17055] ? __get_vm_area_node+0x20b/0x300 [ 1620.808973][T17055] ? __get_vm_area_node+0x20b/0x300 [ 1620.809083][T17055] __vmalloc_node_range_noprof+0x37d/0x1730 [ 1620.809191][T17055] ? __lock_acquire+0x683/0x2ce0 [ 1620.809328][T17055] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1620.809386][T17055] ? aa_file_perm+0x18b/0x1600 [ 1620.809549][T17055] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1620.809616][T17055] __vmalloc_noprof+0xd2/0x120 [ 1620.809698][T17055] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1620.809764][T17055] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1620.809823][T17055] ? bpf_prog_alloc+0x2a/0x1a0 [ 1620.809901][T17055] bpf_prog_alloc+0x3c/0x1a0 [ 1620.809973][T17055] bpf_prog_load+0x7f8/0x1c00 [ 1620.810081][T17055] ? __pfx_bpf_prog_load+0x10/0x10 [ 1620.810221][T17055] __sys_bpf+0xd0d/0xd90 [ 1620.810348][T17055] ? __pfx___sys_bpf+0x10/0x10 [ 1620.810463][T17055] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1620.810574][T17055] ? rt_mutex_slowunlock+0x219/0x460 [ 1620.810731][T17055] ? ksys_write+0x248/0x270 [ 1620.810817][T17055] ? __pfx_ksys_write+0x10/0x10 [ 1620.810935][T17055] __x64_sys_bpf+0xba/0xd0 [ 1620.811021][T17055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.811093][T17055] do_syscall_64+0x174/0x580 [ 1620.811171][T17055] ? trace_irq_disable+0x3b/0x140 [ 1620.811208][T17055] ? clear_bhb_loop+0x40/0x90 [ 1620.811317][T17055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.811447][T17055] RIP: 0033:0x7f03755ade59 [ 1620.811522][T17055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.811566][T17055] RSP: 002b:00007f0373806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1620.811630][T17055] RAX: ffffffffffffffda RBX: 00007f0375835fa0 RCX: 00007f03755ade59 [ 1620.811685][T17055] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1620.811730][T17055] RBP: 00007f0373806090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.811776][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1620.811823][T17055] R13: 00007f0375836038 R14: 00007f0375835fa0 R15: 00007fff300552f8 [ 1620.811922][T17055] [ 1620.828429][T17055] Mem-Info: [ 1620.828475][T17055] active_anon:7458 inactive_anon:0 isolated_anon:0 [ 1620.828475][T17055] active_file:0 inactive_file:57852 isolated_file:0 [ 1620.828475][T17055] unevictable:768 dirty:147 writeback:0 [ 1620.828475][T17055] slab_reclaimable:12170 slab_unreclaimable:105336 [ 1620.828475][T17055] mapped:40336 shmem:1302 pagetables:1585 [ 1620.828475][T17055] sec_pagetables:0 bounce:0 [ 1620.828475][T17055] kernel_misc_reclaimable:0 [ 1620.828475][T17055] free:1278222 free_pcp:5284 free_cma:0 [ 1620.828668][T17055] Node 0 active_anon:29832kB inactive_anon:0kB active_file:0kB inactive_file:231188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161324kB dirty:584kB writeback:0kB shmem:3672kB kernel_stack:13860kB pagetables:6196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1620.828774][T17055] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1620.828960][T17055] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.829164][T17055] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1620.829280][T17055] Node 0 DMA32 free:1164152kB boost:0kB min:3916kB low:6440kB high:8964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29832kB inactive_anon:0kB active_file:0kB inactive_file:231188kB unevictable:1536kB writepending:584kB zspages:0kB present:3129332kB managed:2554240kB mlocked:0kB bounce:0kB free_pcp:21128kB local_pcp:8148kB free_cma:0kB [ 1620.829438][T17055] lowmem_reserve[]: 0 0 1 1 1 [ 1620.829527][T17055] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1156kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1620.829748][T17055] lowmem_reserve[]: 0 0 0 0 0 [ 1620.836478][T17055] Node 1 Normal free:3933376kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.836589][T17055] lowmem_reserve[]: 0 0 0 0 0 [ 1620.836730][T17055] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1620.837116][T17055] Node 0 DMA32: 1084*4kB (UME) 49*8kB (ME) 150*16kB (UME) 563*32kB (UME) 291*64kB (UME) 139*128kB (UME) 77*256kB (UME) 23*512kB (UME) 4*1024kB (M) 13*2048kB (UME) 254*4096kB (UM) = 1164152kB [ 1620.837723][T17055] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1620.845265][T17055] Node 1 Normal: 0*4kB 4*8kB (U) 8*16kB (UM) 3*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3933376kB [ 1620.845810][T17055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1620.845877][T17055] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1620.845899][T17055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1620.845920][T17055] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1620.845964][T17055] 59150 total pagecache pages [ 1620.846008][T17055] 0 pages in swap cache [ 1620.846039][T17055] Free swap = 124996kB [ 1620.846071][T17055] Total swap = 124996kB [ 1620.846112][T17055] 2097051 pages RAM [ 1620.846135][T17055] 0 pages HighMem/MovableOnly [ 1620.846167][T17055] 426588 pages reserved [ 1620.846191][T17055] 0 pages cma reserved [ 1622.814894][ T5627] Bluetooth: hci7: command tx timeout [ 1622.916184][T12791] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1623.582093][T12791] usb 8-1: Using ep0 maxpacket: 32 [ 1623.584411][T12791] usb 8-1: config 14 has an invalid interface number: 197 but max is 2 [ 1623.584442][T12791] usb 8-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 1623.584466][T12791] usb 8-1: config 14 has 1 interface, different from the descriptor's value: 3 [ 1623.584490][T12791] usb 8-1: config 14 has no interface number 0 [ 1623.584546][T12791] usb 8-1: config 14 interface 197 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1623.584573][T12791] usb 8-1: config 14 interface 197 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 32 [ 1623.584600][T12791] usb 8-1: config 14 interface 197 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1623.584631][T12791] usb 8-1: config 14 interface 197 has no altsetting 0 [ 1623.587587][T12791] usb 8-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=4f.47 [ 1623.587619][T12791] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.587642][T12791] usb 8-1: Product: 瑶溁霁檎띭熔㛻撾혜鬦輀ᬎﳕᔵ爖禎玄匸댛蹈ⷋ০򾍄ੌ㟷惍㠭鲴尓ǔᾎ휵﹑湽绶裮揪䈜桤졾򅟬ẜ⋋㹰萈苔彯繲譬␣ [ 1623.796174][T17080] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1624.039860][T12791] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1624.050321][T12791] gspca_sunplus: reg_w_riv err -71 [ 1624.050429][T12791] sunplus 8-1:14.197: probe with driver sunplus failed with error -71 [ 1624.092792][T12791] usb 8-1: USB disconnect, device number 19 [ 1624.852251][ T5627] Bluetooth: hci7: command tx timeout [ 1625.620666][T17112] FAULT_INJECTION: forcing a failure. [ 1625.620666][T17112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1625.620696][T17112] CPU: 1 UID: 0 PID: 17112 Comm: syz.5.2356 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1625.620721][T17112] Tainted: [L]=SOFTLOCKUP [ 1625.620727][T17112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1625.620737][T17112] Call Trace: [ 1625.620743][T17112] [ 1625.620751][T17112] dump_stack_lvl+0xe8/0x150 [ 1625.620777][T17112] should_fail_ex+0x467/0x600 [ 1625.620809][T17112] _copy_from_user+0x2d/0xb0 [ 1625.620831][T17112] memdup_user+0x5e/0xd0 [ 1625.620848][T17112] dvb_frontend_do_ioctl+0x11e1/0x4200 [ 1625.620875][T17112] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 1625.620903][T17112] ? stack_trace_save+0xa9/0x100 [ 1625.620926][T17112] ? __pfx_stack_trace_save+0x10/0x10 [ 1625.620948][T17112] ? kasan_save_track+0x4f/0x80 [ 1625.620971][T17112] ? stack_depot_save_flags+0x33/0x800 [ 1625.620986][T17112] ? __lock_acquire+0x683/0x2ce0 [ 1625.621014][T17112] ? kasan_save_track+0x4f/0x80 [ 1625.621033][T17112] ? kasan_save_track+0x3e/0x80 [ 1625.621051][T17112] ? kasan_save_free_info+0x40/0x50 [ 1625.621065][T17112] ? __kasan_slab_free+0x5c/0x80 [ 1625.621085][T17112] ? kfree+0x1c5/0x6c0 [ 1625.621102][T17112] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1625.621127][T17112] ? security_file_ioctl+0xc3/0x2a0 [ 1625.621150][T17112] ? __se_sys_ioctl+0x47/0x170 [ 1625.621164][T17112] ? do_syscall_64+0x174/0x580 [ 1625.621182][T17112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.621252][T17112] ? __might_fault+0xaf/0x130 [ 1625.621290][T17112] dvb_usercopy+0x199/0x2e0 [ 1625.621311][T17112] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 1625.621330][T17112] ? __pfx_dvb_usercopy+0x10/0x10 [ 1625.621360][T17112] ? __fget_files+0x2a/0x420 [ 1625.621381][T17112] ? __fget_files+0x3a8/0x420 [ 1625.621401][T17112] ? __fget_files+0x2a/0x420 [ 1625.621423][T17112] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 1625.621443][T17112] dvb_frontend_ioctl+0x5c/0x80 [ 1625.621463][T17112] __se_sys_ioctl+0xff/0x170 [ 1625.621477][T17112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.621495][T17112] do_syscall_64+0x174/0x580 [ 1625.621512][T17112] ? trace_irq_disable+0x3b/0x140 [ 1625.621537][T17112] ? clear_bhb_loop+0x40/0x90 [ 1625.621557][T17112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.621573][T17112] RIP: 0033:0x7fbe8b9cde59 [ 1625.621588][T17112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1625.621601][T17112] RSP: 002b:00007fbe89c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1625.621618][T17112] RAX: ffffffffffffffda RBX: 00007fbe8bc55fa0 RCX: 00007fbe8b9cde59 [ 1625.621630][T17112] RDX: 0000200000000400 RSI: 0000000080106f53 RDI: 0000000000000003 [ 1625.621641][T17112] RBP: 00007fbe89c26090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.621651][T17112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1625.621660][T17112] R13: 00007fbe8bc56038 R14: 00007fbe8bc55fa0 R15: 00007ffd1ba99e38 [ 1625.621685][T17112] [ 1626.780638][T16862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.781448][T16862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.781807][T16862] bridge_slave_0: entered allmulticast mode [ 1627.439096][T16862] bridge_slave_0: entered promiscuous mode [ 1627.455943][T16862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.456511][T16862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.456878][T16862] bridge_slave_1: entered allmulticast mode [ 1627.505716][T16862] bridge_slave_1: entered promiscuous mode [ 1628.286528][T16862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1628.428618][T16862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1628.973217][ T5862] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1629.140588][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 83, changing to 10 [ 1629.140626][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25343, setting to 1024 [ 1629.140658][ T5862] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1629.140704][ T5862] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1629.140731][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.178790][ T5862] usb 8-1: config 0 descriptor?? [ 1629.338588][T16862] team0: Port device team_slave_0 added [ 1629.428315][T16862] team0: Port device team_slave_1 added [ 1629.792797][ T5862] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1630.047434][T16862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.047454][T16862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.047485][T16862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.086396][T16862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.086415][T16862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.086456][T16862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.093554][T12536] IPVS: starting estimator thread 0... [ 1631.276185][T17155] IPVS: using max 10 ests per chain, 24000 per kthread [ 1631.655649][T11251] bridge_slave_1: left allmulticast mode [ 1631.655826][T11251] bridge_slave_1: left promiscuous mode [ 1631.656396][T11251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.702141][T17160] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1631.870513][ T5862] usb 8-1: USB disconnect, device number 20 [ 1631.889429][T17160] usb 6-1: Using ep0 maxpacket: 32 [ 1631.891769][T17160] usb 6-1: config 14 has an invalid interface number: 197 but max is 2 [ 1631.891805][T17160] usb 6-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 1631.891825][T17160] usb 6-1: config 14 has 1 interface, different from the descriptor's value: 3 [ 1631.891845][T17160] usb 6-1: config 14 has no interface number 0 [ 1631.891898][T17160] usb 6-1: config 14 interface 197 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1631.892279][T17160] usb 6-1: config 14 interface 197 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 32 [ 1631.892306][T17160] usb 6-1: config 14 interface 197 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1631.892333][T17160] usb 6-1: config 14 interface 197 has no altsetting 0 [ 1631.910947][T17160] usb 6-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=4f.47 [ 1631.911039][T17160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.911094][T17160] usb 6-1: Product: 瑶溁霁檎띭熔㛻撾혜鬦輀ᬎﳕᔵ爖禎玄匸댛蹈ⷋ০򾍄ੌ㟷惍㠭鲴尓ǔᾎ휵﹑湽绶裮揪䈜桤졾򅟬ẜ⋋㹰萈苔彯繲譬␣ [ 1631.911633][T17160] usb 6-1: Manufacturer: 㷄쑌 [ 1632.030392][T11251] bridge_slave_0: left allmulticast mode [ 1632.033825][T11251] bridge_slave_0: left promiscuous mode [ 1632.034090][T11251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.080791][T17157] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1632.262934][T17162] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2367'. [ 1632.368058][T17160] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1632.370104][T17160] gspca_sunplus: reg_w_riv err -71 [ 1632.370199][T17160] sunplus 6-1:14.197: probe with driver sunplus failed with error -71 [ 1632.407237][T17160] usb 6-1: USB disconnect, device number 31 [ 1633.055063][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1633.055180][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1633.077087][T11251] bridge_slave_1: left allmulticast mode [ 1633.077126][T11251] bridge_slave_1: left promiscuous mode [ 1633.077399][T11251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.244387][T11251] bridge_slave_0: left allmulticast mode [ 1633.244422][T11251] bridge_slave_0: left promiscuous mode [ 1633.244675][T11251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.682696][T17175] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2372'. [ 1633.985148][T10313] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1634.023088][T11251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1634.103095][T11251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1634.135282][T10313] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1634.136184][T10313] usb 6-1: not running at top speed; connect to a high speed hub [ 1634.137470][T10313] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 1634.137499][T10313] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.137524][T10313] usb 6-1: config 5 has no interface number 0 [ 1634.137581][T10313] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1634.137603][T10313] usb 6-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1634.137625][T10313] usb 6-1: config 5 interface 246 has no altsetting 0 [ 1634.140172][T10313] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1634.140210][T10313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.140235][T10313] usb 6-1: Product: syz [ 1634.140257][T10313] usb 6-1: Manufacturer: syz [ 1634.140270][T10313] usb 6-1: SerialNumber: syz [ 1634.252844][T11251] bond0 (unregistering): Released all slaves [ 1635.063234][T11251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1635.173681][T11251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1635.240866][T11251] bond0 (unregistering): Released all slaves [ 1636.097381][T17177] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1636.144187][T10313] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1636.171900][T16862] hsr_slave_0: entered promiscuous mode [ 1636.185422][T16862] hsr_slave_1: entered promiscuous mode [ 1636.353227][T10313] usb 6-1: USB disconnect, device number 32 [ 1636.409138][ T8451] usb 6-1: Failed to submit usb control message: -71 [ 1636.409170][ T8451] usb 6-1: unable to send the bmi data to the device: -71 [ 1636.409185][ T8451] usb 6-1: unable to get target info from device [ 1636.409251][ T8451] usb 6-1: could not get target info (-71) [ 1636.409545][ T8451] usb 6-1: could not probe fw (-71) [ 1636.652995][ T5863] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1636.680540][T17190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2375'. [ 1636.815265][ T5863] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 1636.815294][ T5863] usb 8-1: config 0 has no interface number 0 [ 1636.815341][ T5863] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1636.819505][ T5863] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1636.819534][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.819553][ T5863] usb 8-1: Product: syz [ 1636.819566][ T5863] usb 8-1: Manufacturer: syz [ 1636.819580][ T5863] usb 8-1: SerialNumber: syz [ 1636.891634][ T5863] usb 8-1: config 0 descriptor?? [ 1636.987943][ T5863] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 1637.149283][ T5863] usb 8-1: USB disconnect, device number 21 [ 1637.179038][ T5863] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 1638.507440][ T5863] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1638.662121][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 1638.664212][ T5863] usb 6-1: config 14 has an invalid interface number: 197 but max is 2 [ 1638.664239][ T5863] usb 6-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 1638.664256][ T5863] usb 6-1: config 14 has 1 interface, different from the descriptor's value: 3 [ 1638.664276][ T5863] usb 6-1: config 14 has no interface number 0 [ 1638.664327][ T5863] usb 6-1: config 14 interface 197 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1638.664349][ T5863] usb 6-1: config 14 interface 197 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 32 [ 1638.664370][ T5863] usb 6-1: config 14 interface 197 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1638.664395][ T5863] usb 6-1: config 14 interface 197 has no altsetting 0 [ 1638.670665][ T5863] usb 6-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=4f.47 [ 1638.670698][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.670720][ T5863] usb 6-1: Product: 瑶溁霁檎띭熔㛻撾혜鬦輀ᬎﳕᔵ爖禎玄匸댛蹈ⷋ০򾍄ੌ㟷惍㠭鲴尓ǔᾎ휵﹑湽绶裮揪䈜桤졾򅟬ẜ⋋㹰萈苔彯繲譬␣ [ 1638.670746][ T5863] usb 6-1: Manufacturer: 㷄쑌 [ 1638.827654][T17200] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1639.320022][ T5863] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1639.322278][ T5863] gspca_sunplus: reg_w_riv err -71 [ 1639.322378][ T5863] sunplus 6-1:14.197: probe with driver sunplus failed with error -71 [ 1639.837812][ T5863] usb 6-1: USB disconnect, device number 33 [ 1639.861015][T11251] hsr_slave_0: left promiscuous mode [ 1639.904437][T11251] hsr_slave_1: left promiscuous mode [ 1639.905500][T11251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1639.944489][T11251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.142224][T11251] hsr_slave_0: left promiscuous mode [ 1640.163609][T11251] hsr_slave_1: left promiscuous mode [ 1640.168472][T11251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1640.203050][T11251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.763347][T11251] team0 (unregistering): Port device team_slave_1 removed [ 1640.804472][T11251] team0 (unregistering): Port device team_slave_0 removed [ 1640.902279][T10313] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1641.062163][T10313] usb 6-1: Using ep0 maxpacket: 8 [ 1641.066728][T10313] usb 6-1: config 1 has no interfaces? [ 1641.071877][T10313] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1641.071910][T10313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.097304][T10313] usb 6-1: Product: syz [ 1641.097327][T10313] usb 6-1: Manufacturer: syz [ 1641.097343][T10313] usb 6-1: SerialNumber: syz [ 1642.173614][T11251] team0 (unregistering): Port device team_slave_1 removed [ 1642.233882][T11251] team0 (unregistering): Port device team_slave_0 removed [ 1642.475292][T16970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.475678][T16970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.475942][T16970] bridge_slave_0: entered allmulticast mode [ 1642.480033][T16970] bridge_slave_0: entered promiscuous mode [ 1642.599555][T16970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.600062][T16970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.600408][T16970] bridge_slave_1: entered allmulticast mode [ 1642.618223][T16970] bridge_slave_1: entered promiscuous mode [ 1643.409732][T16970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.625175][T16970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.661130][ T5863] usb 6-1: USB disconnect, device number 34 [ 1646.177826][T16970] team0: Port device team_slave_0 added [ 1646.194819][T17013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.195085][T17013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.195352][T17013] bridge_slave_0: entered allmulticast mode [ 1646.198029][T17013] bridge_slave_0: entered promiscuous mode [ 1646.205081][T16970] team0: Port device team_slave_1 added [ 1646.211129][ T5863] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1646.264107][T17013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.264485][T17013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.264859][T17013] bridge_slave_1: entered allmulticast mode [ 1646.267954][T17013] bridge_slave_1: entered promiscuous mode [ 1646.375106][ T5617] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1646.595801][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 1646.612709][ T5863] usb 6-1: config 14 has an invalid interface number: 197 but max is 2 [ 1646.612731][ T5863] usb 6-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 1646.612751][ T5863] usb 6-1: config 14 has 1 interface, different from the descriptor's value: 3 [ 1646.612768][ T5863] usb 6-1: config 14 has no interface number 0 [ 1646.612879][ T5863] usb 6-1: config 14 interface 197 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1646.612898][ T5863] usb 6-1: config 14 interface 197 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 32 [ 1646.612916][ T5863] usb 6-1: config 14 interface 197 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1646.612937][ T5863] usb 6-1: config 14 interface 197 has no altsetting 0 [ 1646.615646][ T5863] usb 6-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=4f.47 [ 1646.615680][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.615738][ T5863] usb 6-1: Product: 瑶溁霁檎띭熔㛻撾혜鬦輀ᬎﳕᔵ爖禎玄匸댛蹈ⷋ০򾍄ੌ㟷惍㠭鲴尓ǔᾎ휵﹑湽绶裮揪䈜桤졾򅟬ẜ⋋㹰萈苔彯繲譬␣ [ 1646.615758][ T5863] usb 6-1: Manufacturer: 㷄쑌 [ 1646.654327][ T5617] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.654804][ T5617] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1646.655017][ T5617] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.657630][T17269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1646.820005][ T5617] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1646.988907][ T5863] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1646.989744][ T5863] gspca_sunplus: reg_w_riv err -71 [ 1646.989807][ T5863] sunplus 6-1:14.197: probe with driver sunplus failed with error -71 [ 1647.100838][ T5863] usb 6-1: USB disconnect, device number 35 [ 1647.327679][T16970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.327694][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.327717][T16970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.386629][T17013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.389389][T16970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.389405][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.389429][T16970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.458892][T17013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.694082][T17013] team0: Port device team_slave_0 added [ 1647.904978][ T5617] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1647.905002][ T5617] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 1647.907754][ T5617] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1647.907780][ T5617] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 1647.915903][T17013] team0: Port device team_slave_1 added [ 1648.076473][T16970] hsr_slave_0: entered promiscuous mode [ 1648.081186][T16970] hsr_slave_1: entered promiscuous mode [ 1648.090130][T16970] debugfs: 'hsr0' already exists in 'hsr' [ 1648.090206][T16970] Cannot create hsr debugfs directory [ 1648.117241][ T5617] usb 8-1: USB disconnect, device number 22 [ 1648.542784][T17013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.542803][T17013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.542836][T17013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.719307][T17013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.719327][T17013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.719361][T17013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.785179][T17276] pim6reg: entered allmulticast mode [ 1649.002921][T17290] pim6reg: left allmulticast mode [ 1649.321085][T17307] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2397'. [ 1649.466352][T17307] ip6gre2: entered promiscuous mode [ 1649.466380][T17307] ip6gre2: entered allmulticast mode [ 1650.071187][T17013] hsr_slave_0: entered promiscuous mode [ 1650.085886][T17013] hsr_slave_1: entered promiscuous mode [ 1650.088214][T17013] debugfs: 'hsr0' already exists in 'hsr' [ 1650.088243][T17013] Cannot create hsr debugfs directory [ 1651.045444][ T6538] bridge_slave_1: left allmulticast mode [ 1651.045486][ T6538] bridge_slave_1: left promiscuous mode [ 1651.045823][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.163798][ T6538] bridge_slave_0: left allmulticast mode [ 1651.163829][ T6538] bridge_slave_0: left promiscuous mode [ 1651.164165][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.432228][ T6538] bridge_slave_1: left allmulticast mode [ 1651.432270][ T6538] bridge_slave_1: left promiscuous mode [ 1651.432568][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.515552][T12791] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1651.604762][ T6538] bridge_slave_0: left allmulticast mode [ 1651.604790][ T6538] bridge_slave_0: left promiscuous mode [ 1651.604987][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.662536][T12791] usb 8-1: Using ep0 maxpacket: 8 [ 1651.996453][T12791] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.996806][T12791] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1651.996839][T12791] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1652.640993][T12791] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1652.641029][T12791] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1652.641054][T12791] usb 8-1: Product: syz [ 1652.641071][T12791] usb 8-1: Manufacturer: syz [ 1652.641086][T12791] usb 8-1: SerialNumber: syz [ 1652.737813][T12791] usb 8-1: config 0 descriptor?? [ 1652.832241][T12791] rc_core: IR keymap rc-imon-rsc not found [ 1652.832266][T12791] Registered IR keymap rc-empty [ 1652.876438][T12791] rc rc0: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1652.900318][T12791] input: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input15 [ 1653.214947][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.343072][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.436485][ T6538] bond0 (unregistering): Released all slaves [ 1653.603888][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1653.678960][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1653.690043][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1653.726606][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1653.727859][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1653.794022][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.905084][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1654.169087][ T6538] bond0 (unregistering): Released all slaves [ 1656.653303][ T5627] Bluetooth: hci0: command tx timeout [ 1657.011364][ T5863] usb 8-1: USB disconnect, device number 23 [ 1658.692164][ T5627] Bluetooth: hci0: command tx timeout [ 1660.861784][ T5627] Bluetooth: hci0: command tx timeout [ 1661.067140][ T6538] hsr_slave_0: left promiscuous mode [ 1661.239194][ T6538] hsr_slave_1: left promiscuous mode [ 1661.240343][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.272769][T17406] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in; [ 1661.272769][T17406] program syz.7.2412 not setting count and/or reply_len properly [ 1661.293437][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.467506][ T6538] hsr_slave_0: left promiscuous mode [ 1661.510245][ T6538] hsr_slave_1: left promiscuous mode [ 1661.511422][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.534789][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.617218][T12584] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1661.802979][T12584] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.803048][T12584] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1661.803075][T12584] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.862013][T12584] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1662.077663][ T6538] team0 (unregistering): Port device team_slave_1 removed [ 1662.143770][ T6538] team0 (unregistering): Port device team_slave_0 removed [ 1662.687030][ T6538] team0 (unregistering): Port device team_slave_1 removed [ 1662.740489][ T6538] team0 (unregistering): Port device team_slave_0 removed [ 1663.590954][T12584] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1663.590991][T12584] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 1663.592975][T12584] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1663.593008][T12584] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 1665.333917][T17435] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1665.333943][T17435] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1665.638213][T12584] usb 8-1: USB disconnect, device number 24 [ 1667.561749][T17354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.562089][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.562437][T17354] bridge_slave_0: entered allmulticast mode [ 1667.603700][T17354] bridge_slave_0: entered promiscuous mode [ 1667.627301][T17354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.628639][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.629417][T17354] bridge_slave_1: entered allmulticast mode [ 1667.681671][T17354] bridge_slave_1: entered promiscuous mode [ 1668.103570][T17354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1668.545110][T17475] netlink: 'syz.5.2425': attribute type 28 has an invalid length. [ 1668.545134][T17475] netlink: 'syz.5.2425': attribute type 3 has an invalid length. [ 1668.545149][T17475] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2425'. [ 1668.859773][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1668.909793][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1668.975902][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1669.003447][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1669.009496][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1669.682325][T17354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.741067][T17158] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1669.979228][T17158] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.979307][T17158] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1669.979326][T17158] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.042087][T17158] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1670.374015][T17354] team0: Port device team_slave_0 added [ 1670.396233][T17354] team0: Port device team_slave_1 added [ 1670.832223][T17354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1670.832243][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1670.832277][T17354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1670.998174][T17354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1670.998194][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1670.998226][T17354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.801346][ T5619] Bluetooth: hci3: command tx timeout [ 1671.921800][T17158] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1671.922005][T17158] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 1672.340441][T17158] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1672.340469][T17158] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 1673.065017][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1673.159148][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1673.182223][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1673.191687][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1673.214508][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1673.378023][T17354] hsr_slave_0: entered promiscuous mode [ 1673.381064][T17354] hsr_slave_1: entered promiscuous mode [ 1673.382722][T17354] debugfs: 'hsr0' already exists in 'hsr' [ 1673.382746][T17354] Cannot create hsr debugfs directory [ 1673.815376][T17159] usb 8-1: USB disconnect, device number 25 [ 1674.188564][ T5619] Bluetooth: hci3: command tx timeout [ 1674.535004][T17540] netlink: 'syz.7.2436': attribute type 28 has an invalid length. [ 1674.535030][T17540] netlink: 'syz.7.2436': attribute type 3 has an invalid length. [ 1674.535046][T17540] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2436'. [ 1675.486254][ T5619] Bluetooth: hci4: command tx timeout [ 1675.699536][T17554] FAULT_INJECTION: forcing a failure. [ 1675.699536][T17554] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.699571][T17554] CPU: 0 UID: 0 PID: 17554 Comm: syz.7.2440 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1675.699605][T17554] Tainted: [L]=SOFTLOCKUP [ 1675.699614][T17554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1675.699628][T17554] Call Trace: [ 1675.699645][T17554] [ 1675.699653][T17554] dump_stack_lvl+0xe8/0x150 [ 1675.699683][T17554] should_fail_ex+0x467/0x600 [ 1675.699717][T17554] should_failslab+0xa8/0x100 [ 1675.699745][T17554] __kmalloc_noprof+0xfb/0x790 [ 1675.699768][T17554] ? tomoyo_realpath_from_path+0xef/0x640 [ 1675.699790][T17554] ? tomoyo_realpath_from_path+0xef/0x640 [ 