last executing test programs: 10.981670675s ago: executing program 2 (id=832): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x543c, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 10.411441952s ago: executing program 2 (id=836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x26bc80, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000c00)="c100000000000000b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5fe0360ab373d5026f29", 0x5d}, {&(0x7f0000000040)='y\'', 0x2}], 0x3) 9.879066011s ago: executing program 2 (id=840): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) 6.704532354s ago: executing program 4 (id=853): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4044080) 6.313508471s ago: executing program 5 (id=855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x2, &(0x7f0000000000)="f7be50ba7c88a9f911a2d585c715d7f42d186669a854a5519a131cbaae3a9ef466156eb5af5853e3e061c7c39d7df8a52a0883a0c10b467e3f9d7092566853b8d73d398ff643c9de69fae6959a55fdb4c1bba5fb52dfeea10aad0ed7dc42f547f470485d251dcc730f2bb28464359cee8b9c8b", 0x73) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setstatus(r5, 0x4, 0x42400) 6.293892357s ago: executing program 4 (id=857): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 5.12530615s ago: executing program 2 (id=859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3"}}}}, 0x0) 5.023341834s ago: executing program 5 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$rxrpc(0x21, 0x2, 0x2) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.69434433s ago: executing program 0 (id=866): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.625570383s ago: executing program 2 (id=867): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4.547496961s ago: executing program 5 (id=868): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x300, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.547325345s ago: executing program 1 (id=869): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x2e, 0x13694f36e99dd941, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.391637592s ago: executing program 0 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000"], 0x4c}}, 0x0) 4.279391362s ago: executing program 1 (id=871): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) socket$igmp(0x2, 0x3, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) readv(r2, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000001700)=""/221, 0xdd}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$bind(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x882602, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) 4.244835864s ago: executing program 3 (id=872): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 4.014243376s ago: executing program 2 (id=873): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000819000/0x4000)=nil, 0x3000}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180100001000010400000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08000300050000000800", @ANYBLOB], 0x119}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r6 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x3d, &(0x7f0000000140)=""/123, &(0x7f0000000080)=0x7b) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000340)={0x2, {{0xa, 0x20, 0x100, @mcast1={0xff, 0x7}}}, {{0xa, 0x80, 0x0, @loopback, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3810744, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@errors_continue}, {@init_itable}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@resuid}, {@noinit_itable}, {@mblk_io_submit}, {@journal_async_commit}, {@usrjquota}, {@journal_async_commit}]}, 0xff, 0x45e, &(0x7f0000000580)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000440)={[{@dots}, {@fat=@gid={'gid', 0x3d, 0xee01}}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@time_offset={'time_offset', 0x3d, 0x2d8}}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@showexec}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x5}}, {@nodots}, {@dots}]}, 0xfd, 0x1f0, &(0x7f0000000240)="$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") 2.859346179s ago: executing program 5 (id=874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) futex(0x0, 0x18d, 0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x2, &(0x7f0000000000)="f7be50ba7c88a9f911a2d585c715d7f42d186669a854a5519a131cbaae3a9ef466156eb5af5853e3e061c7c39d7df8a52a0883a0c10b467e3f9d7092566853b8d73d398ff643c9de69fae6959a55fdb4c1bba5fb52dfeea10aad0ed7dc42f547f470485d251dcc730f2bb28464359cee8b9c8b", 0x73) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setstatus(r5, 0x4, 0x42400) 2.859109022s ago: executing program 3 (id=875): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000000)) 2.836031753s ago: executing program 4 (id=876): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0", 0xb7, 0x43ceb, 0x0, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)='^', 0x34000}], 0x1c) 2.797484977s ago: executing program 0 (id=877): getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000040)) 2.600936725s ago: executing program 3 (id=878): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, 0x0, &(0x7f0000000040)='GPL\x00', 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x80000000, 0x5}, 0x10, 0x169a0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[r0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x1, 0x3, 0x8, 0x2}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x57, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce9872f8b1ae6cbb89cb5fef8", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x27, 0x9f, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", &(0x7f0000000580)="1324840f61f2582958c7a13a4cb07c12e6ecb79e1e4a5ce8e2b094cb1edf8582dfc76b94c7a32d6ad727284dee99911cbebac2b56de4b756a4b4d7ab40d887a06a1a64578ca3be4b2b1199f073af3b8786e28aaa18190e25a18d21a25234f582dce4358b52f6b2a6467c3f0c7739d6bd5a565b16e767e0da1df8fd4b076723d41eb010daaaeb5cf488ff4be3be97abe73c01bf69228aa29254faeba1beedba", 0x0, 0x0, 0x607}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.383311171s ago: executing program 1 (id=879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3"}}}}, 0x0) 2.31556955s ago: executing program 0 (id=880): socket$inet6(0xa, 0x3, 0xff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 2.220413192s ago: executing program 4 (id=881): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.213148997s ago: executing program 1 (id=882): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.139975029s ago: executing program 3 (id=883): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x5ad}], 0x1}, 0x20000044) 2.035510099s ago: executing program 0 (id=884): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000002000000e27f000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 1.911517573s ago: executing program 3 (id=885): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x11f102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000340)=0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x40400c0) clock_gettime(0x0, &(0x7f0000000380)) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_userptr={0x6, 0x3, 0x4, 0x4000, 0x9, {0x77359400}, {0x2, 0x1, 0x3, 0x10, 0x6, 0x5, "9ee812c9"}, 0x10, 0x2, {&(0x7f0000000900)=[{0x3, 0x0, {&(0x7f00000005c0)}, 0x6}, {0x8000, 0x7, {&(0x7f00000008c0)}, 0x7}]}, 0x9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40041) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 1.898498278s ago: executing program 1 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 1.839160568s ago: executing program 4 (id=887): gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x40) close(r2) r5 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1ff, 0x4000, 0x0, 0x0}, {0x8000, 0x10, 0x4, &(0x7f0000000040)="df44cd8c"}], 0x2}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RAUTH(r6, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x20, 0x0, 0x4}}, 0x14) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.events\x00', 0x275a, 0x0) preadv(r8, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4044080) 1.331964682s ago: executing program 0 (id=888): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 1.331023017s ago: executing program 5 (id=889): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x4c}}, 0x0) 823.012365ms ago: executing program 5 (id=890): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000000)) 443.470019ms ago: executing program 1 (id=891): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 360.665427ms ago: executing program 4 (id=892): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x73, 0x0, 0x0) 0s ago: executing program 3 (id=893): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x8, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. [ 101.516632][ T1203] cfg80211: failed to load regulatory.db [ 101.610300][ T5824] cgroup: Unknown subsys name 'net' [ 101.758611][ T5824] cgroup: Unknown subsys name 'cpuset' [ 101.768864][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.517253][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.996281][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.033458][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.055229][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.068032][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.079655][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.089421][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.096999][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.138906][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.147172][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.150684][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.163561][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.164227][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.171299][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.178572][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.195254][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.202035][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.203125][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.210336][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.219749][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.226127][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.236734][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.237275][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.253198][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.257899][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.260755][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.269938][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.282015][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.284738][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.303088][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.318174][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.270283][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 109.283906][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 109.494227][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 109.551907][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 109.808881][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.816733][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.824377][ T5839] bridge_slave_0: entered allmulticast mode [ 109.832111][ T5839] bridge_slave_0: entered promiscuous mode [ 109.841604][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 109.854974][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.862315][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.869874][ T5853] bridge_slave_0: entered allmulticast mode [ 109.878479][ T5853] bridge_slave_0: entered promiscuous mode [ 109.886409][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 109.914097][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.921353][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.929655][ T5839] bridge_slave_1: entered allmulticast mode [ 109.937493][ T5839] bridge_slave_1: entered promiscuous mode [ 109.952471][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.959659][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.967094][ T5853] bridge_slave_1: entered allmulticast mode [ 109.974978][ T5853] bridge_slave_1: entered promiscuous mode [ 110.141470][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.174626][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.188780][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.250519][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.313789][ T5855] Bluetooth: hci1: command tx timeout [ 110.313867][ T5846] Bluetooth: hci5: command tx timeout [ 110.319333][ T5852] Bluetooth: hci0: command tx timeout [ 110.380065][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.387851][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.395185][ T5855] Bluetooth: hci4: command tx timeout [ 110.395456][ T5855] Bluetooth: hci3: command tx timeout [ 110.401134][ T5842] bridge_slave_0: entered allmulticast mode [ 110.406551][ T5852] Bluetooth: hci2: command tx timeout [ 110.415422][ T5842] bridge_slave_0: entered promiscuous mode [ 110.427596][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.435272][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.442541][ T5842] bridge_slave_1: entered allmulticast mode [ 110.451069][ T5842] bridge_slave_1: entered promiscuous mode [ 110.487949][ T5853] team0: Port device team_slave_0 added [ 110.497808][ T5853] team0: Port device team_slave_1 added [ 110.511606][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.519415][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.527066][ T5844] bridge_slave_0: entered allmulticast mode [ 110.535168][ T5844] bridge_slave_0: entered promiscuous mode [ 110.545364][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.552989][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.560227][ T5844] bridge_slave_1: entered allmulticast mode [ 110.568362][ T5844] bridge_slave_1: entered promiscuous mode [ 110.597267][ T5839] team0: Port device team_slave_0 added [ 110.710776][ T5839] team0: Port device team_slave_1 added [ 110.752424][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.760306][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.786467][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.853555][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.881966][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.890721][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.898508][ T5836] bridge_slave_0: entered allmulticast mode [ 110.906611][ T5836] bridge_slave_0: entered promiscuous mode [ 110.916535][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.923883][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.931116][ T5836] bridge_slave_1: entered allmulticast mode [ 110.939332][ T5836] bridge_slave_1: entered promiscuous mode [ 110.947541][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.954790][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.980855][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.992256][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.999943][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.007249][ T5835] bridge_slave_0: entered allmulticast mode [ 111.015141][ T5835] bridge_slave_0: entered promiscuous mode [ 111.026654][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.041738][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.054598][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.107308][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.115192][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.122446][ T5835] bridge_slave_1: entered allmulticast mode [ 111.131651][ T5835] bridge_slave_1: entered promiscuous mode [ 111.173694][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.180698][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.207234][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.295275][ T5844] team0: Port device team_slave_0 added [ 111.327490][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.334593][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.360760][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.376580][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.409289][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.423805][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.436032][ T5844] team0: Port device team_slave_1 added [ 111.461093][ T5842] team0: Port device team_slave_0 added [ 111.474333][ T5842] team0: Port device team_slave_1 added [ 111.490692][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.578519][ T5835] team0: Port device team_slave_0 added [ 111.647833][ T5853] hsr_slave_0: entered promiscuous mode [ 111.659428][ T5853] hsr_slave_1: entered promiscuous mode [ 111.685168][ T5835] team0: Port device team_slave_1 added [ 111.692317][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.699517][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.726170][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.761245][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.769287][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.800428][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.816051][ T5836] team0: Port device team_slave_0 added [ 111.825817][ T5836] team0: Port device team_slave_1 added [ 111.849864][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.857073][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.884310][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.920496][ T5839] hsr_slave_0: entered promiscuous mode [ 111.927336][ T5839] hsr_slave_1: entered promiscuous mode [ 