1675.699817][T17554] tomoyo_realpath_from_path+0xef/0x640 [ 1675.699848][T17554] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1675.699877][T17554] tomoyo_path_number_perm+0x246/0x5f0 [ 1675.699905][T17554] ? __lock_acquire+0x683/0x2ce0 [ 1675.699934][T17554] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1675.699965][T17554] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1675.699987][T17554] ? lockdep_hardirqs_on+0x7a/0x110 [ 1675.700034][T17554] ? __pfx_current_check_access_path+0x10/0x10 [ 1675.700053][T17554] ? d_alloc_parallel+0x1543/0x16c0 [ 1675.700089][T17554] tomoyo_path_mknod+0x14a/0x1a0 [ 1675.700114][T17554] ? d_alloc_parallel+0x3cf/0x16c0 [ 1675.700143][T17554] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1675.700178][T17554] security_path_mknod+0x176/0x370 [ 1675.700204][T17554] may_o_create+0x2d/0x370 [ 1675.700234][T17554] ? mode_strip_sgid+0xa1/0x1b0 [ 1675.700254][T17554] path_openat+0xfb5/0x3850 [ 1675.700292][T17554] ? kmem_cache_alloc_noprof+0x358/0x680 [ 1675.700333][T17554] do_file_open+0x23e/0x4a0 [ 1675.700360][T17554] ? lockdep_hardirqs_on+0x7a/0x110 [ 1675.700383][T17554] ? __pfx_do_file_open+0x10/0x10 [ 1675.700431][T17554] ? alloc_fd+0x654/0x6d0 [ 1675.700461][T17554] do_sys_openat2+0x115/0x200 [ 1675.700486][T17554] ? __pfx_do_sys_openat2+0x10/0x10 [ 1675.700511][T17554] ? ksys_write+0x248/0x270 [ 1675.700546][T17554] ? __pfx_ksys_write+0x10/0x10 [ 1675.700574][T17554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.700593][T17554] __x64_sys_creat+0x8f/0xc0 [ 1675.700619][T17554] do_syscall_64+0x174/0x580 [ 1675.700659][T17554] ? trace_irq_disable+0x3b/0x140 [ 1675.700687][T17554] ? clear_bhb_loop+0x40/0x90 [ 1675.700709][T17554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.700726][T17554] RIP: 0033:0x7f03755ade59 [ 1675.700744][T17554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.700760][T17554] RSP: 002b:00007f03737e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1675.700780][T17554] RAX: ffffffffffffffda RBX: 00007f0375836090 RCX: 00007f03755ade59 [ 1675.700793][T17554] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000080 [ 1675.700805][T17554] RBP: 00007f03737e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.700816][T17554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.700827][T17554] R13: 00007f0375836128 R14: 00007f0375836090 R15: 00007fff300552f8 [ 1675.700855][T17554] [ 1675.700864][T17554] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1676.349854][ T5619] Bluetooth: hci3: command tx timeout [ 1676.383081][ T5617] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1676.555349][ T5617] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.555411][ T5617] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1676.555439][ T5617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.606907][ T5617] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1677.180868][T17566] bridge0: port 2(bridge_slave_1) entered listening state [ 1677.184027][T17566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.704765][ T5619] Bluetooth: hci4: command tx timeout [ 1677.735614][T17575] netlink: 'syz.7.2446': attribute type 28 has an invalid length. [ 1677.735635][T17575] netlink: 'syz.7.2446': attribute type 3 has an invalid length. [ 1677.735647][T17575] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2446'. [ 1678.260746][ T5617] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1678.260772][ T5617] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 1678.262396][ T5617] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1678.262422][ T5617] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 1678.566827][ T5619] Bluetooth: hci3: command tx timeout [ 1678.777514][T17581] can: request_module (can-proto-0) failed. [ 1679.219692][T17590] binder: 17589:17590 ioctl c0306201 0 returned -14 [ 1679.432723][T17476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.433169][T17476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.433901][T17476] bridge_slave_0: entered allmulticast mode [ 1679.458558][T17476] bridge_slave_0: entered promiscuous mode [ 1679.464348][T17476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.464933][T17476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.465280][T17476] bridge_slave_1: entered allmulticast mode [ 1679.496328][T17476] bridge_slave_1: entered promiscuous mode [ 1679.611529][T17476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.628782][T17476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1682.151255][ T5619] Bluetooth: hci4: command tx timeout [ 1682.237719][T17476] team0: Port device team_slave_0 added [ 1682.244663][T17601] FAULT_INJECTION: forcing a failure. [ 1682.244663][T17601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1682.244715][T17601] CPU: 1 UID: 0 PID: 17601 Comm: syz.7.2452 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1682.244747][T17601] Tainted: [L]=SOFTLOCKUP [ 1682.244755][T17601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1682.244769][T17601] Call Trace: [ 1682.244779][T17601] [ 1682.244788][T17601] dump_stack_lvl+0xe8/0x150 [ 1682.244822][T17601] should_fail_ex+0x467/0x600 [ 1682.244866][T17601] _copy_to_user+0x31/0xb0 [ 1682.244898][T17601] simple_read_from_buffer+0xe1/0x170 [ 1682.244936][T17601] proc_fail_nth_read+0x1be/0x230 [ 1682.244974][T17601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1682.245008][T17601] ? rw_verify_area+0x250/0x4d0 [ 1682.245050][T17601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1682.245086][T17601] vfs_read+0x219/0xa90 [ 1682.245128][T17601] ? __pfx_vfs_read+0x10/0x10 [ 1682.245164][T17601] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1682.245189][T17601] ? lockdep_hardirqs_on+0x7a/0x110 [ 1682.245225][T17601] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1682.245252][T17601] ? mutex_lock_nested+0x152/0x1d0 [ 1682.245284][T17601] ? fdget_pos+0x252/0x320 [ 1682.245322][T17601] ksys_read+0x156/0x270 [ 1682.245356][T17601] ? __pfx_ksys_read+0x10/0x10 [ 1682.245386][T17601] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1682.245425][T17601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.245452][T17601] do_syscall_64+0x174/0x580 [ 1682.245477][T17601] ? trace_irq_disable+0x3b/0x140 [ 1682.245516][T17601] ? clear_bhb_loop+0x40/0x90 [ 1682.245546][T17601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.245568][T17601] RIP: 0033:0x7f037556e68e [ 1682.245589][T17601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1682.245609][T17601] RSP: 002b:00007f0373805fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1682.245634][T17601] RAX: ffffffffffffffda RBX: 00007f03738066c0 RCX: 00007f037556e68e [ 1682.245651][T17601] RDX: 000000000000000f RSI: 00007f03738060a0 RDI: 0000000000000004 [ 1682.245666][T17601] RBP: 00007f0373806090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.245680][T17601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.245695][T17601] R13: 00007f0375836038 R14: 00007f0375835fa0 R15: 00007fff300552f8 [ 1682.245740][T17601] [ 1682.507180][T17476] team0: Port device team_slave_1 added [ 1682.536858][T17159] usb 6-1: USB disconnect, device number 36 [ 1682.702648][T17608] netlink: 'syz.5.2454': attribute type 28 has an invalid length. [ 1682.702672][T17608] netlink: 'syz.5.2454': attribute type 3 has an invalid length. [ 1682.702687][T17608] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2454'. [ 1682.898969][T17476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.898988][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.899015][T17476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1683.025763][T17476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1683.025778][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.025801][T17476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1683.885062][T17625] binder: 17624:17625 ioctl c0306201 0 returned -14 [ 1687.303382][ T5619] Bluetooth: hci4: command tx timeout [ 1687.847559][T17476] hsr_slave_0: entered promiscuous mode [ 1687.861323][T17476] hsr_slave_1: entered promiscuous mode [ 1687.900067][T17476] debugfs: 'hsr0' already exists in 'hsr' [ 1687.900100][T17476] Cannot create hsr debugfs directory [ 1687.935796][T17526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.936201][T17526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.936549][T17526] bridge_slave_0: entered allmulticast mode [ 1687.940255][T17526] bridge_slave_0: entered promiscuous mode [ 1688.063858][ T5617] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1688.103745][T17526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.104079][T17526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.104406][T17526] bridge_slave_1: entered allmulticast mode [ 1688.128357][T17526] bridge_slave_1: entered promiscuous mode [ 1688.247090][ T5617] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.247170][ T5617] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1688.247206][ T5617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.316954][ T5617] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1688.535950][T17526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.593738][T17526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1688.864142][ T6538] bridge_slave_1: left allmulticast mode [ 1688.864184][ T6538] bridge_slave_1: left promiscuous mode [ 1688.864488][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.973754][ T6538] bridge_slave_0: left allmulticast mode [ 1688.973783][ T6538] bridge_slave_0: left promiscuous mode [ 1688.974003][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.085629][T17650] netlink: 'syz.7.2465': attribute type 28 has an invalid length. [ 1689.085647][T17650] netlink: 'syz.7.2465': attribute type 3 has an invalid length. [ 1689.085658][T17650] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2465'. [ 1689.270310][ T6538] bridge_slave_1: left allmulticast mode [ 1689.270350][ T6538] bridge_slave_1: left promiscuous mode [ 1689.270632][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.423515][ T6538] bridge_slave_0: left allmulticast mode [ 1689.423549][ T6538] bridge_slave_0: left promiscuous mode [ 1689.423907][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.966729][ T5617] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1689.966757][ T5617] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 1689.967830][ T5617] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1689.967853][ T5617] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 1690.052330][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.139036][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.202444][ T6538] bond0 (unregistering): Released all slaves [ 1690.501249][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.585895][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.673459][ T6538] bond0 (unregistering): Released all slaves [ 1690.697180][T17526] team0: Port device team_slave_0 added [ 1690.933687][T17526] team0: Port device team_slave_1 added [ 1690.963507][T17354] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1691.058598][T17354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1691.193740][T17354] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1691.281906][T17354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1691.466425][T17654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1691.526972][T17354] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1691.527727][ T5595] usb 6-1: USB disconnect, device number 37 [ 1691.695346][T17354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1691.702346][T17526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.702398][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.702490][T17526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.785503][T17354] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1691.874721][T17354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1691.877447][T17526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.877465][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.877498][T17526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.038780][ T5595] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1692.201153][ T5595] usb 6-1: Using ep0 maxpacket: 32 [ 1692.204322][ T5595] usb 6-1: config 14 has an invalid interface number: 197 but max is 2 [ 1692.204353][ T5595] usb 6-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 1692.204376][ T5595] usb 6-1: config 14 has 1 interface, different from the descriptor's value: 3 [ 1692.204409][ T5595] usb 6-1: config 14 has no interface number 0 [ 1692.204471][ T5595] usb 6-1: config 14 interface 197 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1692.204499][ T5595] usb 6-1: config 14 interface 197 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 32 [ 1692.204525][ T5595] usb 6-1: config 14 interface 197 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1692.204556][ T5595] usb 6-1: config 14 interface 197 has no altsetting 0 [ 1692.208136][ T5595] usb 6-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=4f.47 [ 1692.208169][ T5595] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.208191][ T5595] usb 6-1: Product: 瑶溁霁檎띭熔㛻撾혜鬦輀ᬎﳕᔵ爖禎玄匸댛蹈ⷋ০򾍄ੌ㟷惍㠭鲴尓ǔᾎ휵﹑湽绶裮揪䈜桤졾򅟬ẜ⋋㹰萈苔彯繲譬␣ [ 1692.208216][ T5595] usb 6-1: Manufacturer: 㷄쑌 [ 1692.380073][T17660] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1692.467170][ T6538] hsr_slave_0: left promiscuous mode [ 1692.520387][ T6538] hsr_slave_1: left promiscuous mode [ 1692.521616][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.564076][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1692.624504][ T5595] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 1692.625052][ T5595] gspca_sunplus: reg_w_riv err -71 [ 1692.625146][ T5595] sunplus 6-1:14.197: probe with driver sunplus failed with error -71 [ 1692.652118][ T5595] usb 6-1: USB disconnect, device number 38 [ 1692.776246][ T6538] hsr_slave_0: left promiscuous mode [ 1692.819068][ T6538] hsr_slave_1: left promiscuous mode [ 1692.820234][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.863068][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.579003][ T6538] team0 (unregistering): Port device team_slave_1 removed [ 1693.691218][ T6538] team0 (unregistering): Port device team_slave_0 removed [ 1695.033376][ T6538] team0 (unregistering): Port device team_slave_1 removed [ 1695.120152][ T6538] team0 (unregistering): Port device team_slave_0 removed [ 1696.725340][T17526] hsr_slave_0: entered promiscuous mode [ 1696.729684][T17526] hsr_slave_1: entered promiscuous mode [ 1696.866046][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1696.866187][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1696.966391][T17160] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1697.114115][T17159] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1697.168947][T17160] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1697.168981][T17160] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.169005][T17160] usb 8-1: Product: syz [ 1697.169021][T17160] usb 8-1: Manufacturer: syz [ 1697.169036][T17160] usb 8-1: SerialNumber: syz [ 1697.281817][T17159] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.281880][T17159] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1697.281906][T17159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.321778][T17160] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1697.457003][T17159] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1697.505432][T17158] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1698.097130][ T5617] usb 8-1: USB disconnect, device number 26 [ 1698.861572][T17764] fuse: Unknown parameter '000000000000000000040x0000000000000005' [ 1698.873450][T17764] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2476'. [ 1698.913254][T17158] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1699.109357][T17158] ath9k_htc: Failed to initialize the device [ 1699.120991][ T5617] usb 8-1: ath9k_htc: USB layer deinitialized [ 1699.130437][T17159] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1699.130500][T17159] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 1699.133132][T17159] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1699.133201][T17159] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 1700.856988][T17354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1700.901475][T17354] 8021q: adding VLAN 0 to HW filter on device team0 [ 1700.914891][T17720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.915161][T17720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.932960][T17716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.933210][T17716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1701.772350][T17354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1702.386740][T17354] veth0_vlan: entered promiscuous mode [ 1702.431416][T17354] veth1_vlan: entered promiscuous mode [ 1702.528025][T17354] veth0_macvtap: entered promiscuous mode [ 1702.554880][T17354] veth1_macvtap: entered promiscuous mode [ 1702.875444][T17354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1702.921843][T17354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1702.955781][ T5595] usb 6-1: USB disconnect, device number 39 [ 1703.039264][T17719] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.051668][T17717] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.058552][T17717] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.078777][T17717] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.172463][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1718.294058][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1718.300705][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1718.347068][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1718.348014][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1720.007920][T17856] netlink: 'syz.5.2489': attribute type 2 has an invalid length. [ 1720.018679][ T38] kauditd_printk_skb: 265 callbacks suppressed [ 1720.018700][ T38] audit: type=1326 audit(1782982177.179:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.5.2489" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe8b9cde59 code=0x0 [ 1720.808170][ T5627] Bluetooth: hci5: command tx timeout [ 1720.952750][T17858] FAULT_INJECTION: forcing a failure. [ 1720.952750][T17858] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.952795][T17858] CPU: 1 UID: 0 PID: 17858 Comm: syz.5.2490 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1720.952825][T17858] Tainted: [L]=SOFTLOCKUP [ 1720.952835][T17858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1720.952849][T17858] Call Trace: [ 1720.952858][T17858] [ 1720.952867][T17858] dump_stack_lvl+0xe8/0x150 [ 1720.952913][T17858] should_fail_ex+0x467/0x600 [ 1720.952985][T17858] should_failslab+0xa8/0x100 [ 1720.953021][T17858] __kmalloc_cache_noprof+0xa1/0x670 [ 1720.953062][T17858] ? proc_thread_self_get_link+0xfc/0x190 [ 1720.953093][T17858] ? proc_thread_self_get_link+0xfc/0x190 [ 1720.953124][T17858] ? __task_pid_nr_ns+0x399/0x470 [ 1720.953161][T17858] proc_thread_self_get_link+0xfc/0x190 [ 1720.953194][T17858] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1720.953227][T17858] pick_link+0x782/0xfe0 [ 1720.953267][T17858] step_into_slowpath+0x58a/0x820 [ 1720.953307][T17858] ? __pfx_step_into_slowpath+0x10/0x10 [ 1720.953339][T17858] ? lookup_fast+0x16d/0x5d0 [ 1720.953512][T17858] ? inode_permission+0x2bc/0x5f0 [ 1720.953550][T17858] link_path_walk+0xd5e/0x1910 [ 1720.953604][T17858] path_openat+0x23c/0x3850 [ 1720.953649][T17858] ? kmem_cache_alloc_noprof+0x358/0x680 [ 1720.953678][T17858] ? __x64_sys_openat+0x138/0x170 [ 1720.953706][T17858] ? do_syscall_64+0x174/0x580 [ 1720.953733][T17858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.953781][T17858] do_file_open+0x23e/0x4a0 [ 1720.953816][T17858] ? lockdep_hardirqs_on+0x7a/0x110 [ 1720.953846][T17858] ? __pfx_do_file_open+0x10/0x10 [ 1720.953904][T17858] ? alloc_fd+0x654/0x6d0 [ 1720.953944][T17858] do_sys_openat2+0x115/0x200 [ 1720.953976][T17858] ? __pfx_do_sys_openat2+0x10/0x10 [ 1720.954005][T17858] ? ksys_write+0x202/0x270 [ 1720.954042][T17858] ? __pfx_ksys_write+0x10/0x10 [ 1720.954082][T17858] __x64_sys_openat+0x138/0x170 [ 1720.954116][T17858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.954142][T17858] do_syscall_64+0x174/0x580 [ 1720.954176][T17858] ? trace_irq_disable+0x3b/0x140 [ 1720.954212][T17858] ? clear_bhb_loop+0x40/0x90 [ 1720.954242][T17858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.954266][T17858] RIP: 0033:0x7fbe8b98e68e [ 1720.954289][T17858] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1720.954310][T17858] RSP: 002b:00007fbe89c25ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1720.954344][T17858] RAX: ffffffffffffffda RBX: 00007fbe89c266c0 RCX: 00007fbe8b98e68e [ 1720.954363][T17858] RDX: 0000000000000002 RSI: 00007fbe89c25f90 RDI: ffffffffffffff9c [ 1720.954380][T17858] RBP: 00007fbe89c26090 R08: 0000000000000000 R09: 0000000000000000 [ 1720.954396][T17858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1720.954417][T17858] R13: 00007fbe8bc56038 R14: 00007fbe8bc55fa0 R15: 00007ffd1ba99e38 [ 1720.954457][T17858] [ 1723.026697][ T5627] Bluetooth: hci5: command tx timeout [ 1725.254397][ T5627] Bluetooth: hci5: command tx timeout [ 1725.314320][ T6538] bridge_slave_1: left allmulticast mode [ 1725.314351][ T6538] bridge_slave_1: left promiscuous mode [ 1725.315354][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.367739][T17158] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1725.422510][ T6538] bridge_slave_0: left allmulticast mode [ 1725.422543][ T6538] bridge_slave_0: left promiscuous mode [ 1725.422875][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.528103][T17158] usb 8-1: Using ep0 maxpacket: 16 [ 1725.531404][T17158] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.531436][T17158] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1725.534421][T17158] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1725.534454][T17158] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.534499][T17158] usb 8-1: Product: syz [ 1725.534512][T17158] usb 8-1: Manufacturer: syz [ 1725.534609][T17158] usb 8-1: SerialNumber: syz [ 1725.620870][T17158] usb 8-1: 0:2 : does not exist [ 1725.844721][T17158] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1725.935291][T17158] usb 8-1: USB disconnect, device number 27 [ 1726.026864][T17881] udevd[17881]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1726.181068][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1726.266467][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1726.333177][ T6538] bond0 (unregistering): Released all slaves [ 1727.624306][ T5627] Bluetooth: hci5: command tx timeout [ 