111.933848][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.941665][ T5839] Cannot create hsr debugfs directory [ 111.948303][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.955302][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.982576][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.057780][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.065178][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.092642][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.165642][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.172640][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.199494][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.267290][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.274778][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.301878][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.389922][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.397047][ T5855] Bluetooth: hci5: command tx timeout [ 112.403221][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.403710][ T5855] Bluetooth: hci1: command tx timeout [ 112.429791][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.435157][ T5852] Bluetooth: hci0: command tx timeout [ 112.473634][ T5852] Bluetooth: hci4: command tx timeout [ 112.473684][ T5846] Bluetooth: hci2: command tx timeout [ 112.479227][ T5855] Bluetooth: hci3: command tx timeout [ 112.527345][ T5842] hsr_slave_0: entered promiscuous mode [ 112.534744][ T5842] hsr_slave_1: entered promiscuous mode [ 112.541165][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.548961][ T5842] Cannot create hsr debugfs directory [ 112.619316][ T5844] hsr_slave_0: entered promiscuous mode [ 112.626339][ T5844] hsr_slave_1: entered promiscuous mode [ 112.632581][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.640656][ T5844] Cannot create hsr debugfs directory [ 112.734886][ T5836] hsr_slave_0: entered promiscuous mode [ 112.741578][ T5836] hsr_slave_1: entered promiscuous mode [ 112.748362][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.756574][ T5836] Cannot create hsr debugfs directory [ 112.768711][ T5835] hsr_slave_0: entered promiscuous mode [ 112.777811][ T5835] hsr_slave_1: entered promiscuous mode [ 112.784521][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.792200][ T5835] Cannot create hsr debugfs directory [ 113.522963][ T5839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.537471][ T5839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.565101][ T5839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.578668][ T5839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.666428][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.684120][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.702050][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.714739][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.833443][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.859048][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.872355][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.895297][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.019409][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.039630][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.052369][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.082502][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.110892][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.227968][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.266015][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.281021][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.296599][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.309444][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.387636][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.395013][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.454840][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.462066][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.476216][ T5855] Bluetooth: hci1: command tx timeout [ 114.476242][ T5846] Bluetooth: hci0: command tx timeout [ 114.476288][ T5846] Bluetooth: hci5: command tx timeout [ 114.500107][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.522274][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.538334][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.553550][ T5846] Bluetooth: hci3: command tx timeout [ 114.553669][ T5855] Bluetooth: hci4: command tx timeout [ 114.558993][ T5846] Bluetooth: hci2: command tx timeout [ 114.594237][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.607995][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.735000][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.787342][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.806813][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.814086][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.861262][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.868550][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.956907][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.045411][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.053492][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.080213][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.118980][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.126216][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.222105][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.315835][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.339731][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.361412][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.368673][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.408862][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.416102][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.459751][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.477992][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.485206][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.538992][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.594194][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.601413][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.736976][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.810976][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.818234][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.884565][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.891813][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.000392][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.388285][ T5853] veth0_vlan: entered promiscuous mode [ 116.498755][ T5839] veth0_vlan: entered promiscuous mode [ 116.528540][ T5853] veth1_vlan: entered promiscuous mode [ 116.554345][ T5846] Bluetooth: hci1: command tx timeout [ 116.559907][ T5846] Bluetooth: hci5: command tx timeout [ 116.567555][ T5855] Bluetooth: hci0: command tx timeout [ 116.599470][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.633229][ T5846] Bluetooth: hci4: command tx timeout [ 116.638696][ T5846] Bluetooth: hci3: command tx timeout [ 116.644665][ T5855] Bluetooth: hci2: command tx timeout [ 116.654945][ T5839] veth1_vlan: entered promiscuous mode [ 116.691940][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.712216][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.800565][ T5853] veth0_macvtap: entered promiscuous mode [ 116.877862][ T5853] veth1_macvtap: entered promiscuous mode [ 116.932334][ T5839] veth0_macvtap: entered promiscuous mode [ 116.967522][ T5842] veth0_vlan: entered promiscuous mode [ 116.979495][ T5839] veth1_macvtap: entered promiscuous mode [ 117.040337][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.058270][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.069469][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.081207][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.110381][ T5844] veth0_vlan: entered promiscuous mode [ 117.121842][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.142967][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.155754][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.166181][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.175446][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.184595][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.200494][ T5842] veth1_vlan: entered promiscuous mode [ 117.239427][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.250569][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.265180][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.289994][ T5844] veth1_vlan: entered promiscuous mode [ 117.320949][ T5839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.330752][ T5839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.339918][ T5839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.348769][ T5839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.585761][ T5842] veth0_macvtap: entered promiscuous mode [ 117.595908][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.606117][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.651086][ T5842] veth1_macvtap: entered promiscuous mode [ 117.657008][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.665257][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.696195][ T5836] veth0_vlan: entered promiscuous mode [ 117.739574][ T5844] veth0_macvtap: entered promiscuous mode [ 117.786461][ T5835] veth0_vlan: entered promiscuous mode [ 117.795517][ T5844] veth1_macvtap: entered promiscuous mode [ 117.808713][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.820274][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.831063][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.842594][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.854189][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.865490][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.877711][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.888915][ T5836] veth1_vlan: entered promiscuous mode [ 117.931811][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.935512][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.951208][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.962069][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.972316][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.983328][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.994860][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.005659][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.018735][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.040084][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.056153][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.066800][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.079140][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.091143][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.116078][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.130171][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.149277][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.160658][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.170918][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.181812][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.188784][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 118.195284][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.220395][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.243049][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.251842][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.269872][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.284319][ T5835] veth1_vlan: entered promiscuous mode [ 118.310891][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.338114][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.355572][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.369582][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.637888][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.646329][ T5945] warning: `syz.5.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.675577][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.808042][ T5836] veth0_macvtap: entered promiscuous mode [ 118.813351][ T5947] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.874027][ T5836] veth1_macvtap: entered promiscuous mode [ 119.656152][ T5835] veth0_macvtap: entered promiscuous mode [ 119.669461][ T5835] veth1_macvtap: entered promiscuous mode [ 119.700541][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.711251][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.732014][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.753210][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.771618][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.782838][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.810213][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.857791][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.879610][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.952932][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.962060][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.069276][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.101954][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.138852][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.164061][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.193218][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.222123][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.234668][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.247255][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.257261][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.267925][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.279885][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.112189][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.162829][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.203820][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.268821][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.279129][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.312809][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.329437][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.349951][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.380749][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.409938][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.455039][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.464220][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.478240][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.509473][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.558274][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9'. [ 121.570528][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.581218][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.644336][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.856521][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.880439][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.923466][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.971569][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.017810][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.030275][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.054283][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.304990][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.314343][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.494796][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.505116][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.524984][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.529466][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.622434][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.660868][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.446013][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.964890][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.420890][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.539809][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.806277][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.852807][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.936403][ T5999] loop3: detected capacity change from 0 to 512 [ 126.979270][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.982348][ T5999] ======================================================= [ 126.982348][ T5999] WARNING: The mand mount option has been deprecated and [ 126.982348][ T5999] and is ignored by this kernel. Remove the mand [ 126.982348][ T5999] option from the mount to silence this warning. [ 126.982348][ T5999] ======================================================= [ 127.053296][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.086646][ T6001] overlayfs: cannot append lower layer [ 127.117881][ T5999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.205778][ T5999] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.17: invalid block [ 127.259065][ T5999] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.17: invalid indirect mapped block 4294967295 (level 1) [ 127.345542][ T5999] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.17: invalid indirect mapped block 4294967295 (level 1) [ 127.433606][ T5999] EXT4-fs (loop3): 2 truncates cleaned up [ 127.441856][ T5999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.662960][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 128.636736][ T6007] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 128.750317][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 129.276118][ T9] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 