1727.975894][T17476] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1729.230638][T17476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1729.314874][T17476] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1729.351677][T17476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1730.744024][T17901] syz.7.2500 (17901): drop_caches: 2 [ 1730.880162][ T6538] hsr_slave_0: left promiscuous mode [ 1730.915609][ T6538] hsr_slave_1: left promiscuous mode [ 1730.916515][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1730.959178][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1731.382441][ T6538] team0 (unregistering): Port device team_slave_1 removed [ 1731.418479][ T6538] team0 (unregistering): Port device team_slave_0 removed [ 1731.721880][T17476] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1731.765632][T17476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1731.938371][T17476] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1731.988646][T17476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1732.339634][T17924] FAULT_INJECTION: forcing a failure. [ 1732.339634][T17924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.339674][T17924] CPU: 1 UID: 0 PID: 17924 Comm: syz.5.2506 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1732.339706][T17924] Tainted: [L]=SOFTLOCKUP [ 1732.339714][T17924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1732.339728][T17924] Call Trace: [ 1732.339735][T17924] [ 1732.339744][T17924] dump_stack_lvl+0xe8/0x150 [ 1732.339779][T17924] should_fail_ex+0x467/0x600 [ 1732.339820][T17924] _copy_to_user+0x31/0xb0 [ 1732.339849][T17924] simple_read_from_buffer+0xe1/0x170 [ 1732.339882][T17924] proc_fail_nth_read+0x1be/0x230 [ 1732.339914][T17924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1732.339944][T17924] ? rw_verify_area+0x250/0x4d0 [ 1732.339976][T17924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1732.340003][T17924] vfs_read+0x219/0xa90 [ 1732.340041][T17924] ? __pfx_vfs_read+0x10/0x10 [ 1732.340073][T17924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1732.340099][T17924] ? lockdep_hardirqs_on+0x7a/0x110 [ 1732.340122][T17924] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1732.340146][T17924] ? mutex_lock_nested+0x152/0x1d0 [ 1732.340176][T17924] ? fdget_pos+0x252/0x320 [ 1732.340225][T17924] ksys_read+0x156/0x270 [ 1732.340257][T17924] ? __pfx_ksys_read+0x10/0x10 [ 1732.340302][T17924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.340326][T17924] do_syscall_64+0x174/0x580 [ 1732.340349][T17924] ? trace_irq_disable+0x3b/0x140 [ 1732.340381][T17924] ? clear_bhb_loop+0x40/0x90 [ 1732.340412][T17924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.340433][T17924] RIP: 0033:0x7fbe8b98e68e [ 1732.340453][T17924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1732.340472][T17924] RSP: 002b:00007fbe89c25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1732.340494][T17924] RAX: ffffffffffffffda RBX: 00007fbe89c266c0 RCX: 00007fbe8b98e68e [ 1732.340510][T17924] RDX: 000000000000000f RSI: 00007fbe89c260a0 RDI: 0000000000000004 [ 1732.340523][T17924] RBP: 00007fbe89c26090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.340536][T17924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1732.340548][T17924] R13: 00007fbe8bc56038 R14: 00007fbe8bc55fa0 R15: 00007ffd1ba99e38 [ 1732.340581][T17924] [ 1732.878303][T17843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.878623][T17843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.878889][T17843] bridge_slave_0: entered allmulticast mode [ 1732.883792][T17843] bridge_slave_0: entered promiscuous mode [ 1732.916850][T17843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.918083][T17843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.919138][T17843] bridge_slave_1: entered allmulticast mode [ 1732.932272][T17843] bridge_slave_1: entered promiscuous mode [ 1732.987558][T17843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.993810][T17843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.261597][T17843] team0: Port device team_slave_0 added [ 1733.282013][T17843] team0: Port device team_slave_1 added [ 1733.371766][T17526] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1733.429904][T17526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1733.466096][T17526] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1733.981112][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1734.067989][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1734.089144][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1734.091245][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1734.092310][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1734.973063][T17526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1735.147334][T17843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1735.147356][T17843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.147378][T17843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1735.428028][T17526] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1735.454455][T17941] netlink: 'syz.5.2509': attribute type 1 has an invalid length. [ 1735.566650][T17526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1735.578502][T17843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1735.578521][T17843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.578553][T17843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.751863][T17947] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1736.581995][ T5627] Bluetooth: hci0: command tx timeout [ 1736.704677][T17526] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1736.774671][T17526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1737.231926][T17843] hsr_slave_0: entered promiscuous mode [ 1737.263700][T17843] hsr_slave_1: entered promiscuous mode [ 1737.279247][T17843] debugfs: 'hsr0' already exists in 'hsr' [ 1737.279282][T17843] Cannot create hsr debugfs directory [ 1737.788088][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1737.870665][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1737.890887][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1737.893508][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1737.966875][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1739.061988][ T5627] Bluetooth: hci0: command tx timeout [ 1741.340670][ T5619] Bluetooth: hci0: command tx timeout [ 1741.412707][ T5619] Bluetooth: hci3: command tx timeout [ 1742.315456][T17999] syz.7.2520 (17999): drop_caches: 2 [ 1742.759173][ T5595] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1742.932022][ T5595] usb 8-1: config 7 has an invalid interface number: 64 but max is 1 [ 1742.932053][ T5595] usb 8-1: config 7 has an invalid interface descriptor of length 2, skipping [ 1742.932081][ T5595] usb 8-1: config 7 has no interface number 1 [ 1742.932138][ T5595] usb 8-1: config 7 interface 64 altsetting 218 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1742.932168][ T5595] usb 8-1: config 7 interface 64 has no altsetting 0 [ 1742.932188][ T5595] usb 8-1: config 7 interface 0 has no altsetting 0 [ 1742.934715][ T5595] usb 8-1: New USB device found, idVendor=0403, idProduct=eeea, bcdDevice=2b.ef [ 1742.934746][ T5595] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.934769][ T5595] usb 8-1: Product: syz [ 1742.934785][ T5595] usb 8-1: Manufacturer: syz [ 1742.934799][ T5595] usb 8-1: SerialNumber: syz [ 1743.550115][ T5619] Bluetooth: hci0: command tx timeout [ 1743.658788][ T5619] Bluetooth: hci3: command tx timeout [ 1744.937384][T18004] sch_fq: defrate 65536 ignored. [ 1745.508707][ T5595] ftdi_sio 8-1:7.64: FTDI USB Serial Device converter detected [ 1745.512089][ T5595] ftdi_sio ttyUSB0: unknown device type: 0x2bef [ 1745.555834][ T5595] ftdi_sio 8-1:7.0: FTDI USB Serial Device converter detected [ 1745.557864][ T5595] ftdi_sio ttyUSB1: unknown device type: 0x2bef [ 1745.579011][ T5595] usb 8-1: USB disconnect, device number 28 [ 1745.605074][ T5595] ftdi_sio 8-1:7.64: device disconnected [ 1745.621987][ T5595] ftdi_sio 8-1:7.0: device disconnected [ 1745.981185][ T5619] Bluetooth: hci3: command tx timeout [ 1746.197309][T17843] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.367767][ T9] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1746.873850][T17159] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1747.423691][T17159] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.423802][T17159] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1747.776024][T17159] usb 8-1: New USB device found, idVendor=2a39, idProduct=3fe4, bcdDevice= 0.40 [ 1747.776065][T17159] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.776091][T17159] usb 8-1: Product: syz [ 1747.776109][T17159] usb 8-1: Manufacturer: syz [ 1747.776126][T17159] usb 8-1: SerialNumber: syz [ 1748.128351][T17159] usb 8-1: USB disconnect, device number 29 [ 1748.168196][ T5619] Bluetooth: hci3: command tx timeout [ 1748.704704][T17843] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.886036][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1748.887085][ T9] usb 6-1: no configurations [ 1748.887103][ T9] usb 6-1: can't read configurations, error -22 [ 1749.151173][T12536] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1749.319405][T12536] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1749.320671][T12536] usb 8-1: config 4 has an invalid interface number: 138 but max is 0 [ 1749.320699][T12536] usb 8-1: config 4 has no interface number 0 [ 1749.320734][T12536] usb 8-1: config 4 interface 138 has no altsetting 0 [ 1749.361337][T12536] usb 8-1: string descriptor 0 read error: -22 [ 1749.361469][T12536] usb 8-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1749.361493][T12536] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.654278][T12536] catc 8-1:4.138: Missing or invalid endpoints [ 1749.761302][T17843] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.867422][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1749.895673][T12536] usb 8-1: USB disconnect, device number 30 [ 1749.950655][T17935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.951004][T17935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.951289][T17935] bridge_slave_0: entered allmulticast mode [ 1749.955979][T17935] bridge_slave_0: entered promiscuous mode [ 1750.027790][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1750.030070][ T9] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 1750.030098][ T9] usb 6-1: config 2 has no interface number 0 [ 1750.030143][ T9] usb 6-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1750.030164][ T9] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1750.030182][ T9] usb 6-1: config 2 interface 88 has no altsetting 0 [ 1750.032749][ T9] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1750.032784][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.032800][ T9] usb 6-1: Product: syz [ 1750.032811][ T9] usb 6-1: Manufacturer: syz [ 1750.032822][ T9] usb 6-1: SerialNumber: syz [ 1750.069608][T18054] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1750.118334][T17935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.130528][T17935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.131552][T17935] bridge_slave_1: entered allmulticast mode [ 1750.159638][T17935] bridge_slave_1: entered promiscuous mode [ 1750.481955][T17843] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.484519][ T9] asix 6-1:2.88: probe with driver asix failed with error -71 [ 1750.589398][ T9] usb 6-1: USB disconnect, device number 41 [ 1750.906707][T17935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1750.951247][T17935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1751.055551][T17962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.055984][T17962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.056313][T17962] bridge_slave_0: entered allmulticast mode [ 1751.060019][T17962] bridge_slave_0: entered promiscuous mode [ 1751.166808][T17962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.167135][T17962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.167447][T17962] bridge_slave_1: entered allmulticast mode [ 1751.171235][T17962] bridge_slave_1: entered promiscuous mode [ 1751.346876][T17935] team0: Port device team_slave_0 added [ 1751.392601][T17935] team0: Port device team_slave_1 added [ 1751.490171][T17962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1751.535662][T17962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1751.560892][T17935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.560910][T17935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.560944][T17935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1751.651640][T17935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.651660][T17935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.651692][T17935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1751.804774][T17962] team0: Port device team_slave_0 added [ 1752.106715][ T6538] bridge_slave_1: left allmulticast mode [ 1752.106750][ T6538] bridge_slave_1: left promiscuous mode [ 1752.107011][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.261816][T12536] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1752.286109][ T6538] bridge_slave_0: left allmulticast mode [ 1752.286138][ T6538] bridge_slave_0: left promiscuous mode [ 1752.286401][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.424940][T12536] usb 6-1: Using ep0 maxpacket: 8 [ 1752.482938][T12536] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1752.482975][T12536] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1752.483006][T12536] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1752.483035][T12536] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1752.483083][T12536] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1752.483111][T12536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.570930][T18081] netlink: 'syz.7.2538': attribute type 22 has an invalid length. [ 1752.625615][T18080] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1752.754430][ T6538] bridge_slave_1: left allmulticast mode [ 1752.754470][ T6538] bridge_slave_1: left promiscuous mode [ 1752.754768][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.799177][ T38] audit: type=1326 audit(1782982207.845:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18071 comm="syz.5.2537" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe8b9cde59 code=0x0 [ 1752.884944][T10313] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1752.917054][ T6538] bridge_slave_0: left allmulticast mode [ 1752.917095][ T6538] bridge_slave_0: left promiscuous mode [ 1752.917404][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.303255][T10313] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1753.303317][T10313] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1753.308406][T10313] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1753.308439][T10313] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.308462][T10313] usb 8-1: Product: syz [ 1753.308479][T10313] usb 8-1: Manufacturer: syz [ 1753.308505][T10313] usb 8-1: SerialNumber: syz [ 1753.331996][T10313] usb 8-1: config 0 descriptor?? [ 1754.587011][T10313] mos7840 8-1:0.0: required endpoints missing [ 1755.085101][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1755.170366][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1755.257948][ T6538] bond0 (unregistering): Released all slaves [ 1755.886303][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1755.972059][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1756.025011][ T6538] bond0 (unregistering): Released all slaves [ 1756.062402][T17962] team0: Port device team_slave_1 added [ 1756.182958][T12536] usb 6-1: usb_control_msg returned -71 [ 1756.183011][T12536] usbtmc 6-1:16.0: can't read capabilities [ 1756.228114][T12536] usb 6-1: USB disconnect, device number 42 [ 1756.443377][ T5269] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1756.603428][T17159] usb 8-1: USB disconnect, device number 31 [ 1756.765530][T17935] hsr_slave_0: entered promiscuous mode [ 1756.767938][T17935] hsr_slave_1: entered promiscuous mode [ 1756.769942][T17935] debugfs: 'hsr0' already exists in 'hsr' [ 1756.769970][T17935] Cannot create hsr debugfs directory [ 1756.782283][T17962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1756.782300][T17962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1756.782331][T17962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1757.008367][T17962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1757.008385][T17962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.008415][T17962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1757.372439][T17160] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1757.642458][T17160] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.642520][T17160] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1757.642547][T17160] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.741527][T17160] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1757.863282][ T5617] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1757.948620][ T6538] hsr_slave_0: left promiscuous mode [ 1757.969829][ T6538] hsr_slave_1: left promiscuous mode [ 1757.971691][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1758.013640][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1758.024955][ T5617] usb 6-1: Using ep0 maxpacket: 8 [ 1758.036092][ T5617] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1758.037503][ T5617] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 1758.037531][ T5617] usb 6-1: config 0 has no interface number 0 [ 1758.037579][ T5617] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1758.037613][ T5617] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1758.037631][ T5617] usb 6-1: config 0 interface 88 has no altsetting 0 [ 1758.043142][ T5617] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1758.043185][ T5617] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1758.043202][ T5617] usb 6-1: Product: syz [ 1758.043213][ T5617] usb 6-1: SerialNumber: syz [ 1758.073046][ T5617] usb 6-1: config 0 descriptor?? [ 1758.248221][ T6538] hsr_slave_0: left promiscuous mode [ 1758.290704][ T6538] hsr_slave_1: left promiscuous mode [ 1758.295305][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1758.295339][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1758.334688][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1758.334759][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1758.391595][ T5617] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input16 [ 1758.432963][ T5617] usb 6-1: USB disconnect, device number 43 [ 1758.460106][ T6538] veth1_macvtap: left promiscuous mode [ 1758.460207][ T6538] veth0_macvtap: left promiscuous mode [ 1758.460463][ T6538] veth1_vlan: left promiscuous mode [ 1758.460651][ T6538] veth0_vlan: left promiscuous mode [ 1758.574200][T17878] udevd[17878]: Error opening device "/dev/input/event4": No such file or directory [ 1758.574300][T17878] udevd[17878]: Unable to EVIOCGABS device "/dev/input/event4" [ 1758.574388][T17878] udevd[17878]: Unable to EVIOCGABS device "/dev/input/event4" [ 1758.859368][T17160] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1758.859386][T17160] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 1758.859940][T17160] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1758.859954][T17160] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 1760.404556][T17160] usb 8-1: USB disconnect, device number 32 [ 1763.265589][T18121] netlink: 'syz.7.2546': attribute type 28 has an invalid length. [ 1763.265659][T18121] netlink: 'syz.7.2546': attribute type 3 has an invalid length. [ 1763.265719][T18121] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2546'. [ 1766.182794][T18124] FAULT_INJECTION: forcing a failure. [ 1766.182794][T18124] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.182838][T18124] CPU: 0 UID: 0 PID: 18124 Comm: syz.7.2547 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1766.182869][T18124] Tainted: [L]=SOFTLOCKUP [ 1766.182877][T18124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1766.182891][T18124] Call Trace: [ 1766.182900][T18124] [ 1766.182910][T18124] dump_stack_lvl+0xe8/0x150 [ 1766.182946][T18124] should_fail_ex+0x467/0x600 [ 1766.182991][T18124] should_failslab+0xa8/0x100 [ 1766.183034][T18124] __kmalloc_cache_noprof+0xa1/0x670 [ 1766.183066][T18124] ? fuse_dentry_init+0x51/0x100 [ 1766.183090][T18124] ? fuse_dentry_init+0x51/0x100 [ 1766.183123][T18124] fuse_dentry_init+0x51/0x100 [ 1766.183151][T18124] __d_alloc+0x489/0x6f0 [ 1766.183192][T18124] d_alloc_parallel+0xde/0x16c0 [ 1766.183228][T18124] ? __d_lookup+0x66/0x790 [ 1766.183272][T18124] ? __d_lookup+0x66/0x790 [ 1766.183308][T18124] ? __d_lookup+0x66/0x790 [ 1766.183339][T18124] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1766.183370][T18124] ? __d_lookup+0x6f3/0x790 [ 1766.183404][T18124] ? d_lookup+0x1f/0xc0 [ 1766.183440][T18124] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1766.183471][T18124] ? lockdep_hardirqs_on+0x7a/0x110 [ 1766.183504][T18124] path_openat+0xbf0/0x3850 [ 1766.183548][T18124] ? kmem_cache_alloc_noprof+0x358/0x680 [ 1766.183575][T18124] ? __x64_sys_open+0x11e/0x150 [ 1766.183626][T18124] do_file_open+0x23e/0x4a0 [ 1766.183669][T18124] ? lockdep_hardirqs_on+0x7a/0x110 [ 1766.183698][T18124] ? __pfx_do_file_open+0x10/0x10 [ 1766.183758][T18124] ? alloc_fd+0x654/0x6d0 [ 1766.183799][T18124] do_sys_openat2+0x115/0x200 [ 1766.183830][T18124] ? __pfx_do_sys_openat2+0x10/0x10 [ 1766.183860][T18124] ? ksys_write+0x248/0x270 [ 1766.183896][T18124] ? __pfx_ksys_write+0x10/0x10 [ 1766.183930][T18124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.183955][T18124] __x64_sys_open+0x11e/0x150 [ 1766.183988][T18124] do_syscall_64+0x174/0x580 [ 1766.184017][T18124] ? clear_bhb_loop+0x40/0x90 [ 1766.184053][T18124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.184076][T18124] RIP: 0033:0x7f03755ade59 [ 1766.184099][T18124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1766.184119][T18124] RSP: 002b:00007f0373806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1766.184144][T18124] RAX: ffffffffffffffda RBX: 00007f0375835fa0 RCX: 00007f03755ade59 [ 1766.184162][T18124] RDX: 0000000000000040 RSI: 0000000000001802 RDI: 00002000000001c0 [ 1766.184177][T18124] RBP: 00007f0373806090 R08: 0000000000000000 R09: 0000000000000000 [ 1766.184191][T18124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.184205][T18124] R13: 00007f0375836038 R14: 00007f0375835fa0 R15: 00007fff300552f8 [ 1766.184242][T18124] [ 1767.005351][ T6538] team0 (unregistering): Port device team_slave_1 removed [ 1767.073174][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1767.073267][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1767.200995][ T6538] team0 (unregistering): Port device team_slave_0 removed [ 1767.896445][ T5619] ================================================================== [ 1767.896466][ T5619] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xe3/0x180 [ 1767.896501][ T5619] Read of size 8 at addr ffff888026378200 by task kworker/u9:3/5619 [ 1767.896521][ T5619] [ 1767.896590][ T5619] CPU: 0 UID: 0 PID: 5619 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1767.896621][ T5619] Tainted: [L]=SOFTLOCKUP [ 1767.896631][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1767.896647][ T5619] Workqueue: hci1 hci_rx_work [ 1767.896675][ T5619] Call Trace: [ 1767.896685][ T5619] [ 1767.896695][ T5619] dump_stack_lvl+0xe8/0x150 [ 1767.896728][ T5619] print_address_description+0x55/0x1e0 [ 1767.896759][ T5619] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1767.896790][ T5619] print_report+0x58/0x70 [ 1767.896818][ T5619] kasan_report+0x117/0x150 [ 1767.896853][ T5619] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1767.896888][ T5619] l2cap_sock_ready_cb+0xe3/0x180 [ 1767.896913][ T5619] l2cap_le_start+0x257/0x1910 [ 1767.896949][ T5619] ? __pfx_l2cap_le_start+0x10/0x10 [ 1767.896984][ T5619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1767.897020][ T5619] ? lockdep_hardirqs_on+0x7a/0x110 [ 1767.897047][ T5619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1767.897073][ T5619] ? mutex_lock_nested+0x152/0x1d0 [ 1767.897103][ T5619] ? l2cap_connect_cfm+0x8f9/0x16a0 [ 1767.897139][ T5619] l2cap_connect_cfm+0x93c/0x16a0 [ 1767.897180][ T5619] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1767.897215][ T5619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1767.897242][ T5619] ? lockdep_hardirqs_on+0x7a/0x110 [ 1767.897266][ T5619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1767.897293][ T5619] ? mutex_lock_nested+0x152/0x1d0 [ 1767.897324][ T5619] ? hci_connect_cfm+0x2c/0x140 [ 1767.897353][ T5619] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1767.897388][ T5619] hci_connect_cfm+0x95/0x140 [ 1767.897420][ T5619] le_conn_complete_evt+0x1034/0x1580 [ 1767.897458][ T5619] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1767.897490][ T5619] ? lockdep_hardirqs_on+0x7a/0x110 [ 1767.897515][ T5619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1767.897541][ T5619] ? rt_mutex_slowunlock+0x219/0x460 [ 1767.897583][ T5619] ? skb_pull_data+0xf0/0x200 [ 1767.897618][ T5619] hci_le_conn_complete_evt+0x187/0x470 [ 1767.897658][ T5619] hci_event_packet+0x67a/0xf10 [ 1767.897687][ T5619] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1767.897717][ T5619] ? __pfx_hci_event_packet+0x10/0x10 [ 1767.897743][ T5619] ? rt_spin_unlock+0x157/0x200 [ 1767.897782][ T5619] ? hci_send_to_monitor+0xe2/0x590 [ 1767.897820][ T5619] hci_rx_work+0x3ee/0x1020 [ 1767.897851][ T5619] ? process_one_work+0x8cd/0x12b0 [ 1767.897874][ T5619] process_one_work+0x93a/0x12b0 [ 1767.897909][ T5619] ? __pfx_process_one_work+0x10/0x10 [ 1767.897931][ T5619] ? do_raw_spin_lock+0x12b/0x2f0 [ 1767.897966][ T5619] ? assign_work+0x3cf/0x5d0 [ 1767.897993][ T5619] worker_thread+0xb05/0x10d0 [ 1767.898032][ T5619] kthread+0x388/0x470 [ 1767.898062][ T5619] ? __pfx_worker_thread+0x10/0x10 [ 1767.898087][ T5619] ? __pfx_kthread+0x10/0x10 [ 1767.898118][ T5619] ret_from_fork+0x514/0xb70 [ 1767.898160][ T5619] ? __pfx_ret_from_fork+0x10/0x10 [ 1767.898191][ T5619] ? __switch_to+0xc89/0x1420 [ 1767.898218][ T5619] ? __pfx_kthread+0x10/0x10 [ 1767.898249][ T5619] ret_from_fork_asm+0x1a/0x30 [ 1767.898288][ T5619] [ 1767.898297][ T5619] [ 1767.898303][ T5619] Allocated by task 18128: [ 1767.898314][ T5619] kasan_save_track+0x3e/0x80 [ 1767.898341][ T5619] __kasan_kmalloc+0x93/0xb0 [ 1767.898367][ T5619] __kmalloc_noprof+0x415/0x790 [ 1767.898393][ T5619] sk_prot_alloc+0xe7/0x210 [ 1767.898416][ T5619] sk_alloc+0x3a/0x390 [ 1767.898438][ T5619] bt_sock_alloc+0x3b/0x340 [ 1767.898462][ T5619] l2cap_sock_create+0x147/0x330 [ 1767.898482][ T5619] bt_sock_create+0x163/0x240 [ 1767.898508][ T5619] __sock_create+0x4e8/0x960 [ 1767.898538][ T5619] __sys_socket+0xd9/0x320 [ 1767.898577][ T5619] __x64_sys_socket+0x7a/0x90 [ 1767.898595][ T5619] do_syscall_64+0x174/0x580 [ 1767.898618][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.898640][ T5619] [ 1767.898646][ T5619] Freed by task 18127: [ 1767.898656][ T5619] kasan_save_track+0x3e/0x80 [ 1767.898680][ T5619] kasan_save_free_info+0x40/0x50 [ 1767.898700][ T5619] __kasan_slab_free+0x5c/0x80 [ 1767.898727][ T5619] kfree+0x1c5/0x6c0 [ 1767.898749][ T5619] __sk_destruct+0x754/0x9e0 [ 1767.898773][ T5619] l2cap_sock_release+0x1b3/0x250 [ 1767.898804][ T5619] __sock_release+0xa0/0x1f0 [ 1767.898833][ T5619] sock_close+0x1c/0x30 [ 1767.898860][ T5619] __fput+0x42a/0xa80 [ 1767.898884][ T5619] task_work_run+0x1d9/0x270 [ 1767.898909][ T5619] exit_to_user_mode_loop+0x1fa/0x730 [ 1767.898936][ T5619] do_syscall_64+0x353/0x580 [ 1767.898954][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.898971][ T5619] [ 1767.898976][ T5619] The buggy address belongs to the object at ffff888026378000 [ 1767.898976][ T5619] which belongs to the cache kmalloc-4k of size 4096 [ 1767.898993][ T5619] The buggy address is located 512 bytes inside of [ 1767.898993][ T5619] freed 4096-byte region [ffff888026378000, ffff888026379000) [ 1767.899013][ T5619] [ 1767.899018][ T5619] The buggy address belongs to the physical page: [ 1767.899028][ T5619] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26378 [ 1767.899132][ T5619] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1767.899149][ T5619] flags: 0x80000000000040(head|node=0|zone=1) [ 1767.899165][ T5619] page_type: f5(slab) [ 1767.899183][ T5619] raw: 0080000000000040 ffff88813fe25140 dead000000000100 dead000000000122 [ 1767.899200][ T5619] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1767.899219][ T5619] head: 0080000000000040 ffff88813fe25140 dead000000000100 dead000000000122 [ 1767.899235][ T5619] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1767.899253][ T5619] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1767.899269][ T5619] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1767.899279][ T5619] page dumped because: kasan: bad access detected [ 1767.899294][ T5619] page_owner tracks the page as allocated [ 1767.899301][ T5619] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7037047480 [ 1767.899337][ T5619] post_alloc_hook+0x1f9/0x250 [ 1767.899359][ T5619] get_page_from_freelist+0x264c/0x26c0 [ 1767.899385][ T5619] __alloc_frozen_pages_noprof+0x1a6/0x390 [ 1767.899410][ T5619] allocate_slab+0x79/0x5e0 [ 1767.899426][ T5619] refill_objects+0x2d8/0x350 [ 1767.899442][ T5619] __pcs_replace_empty_main+0x330/0x690 [ 1767.899469][ T5619] __kmalloc_cache_noprof+0x467/0x670 [ 1767.899491][ T5619] kobject_uevent_env+0x28c/0x9e0 [ 1767.899518][ T5619] disk_uevent+0x297/0x470 [ 1767.899535][ T5619] add_disk_fwnode+0x387/0x4b0 [ 1767.899552][ T5619] loop_add+0x871/0xb50 [ 1767.899573][ T5619] loop_init+0xd7/0x160 [ 1767.899658][ T5619] do_one_initcall+0x250/0x870 [ 1767.899681][ T5619] do_initcall_level+0x10a/0x1a0 [ 1767.899730][ T5619] do_initcalls+0x59/0xa0 [ 1767.899758][ T5619] kernel_init_freeable+0x29d/0x3e0 [ 1767.899780][ T5619] page_owner free stack trace missing [ 1767.899786][ T5619] [ 1767.899791][ T5619] Memory state around the buggy address: [ 1767.899801][ T5619] ffff888026378100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1767.899814][ T5619] ffff888026378180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1767.899826][ T5619] >ffff888026378200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1767.899837][ T5619] ^ [ 1767.899846][ T5619] ffff888026378280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1767.899858][ T5619] ffff888026378300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1767.899868][ T5619] ================================================================== [ 1767.899894][ T5619] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1767.899921][ T5619] CPU: 0 UID: 0 PID: 5619 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1767.899956][ T5619] Tainted: [L]=SOFTLOCKUP [ 1767.899977][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1767.899992][ T5619] Workqueue: hci1 hci_rx_work [ 1767.900021][ T5619] Call Trace: [ 1767.900030][ T5619] [ 1767.900042][ T5619] vpanic+0x56c/0xa60 [ 1767.900077][ T5619] ? __pfx_vpanic+0x10/0x10 [ 1767.900113][ T5619] panic+0xc5/0xd0 [ 1767.900143][ T5619] ? __pfx_panic+0x10/0x10 [ 1767.900175][ T5619] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1767.900205][ T5619] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1767.900229][ T5619] check_panic_on_warn+0x89/0xb0 [ 1767.900261][ T5619] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1767.900285][ T5619] end_report+0x73/0x170 [ 1767.900315][ T5619] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1767.900339][ T5619] kasan_report+0x128/0x150 [ 1767.900371][ T5619] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1767.900401][ T5619] l2cap_sock_ready_cb+0xe3/0x180 [ 1767.900427][ T5619] l2cap_le_start+0x257/0x1910 [ 1767.900462][ T5619] ? __pfx_l2cap_le_start+0x10/0x10 [ 1767.900497][ T5619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1767.900523][ T5619] ? lockdep_hardirqs_on+0x7a/0x110 [ 1767.900548][ T5619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1767.900606][ T5619] ? mutex_lock_nested+0x152/0x1d0 [ 1767.900639][ T5619] ? l2cap_connect_cfm+0x8f9/0x16a0 [ 1767.900687][ T5619] l2cap_connect_cfm+0x93c/0x16a0 [ 1767.900727][ T5619] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1767.900762][ T5619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1767.900789][ T5619] ? lockdep_hardirqs_on+0x7a/0x110 [ 1767.900814][ T5619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1767.900842][ T5619] ? mutex_lock_nested+0x152/0x1d0 [ 1767.900875][ T5619] ? hci_connect_cfm+0x2c/0x140 [ 1767.900905][ T5619] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1767.900941][ T5619] hci_connect_cfm+0x95/0x140 [ 1767.900973][ T5619] le_conn_complete_evt+0x1034/0x1580 [ 1767.901012][ T5619] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1767.901044][ T5619] ? lockdep_hardirqs_on+0x7a/0x110 [ 1767.901070][ T5619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1767.901096][ T5619] ? rt_mutex_slowunlock+0x219/0x460 [ 1767.901129][ T5619] ? skb_pull_data+0xf0/0x200 [ 1767.901161][ T5619] hci_le_conn_complete_evt+0x187/0x470 [ 1767.901196][ T5619] hci_event_packet+0x67a/0xf10 [ 1767.901225][ T5619] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1767.901253][ T5619] ? __pfx_hci_event_packet+0x10/0x10 [ 1767.901277][ T5619] ? rt_spin_unlock+0x157/0x200 [ 1767.901327][ T5619] ? hci_send_to_monitor+0xe2/0x590 [ 1767.901365][ T5619] hci_rx_work+0x3ee/0x1020 [ 1767.901396][ T5619] ? process_one_work+0x8cd/0x12b0 [ 1767.901418][ T5619] process_one_work+0x93a/0x12b0 [ 1767.901452][ T5619] ? __pfx_process_one_work+0x10/0x10 [ 1767.901475][ T5619] ? do_raw_spin_lock+0x12b/0x2f0 [ 1767.901508][ T5619] ? assign_work+0x3cf/0x5d0 [ 1767.901534][ T5619] worker_thread+0xb05/0x10d0 [ 1767.901580][ T5619] kthread+0x388/0x470 [ 1767.901611][ T5619] ? __pfx_worker_thread+0x10/0x10 [ 1767.901635][ T5619] ? __pfx_kthread+0x10/0x10 [ 1767.901666][ T5619] ret_from_fork+0x514/0xb70 [ 1767.901700][ T5619] ? __pfx_ret_from_fork+0x10/0x10 [ 1767.901741][ T5619] ? __switch_to+0xc89/0x1420 [ 1767.901771][ T5619] ? __pfx_kthread+0x10/0x10 [ 1767.901809][ T5619] ret_from_fork_asm+0x1a/0x30 [ 1767.901856][ T5619] [ 1767.902532][ T5619] Kernel Offset: disabled