129.532005][ T9] usb 3-1: config 4 has no interface number 0 [ 129.571766][ T9] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.700416][ T9] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.495233][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.594738][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 130.608851][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.672797][ T9] usb 3-1: can't set config #4, error -71 [ 131.018912][ T9] usb 3-1: USB disconnect, device number 2 [ 132.673737][ T6037] kernel read not supported for file /eth0 (pid: 6037 comm: syz.4.24) [ 132.791528][ T30] audit: type=1800 audit(1743822870.472:2): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.24" name="eth0" dev="mqueue" ino=8490 res=0 errno=0 [ 133.324821][ T6040] loop3: detected capacity change from 0 to 16 [ 133.364675][ T6037] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 133.438664][ T6040] erofs (device loop3): mounted with root inode @ nid 36. [ 134.216547][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 135.257283][ T6063] Zero length message leads to an empty skb [ 135.934171][ T6067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.083621][ T6067] netlink: 'syz.4.31': attribute type 10 has an invalid length. [ 136.499349][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31'. [ 136.511663][ T6072] loop0: detected capacity change from 0 to 2048 [ 137.373806][ T6081] loop3: detected capacity change from 0 to 256 [ 137.501554][ T6072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.590231][ T6080] loop2: detected capacity change from 0 to 2048 [ 137.971760][ T6080] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 137.992308][ T6067] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 138.023086][ T6080] UDF-fs: Scanning with blocksize 512 failed [ 138.181581][ T6080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.848858][ T6097] loop3: detected capacity change from 0 to 256 [ 139.537042][ T6097] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb080095b, utbl_chksum : 0xe619d30d) [ 139.664762][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.929115][ T9] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 140.006509][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.060455][ T9] usb 2-1: config 0 descriptor?? [ 140.085094][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.41'. [ 140.237153][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ec5800: rx timeout, send abort [ 140.367862][ T6109] loop0: detected capacity change from 0 to 64 [ 140.737722][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a6e3c00: rx timeout, send abort [ 140.746611][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ec5800: abort rx timeout. Force session deactivation [ 141.005339][ T30] audit: type=1326 audit(1743822878.642:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bb8d169 code=0x7ffc0000 [ 141.224917][ T6109] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.241274][ T30] audit: type=1326 audit(1743822878.642:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bb8d169 code=0x7ffc0000 [ 141.263435][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a6e3c00: abort rx timeout. Force session deactivation [ 141.412782][ T30] audit: type=1326 audit(1743822878.642:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f661bb8d169 code=0x7ffc0000 [ 141.517545][ T30] audit: type=1326 audit(1743822878.642:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bb8d169 code=0x7ffc0000 [ 141.575264][ T9] kaweth 2-1:0.0: Firmware present in device. [ 141.623410][ T30] audit: type=1326 audit(1743822878.642:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bb8d169 code=0x7ffc0000 [ 141.693221][ T9] kaweth 2-1:0.0: Statistics collection: 0 [ 141.699446][ T9] kaweth 2-1:0.0: Multicast filter limit: 0 [ 141.779105][ T30] audit: type=1326 audit(1743822878.642:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f661bb8d169 code=0x7ffc0000 [ 141.802152][ T9] kaweth 2-1:0.0: MTU: 0 [ 141.883529][ T9] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 141.895311][ T30] audit: type=1326 audit(1743822878.652:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bb8d169 code=0x7ffc0000 [ 142.271932][ T6119] loop2: detected capacity change from 0 to 512 [ 142.282232][ T6119] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.603286][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.609869][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.742793][ T6119] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 142.810318][ T30] audit: type=1326 audit(1743822878.652:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bb8d169 code=0x7ffc0000 [ 142.833168][ T30] audit: type=1326 audit(1743822878.652:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f661bb8d169 code=0x7ffc0000 [ 142.902093][ T6116] loop2: detected capacity change from 0 to 256 [ 143.006909][ T30] audit: type=1326 audit(1743822878.652:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.4.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bb8d169 code=0x7ffc0000 [ 143.479554][ T9] kaweth 2-1:0.0: Error setting SOFS wait [ 143.523089][ T9] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 143.625234][ T9] usb 2-1: USB disconnect, device number 2 [ 144.394817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 145.177049][ T6136] loop5: detected capacity change from 0 to 40427 [ 145.790869][ T6136] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 145.799006][ T6136] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 145.882036][ T6136] F2FS-fs (loop5): invalid crc value [ 145.911351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.076957][ T6136] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 146.084282][ T6136] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 146.396417][ T6152] syz.5.51: attempt to access beyond end of device [ 146.396417][ T6152] loop5: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 146.422327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 147.646338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.666388][ T6160] loop3: detected capacity change from 0 to 512 [ 147.718119][ T6160] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.891509][ T6160] EXT4-fs (loop3): 1 orphan inode deleted [ 147.916231][ T1158] __quota_error: 10 callbacks suppressed [ 147.916259][ T1158] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 148.155324][ T6160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.163188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 148.959495][ T1158] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 149.167229][ T6160] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.584679][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.963196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 150.973151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 150.981581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 151.052461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 151.233353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 151.237485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.521252][ T6211] loop2: detected capacity change from 0 to 512 [ 157.017990][ T6211] EXT4-fs error (device loop2): __ext4_fill_super:5502: inode #2: comm syz.2.68: casefold flag without casefold feature [ 157.159021][ T6224] loop5: detected capacity change from 0 to 2048 [ 157.923709][ T6231] loop0: detected capacity change from 0 to 512 [ 157.930837][ T6231] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.972799][ T6231] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 157.983639][ T6211] EXT4-fs (loop2): get root inode failed [ 157.989323][ T6211] EXT4-fs (loop2): mount failed [ 158.036250][ T6224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.236666][ T6231] loop0: detected capacity change from 0 to 256 [ 159.057116][ T6224] input: syz1 as /devices/virtual/input/input6 [ 159.977620][ T6249] loop4: detected capacity change from 0 to 16 [ 160.101382][ T6249] erofs (device loop4): mounted with root inode @ nid 36. [ 160.195110][ T6249] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 160.279427][ T6249] erofs (device loop4): read error -117 @ 43 of nid 36 [ 160.485791][ T6256] input: syz0 as /devices/virtual/input/input7 [ 161.635937][ T6260] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.829690][ T6260] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.276052][ T6260] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.248254][ T6260] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.644656][ T6300] loop1: detected capacity change from 0 to 1024 [ 166.671291][ T6260] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.693342][ T6304] netlink: 'syz.4.94': attribute type 12 has an invalid length. [ 166.720085][ T6260] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.754331][ T6300] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c018, mo2=0002] [ 166.814131][ T6260] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.830556][ T6300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.850628][ T6260] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.887608][ T6310] overlayfs: failed to clone upperpath [ 167.670180][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.730528][ T6324] loop0: detected capacity change from 0 to 64 [ 167.979580][ T6326] loop4: detected capacity change from 0 to 128 [ 168.107494][ T6326] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.706569][ T6335] capability: warning: `syz.2.104' uses deprecated v2 capabilities in a way that may be insecure [ 169.127183][ T6326] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.601989][ T6326] fscrypt: Error allocating hmac(sha512): -2 [ 169.728134][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.456107][ T6356] ufs: You didn't specify the type of your ufs filesystem [ 170.456107][ T6356] [ 170.456107][ T6356] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 170.456107][ T6356] [ 170.456107][ T6356] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 170.488762][ T6356] ufs: ufstype=old is supported read-only [ 170.500753][ T6356] ufs: ufs_fill_super(): bad magic number [ 171.153346][ T5852] Bluetooth: hci5: command 0x0405 tx timeout [ 171.237505][ T6362] loop0: detected capacity change from 0 to 128 [ 171.487848][ T6365] loop4: detected capacity change from 0 to 2048 [ 171.616182][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.114'. [ 171.660768][ T6374] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.403270][ T6379] loop0: detected capacity change from 0 to 40427 [ 173.425666][ T6379] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 173.433915][ T6379] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 173.452635][ T6379] F2FS-fs (loop0): invalid crc value [ 173.571067][ T6379] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 173.578304][ T6379] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.876065][ T6387] syz.0.116: attempt to access beyond end of device [ 173.876065][ T6387] loop0: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 175.506576][ T6393] loop4: detected capacity change from 0 to 2048 [ 175.612599][ T6393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.673625][ T6434] loop3: detected capacity change from 0 to 40427 [ 181.726400][ T6434] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 181.734274][ T6434] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 181.755579][ T6434] F2FS-fs (loop3): invalid crc value [ 181.870465][ T6434] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 181.878749][ T6434] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 182.178365][ T6441] syz.3.132: attempt to access beyond end of device [ 182.178365][ T6441] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 188.048701][ T6011] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 188.664954][ T6011] usb 2-1: Using ep0 maxpacket: 16 [ 188.722041][ T6011] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 188.767383][ T6011] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.822517][ T6011] usb 2-1: config 0 has no interface number 0 [ 188.869861][ T6011] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 188.898586][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.934211][ T6011] usb 2-1: Product: syz [ 188.962219][ T6011] usb 2-1: Manufacturer: syz [ 188.986697][ T6011] usb 2-1: SerialNumber: syz [ 189.028113][ T6011] usb 2-1: config 0 descriptor?? [ 189.307177][ T6508] loop5: detected capacity change from 0 to 2048 [ 189.389422][ T6508] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.428736][ T6011] usb 2-1: USB disconnect, device number 3 [ 189.603479][ T6510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.152'. [ 190.432190][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.153'. [ 191.085776][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 191.216221][ T6525] trusted_key: syz.2.158 sent an empty control message without MSG_MORE. [ 191.638448][ T6536] loop5: detected capacity change from 0 to 256 [ 191.649037][ T6536] exfat: Deprecated parameter 'namecase' [ 192.119423][ T6536] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 192.568013][ T6539] loop0: detected capacity change from 0 to 128 [ 194.259788][ T6551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.573325][ T6561] fuse: Bad value for 'fd' [ 198.530856][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'. [ 199.850279][ T6584] loop3: detected capacity change from 0 to 256 [ 199.876259][ T6581] loop4: detected capacity change from 0 to 4096 [ 200.153817][ T6581] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 200.183675][ T6586] bridge0: port 3(syz_tun) entered blocking state [ 201.133098][ T6586] bridge0: port 3(syz_tun) entered disabled state [ 201.140144][ T6586] syz_tun: entered allmulticast mode [ 201.650851][ T6586] syz_tun: entered promiscuous mode [ 201.818478][ T6586] bridge0: port 3(syz_tun) entered blocking state [ 201.825417][ T6586] bridge0: port 3(syz_tun) entered forwarding state [ 201.844583][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 202.093556][ T6581] ntfs3(loop4): Failed to read $UpCase (-4). [ 204.231017][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.244133][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.366133][ T6623] loop3: detected capacity change from 0 to 1024 [ 206.505042][ T6623] EXT4-fs: Ignoring removed orlov option [ 207.566535][ T6623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.306818][ T6645] syz_tun: left allmulticast mode [ 208.390582][ T6645] syz_tun: left promiscuous mode [ 208.429957][ T6645] bridge0: port 3(syz_tun) entered disabled state [ 208.526289][ T6645] bridge_slave_0: left allmulticast mode [ 208.606425][ T6645] bridge_slave_0: left promiscuous mode [ 208.655697][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.708412][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.736816][ T6645] bridge_slave_1: left allmulticast mode [ 208.742553][ T6645] bridge_slave_1: left promiscuous mode [ 208.883107][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.060572][ T6645] bond0: (slave bond_slave_0): Releasing backup interface [ 210.908215][ T6645] bond0: (slave bond_slave_1): Releasing backup interface [ 211.122024][ T6645] team0: Port device team_slave_0 removed [ 211.199202][ T6645] team0: Port device team_slave_1 removed [ 211.244512][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.251997][ T6645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.286824][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.294886][ T6645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.376700][ T6647] vlan0: entered promiscuous mode [ 211.377190][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 211.450265][ T6647] team0: Port device vlan0 added [ 211.511099][ T6650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.570852][ T6650] bond0: (slave rose0): Enslaving as an active interface with an up link [ 211.679499][ T6669] bridge0: port 3(syz_tun) entered blocking state [ 211.709879][ T6669] bridge0: port 3(syz_tun) entered disabled state [ 211.730200][ T6669] syz_tun: entered allmulticast mode [ 211.760494][ T6669] syz_tun: entered promiscuous mode [ 211.781350][ T6669] bridge0: port 3(syz_tun) entered blocking state [ 211.788006][ T6669] bridge0: port 3(syz_tun) entered forwarding state [ 215.710568][ T6705] syzkaller0: entered promiscuous mode [ 215.878745][ T6705] syzkaller0: entered allmulticast mode [ 218.433071][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 218.636753][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 218.669508][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 218.704759][ T9] usb 6-1: config 1 has an invalid interface number: 246 but max is 1 [ 218.758363][ T9] usb 6-1: config 1 has an invalid interface number: 118 but max is 1 [ 218.783325][ T9] usb 6-1: config 1 has no interface number 0 [ 218.789619][ T9] usb 6-1: config 1 has no interface number 1 [ 218.822211][ T9] usb 6-1: config 1 interface 246 has no altsetting 0 [ 218.843385][ T9] usb 6-1: config 1 interface 118 has no altsetting 0 [ 218.868621][ T9] usb 6-1: string descriptor 0 read error: -22 [ 218.875369][ T9] usb 6-1: New USB device found, idVendor=0506, idProduct=03e8, bcdDevice=66.01 [ 218.895593][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.938681][ T9] hub 6-1:1.246: Invalid hub with more than one config or interface [ 218.970966][ T9] hub 6-1:1.246: probe with driver hub failed with error -22 [ 219.189649][ T6734] loop5: detected capacity change from 0 to 128 [ 219.401311][ T6734] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.483159][ T6761] overlayfs: failed to clone lowerpath [ 219.636741][ T6734] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.140332][ T9] kaweth 6-1:1.246: Firmware present in device. [ 220.187134][ T9] kaweth 6-1:1.246: Error reading configuration (-71), no net device created [ 220.208766][ T9] kaweth 6-1:1.246: probe with driver kaweth failed with error -5 [ 220.302890][ T9] kaweth 6-1:1.118: Firmware present in device. [ 220.329703][ T9] kaweth 6-1:1.118: Error reading configuration (-71), no net device created [ 220.370960][ T9] kaweth 6-1:1.118: probe with driver kaweth failed with error -5 [ 220.393184][ T6768] block nbd0: not configured, cannot reconfigure [ 220.435047][ T9] usb 6-1: USB disconnect, device number 2 [ 221.239375][ T5839] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.143939][ T6780] loop4: detected capacity change from 0 to 40427 [ 222.152077][ T6780] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 222.160310][ T6780] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.180569][ T6780] F2FS-fs (loop4): invalid crc value [ 222.348554][ T6780] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 222.355756][ T6780] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.633833][ T6780] syz.4.231: attempt to access beyond end of device [ 222.633833][ T6780] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 222.838724][ T6793] Cannot find set identified by id 3 to match [ 225.089923][ T6799] ip6gretap0 speed is unknown, defaulting to 1000 [ 225.896450][ T6802] ip6gretap0: entered promiscuous mode [ 225.908962][ T6799] ip6gretap0 speed is unknown, defaulting to 1000 [ 226.043513][ T6799] ip6gretap0 speed is unknown, defaulting to 1000 [ 226.176016][ T6799] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 226.325963][ T6799] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 227.380045][ T6799] ip6gretap0 speed is unknown, defaulting to 1000 [ 227.430554][ T6799] ip6gretap0 speed is unknown, defaulting to 1000 [ 227.484321][ T6799] ip6gretap0 speed is unknown, defaulting to 1000 [ 227.803304][ T6799] ip6gretap0 speed is unknown, defaulting to 1000 [ 227.838228][ T6799] ip6gretap0 speed is unknown, defaulting to 1000 [ 228.068022][ T6799] ip6gretap0 speed is unknown, defaulting to 1000 [ 229.069860][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 229.157383][ T6856] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.322035][ T6856] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.337081][ T6867] netlink: 'syz.5.255': attribute type 1 has an invalid length. [ 229.510749][ T6867] ip6gretap0 speed is unknown, defaulting to 1000 [ 229.729667][ T6856] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.002354][ T6856] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.446258][ T6893] vlan2: entered allmulticast mode [ 230.453342][ T6893] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 230.660693][ T6901] vlan1: entered allmulticast mode [ 230.671457][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 230.691142][ T6901] veth0_vlan: entered allmulticast mode [ 231.536173][ T6916] loop0: detected capacity change from 0 to 40427 [ 231.545564][ T6916] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 231.553547][ T6916] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 231.601682][ T6916] F2FS-fs (loop0): invalid crc value [ 231.633507][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 231.639831][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 231.646467][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 231.658109][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 231.665580][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 231.864853][ T6916] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 231.872134][ T6916] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 231.957000][ T6926] syz.0.272: attempt to access beyond end of device [ 231.957000][ T6926] loop0: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 232.141835][ T6898] vlan1 (unregistering): left allmulticast mode [ 232.162009][ T6898] veth0_vlan (unregistering): left allmulticast mode [ 232.418073][ T6856] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.481688][ T6856] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.573888][ T6856] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.286802][ T6856] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.306142][ T6939] loop3: detected capacity change from 0 to 256 [ 233.345301][ T6942] netlink: 52 bytes leftover after parsing attributes in process `syz.4.278'. [ 233.536853][ T6945] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 233.881213][ T5898] IPVS: starting estimator thread 0... [ 233.994031][ T6955] IPVS: using max 21 ests per chain, 50400 per kthread [ 234.334163][ T6957] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 235.289965][ T6972] siw: device registration error -23 [ 236.032578][ T6983] loop3: detected capacity change from 0 to 256 [ 236.452427][ T6990] loop4: detected capacity change from 0 to 32768 [ 236.510855][ T6987] jfs_mkdir: dtInsert returned -EIO [ 236.516414][ T6987] ERROR: (device loop4): txAbort: [ 236.516414][ T6987] [ 236.526443][ T6987] ERROR: (device loop4): remounting filesystem as read-only [ 236.541104][ T6987] jfs_lookup: iget failed on inum 4 [ 236.549610][ T6987] jfs_lookup: iget failed on inum 4 [ 236.801798][ T6994] loop0: detected capacity change from 0 to 2048 [ 236.976637][ T6994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.895700][ T7017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.301'. [ 237.983943][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.301'. [ 238.441106][ T7020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.529522][ T7020] bond0: (slave bond1): Enslaving as an active interface with an up link [ 239.213249][ T7028] bridge_slave_0: left allmulticast mode [ 239.218963][ T7028] bridge_slave_0: left promiscuous mode [ 239.323408][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.549497][ T7028] bridge_slave_1: left allmulticast mode [ 239.582889][ T7028] bridge_slave_1: left promiscuous mode [ 239.609228][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.707063][ T7028] bond0: (slave bond_slave_0): Releasing backup interface [ 239.813379][ T7028] bond0: (slave bond_slave_1): Releasing backup interface [ 239.935658][ T7028] team0: Port device team_slave_0 removed [ 239.999060][ T7028] team0: Port device team_slave_1 removed [ 240.035904][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.053538][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.078515][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.089234][ T7047] loop1: detected capacity change from 0 to 2048 [ 240.094415][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.126356][ T7047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.210586][ T7028] bond0: (slave wlan1): Releasing backup interface [ 240.675682][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 240.948822][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 241.002037][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 243.205175][ T7069] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 243.427285][ T7088] loop4: detected capacity change from 0 to 2048 [ 243.529620][ T7088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.301782][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 247.971239][ T7183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.355'. [ 248.033243][ T7183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.355'. [ 248.100021][ T7183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.355'. [ 248.123361][ T7183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.355'. [ 248.456769][ T7190] ip6gretap0 speed is unknown, defaulting to 1000 [ 249.180801][ T7214] ip6gretap0 speed is unknown, defaulting to 1000 [ 251.731775][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 251.781964][ T7262] netlink: 32 bytes leftover after parsing attributes in process `syz.0.387'. [ 252.683466][ T7275] netlink: 36 bytes leftover after parsing attributes in process `syz.5.390'. [ 252.743842][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.390'. [ 252.758260][ T7272] ip6gretap0 speed is unknown, defaulting to 1000 [ 252.870384][ T7275] netlink: 36 bytes leftover after parsing attributes in process `syz.5.390'. [ 252.922390][ T7275] netlink: 36 bytes leftover after parsing attributes in process `syz.5.390'. [ 253.175453][ T7295] Illegal XDP return value 4294967274 on prog (id 37) dev syz_tun, expect packet loss! [ 256.443378][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 256.989843][ T7366] loop3: detected capacity change from 0 to 32768 [ 257.021917][ T7364] jfs_mkdir: dtInsert returned -EIO [ 257.027271][ T7364] ERROR: (device loop3): txAbort: [ 257.027271][ T7364] [ 257.036519][ T7364] ERROR: (device loop3): remounting filesystem as read-only [ 257.753644][ T5849] Bluetooth: hci5: command 0x0405 tx timeout [ 258.612714][ T5901] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 258.809285][ T5901] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.833295][ T5901] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.846916][ T5901] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.859053][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.084652][ T5901] usb 1-1: usb_control_msg returned -32 [ 259.090370][ T5901] usbtmc 1-1:16.0: can't read capabilities [ 259.856662][ T5897] usb 1-1: USB disconnect, device number 2 [ 260.137745][ T7417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.450'. [ 260.275959][ T7417] netlink: 256 bytes leftover after parsing attributes in process `syz.3.450'. [ 260.559472][ T7426] process 'syz.1.452' launched '/dev/fd/3' with NULL argv: empty string added [ 260.736784][ T7431] netlink: 304 bytes leftover after parsing attributes in process `syz.0.453'. [ 265.502180][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.523374][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.794399][ T7503] ip6gretap0 speed is unknown, defaulting to 1000 [ 269.421630][ T5849] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 269.951621][ T7558] loop5: detected capacity change from 0 to 32768 [ 270.051528][ T7556] jfs_mkdir: dtInsert returned -EIO [ 270.056994][ T7556] ERROR: (device loop5): txAbort: [ 270.056994][ T7556] [ 270.066843][ T7556] ERROR: (device loop5): remounting filesystem as read-only [ 271.322429][ T7573] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 271.549765][ T7579] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 272.122528][ T7583] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 272.165538][ T63] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 272.204699][ T7585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.345376][ T63] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 273.317721][ T7588] veth3: entered promiscuous mode [ 273.328102][ T7588] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 275.125305][ T7632] overlayfs: failed to clone upperpath [ 275.232364][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'. [ 275.285940][ T7636] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 275.296924][ T7627] input: syz0 as /devices/virtual/input/input9 [ 279.062513][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.519'. [ 279.543163][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.5.525'. [ 279.742585][ T7678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.775011][ T7678] bond0: (slave bond2): Enslaving as an active interface with an up link [ 283.426349][ T7711] netlink: 'syz.5.531': attribute type 1 has an invalid length. [ 283.435668][ T7711] netlink: 216 bytes leftover after parsing attributes in process `syz.5.531'. [ 284.944274][ T7733] netlink: 'syz.5.536': attribute type 39 has an invalid length. [ 287.007380][ T7752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.547'. [ 287.252924][ T7758] sctp: [Deprecated]: syz.3.546 (pid 7758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.252924][ T7758] Use struct sctp_sack_info instead [ 287.506446][ T7756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.545'. [ 287.673137][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'. [ 287.682294][ T7756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.545'. [ 288.499771][ T7756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.545'. [ 290.140860][ T7747] vlan0: left promiscuous mode [ 290.270933][ T7747] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.292029][ T7747] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.328824][ T7747] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.338812][ T7747] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.597711][ T7793] netlink: 52 bytes leftover after parsing attributes in process `syz.4.561'. [ 290.877817][ T7747] syz.0.544 (7747) used greatest stack depth: 21368 bytes left [ 292.339435][ T30] audit: type=1804 audit(1743823030.052:23): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.570" name="/newroot/104/file0" dev="tmpfs" ino=561 res=1 errno=0 [ 292.457944][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 292.513127][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 292.569560][ T7815] ref_ctr_offset mismatch. inode: 0x231 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 292.618803][ T7815] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 292.670578][ T7815] ref_ctr decrement failed for inode: 0x231 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807eb88a00 [ 292.683313][ T7815] uprobe: syz.0.570:7815 failed to unregister, leaking uprobe [ 294.733350][ T7846] __kmem_cache_create_args(9p-fcall-cache-1) failed with error -22 [ 294.741341][ T7846] CPU: 1 UID: 0 PID: 7846 Comm: syz.1.577 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 294.741394][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.741415][ T7846] Call Trace: [ 294.741428][ T7846] [ 294.741442][ T7846] dump_stack_lvl+0x16c/0x1f0 [ 294.741499][ T7846] __kmem_cache_create_args+0x125/0x390 [ 294.741565][ T7846] p9_client_create+0xec0/0x11c0 [ 294.741634][ T7846] ? __pfx_p9_client_create+0x10/0x10 [ 294.741685][ T7846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.741752][ T7846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.741796][ T7846] ? lockdep_init_map_type+0x5c/0x280 [ 294.741833][ T7846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.741877][ T7846] ? __raw_spin_lock_init+0x3a/0x110 [ 294.741927][ T7846] v9fs_session_init+0x1f7/0x1a80 [ 294.741988][ T7846] ? __pfx_v9fs_session_init+0x10/0x10 [ 294.742047][ T7846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.742099][ T7846] v9fs_mount+0xc5/0xa30 [ 294.742138][ T7846] ? rcu_is_watching+0x12/0xc0 [ 294.742186][ T7846] ? __pfx_v9fs_mount+0x10/0x10 [ 294.742233][ T7846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.742277][ T7846] ? apparmor_capable+0x114/0x1d0 [ 294.742317][ T7846] ? __pfx_v9fs_mount+0x10/0x10 [ 294.742367][ T7846] legacy_get_tree+0x10c/0x220 [ 294.742431][ T7846] vfs_get_tree+0x8e/0x340 [ 294.742478][ T7846] path_mount+0x14d4/0x1f30 [ 294.742516][ T7846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.742559][ T7846] ? kmem_cache_free+0x2d4/0x4d0 [ 294.742617][ T7846] ? __pfx_path_mount+0x10/0x10 [ 294.742655][ T7846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.742696][ T7846] ? putname+0x154/0x1a0 [ 294.742740][ T7846] __x64_sys_mount+0x28d/0x310 [ 294.742777][ T7846] ? __pfx___x64_sys_mount+0x10/0x10 [ 294.742812][ T7846] ? rcu_is_watching+0x12/0xc0 [ 294.742860][ T7846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.742916][ T7846] do_syscall_64+0xcd/0x260 [ 294.742974][ T7846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.743011][ T7846] RIP: 0033:0x7fdf2fb8d169 [ 294.743039][ T7846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.743074][ T7846] RSP: 002b:00007fdf2d9f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.743107][ T7846] RAX: ffffffffffffffda RBX: 00007fdf2fda6160 RCX: 00007fdf2fb8d169 [ 294.743131][ T7846] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 294.743154][ T7846] RBP: 00007fdf2fc0e2a0 R08: 0000200000000300 R09: 0000000000000000 [ 294.743177][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.743199][ T7846] R13: 0000000000000000 R14: 00007fdf2fda6160 R15: 00007ffe52fc59a8 [ 294.743246][ T7846] [ 296.115203][ T7848] Falling back ldisc for ttyS3. [ 296.819981][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 296.943436][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 297.408498][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.592'. [ 297.620195][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.593'. [ 299.915422][ T5849] Bluetooth: hci5: unexpected event for opcode 0x2040 [ 301.450937][ T7909] overlayfs: failed to clone upperpath [ 301.472911][ T2148] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 302.313575][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 302.348762][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 302.378600][ T2148] usb 6-1: Using ep0 maxpacket: 32 [ 302.405072][ T2148] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.440037][ T2148] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 302.453724][ T2148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.463924][ T2148] usb 6-1: Product: syz [ 302.468252][ T2148] usb 6-1: Manufacturer: syz [ 302.481894][ T2148] usb 6-1: SerialNumber: syz [ 302.514462][ T2148] usb 6-1: config 0 descriptor?? [ 303.564878][ T2148] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 305.118596][ T7949] overlayfs: failed to resolve './file1': -2 [ 305.142830][ T2148] usb 6-1: USB disconnect, device number 3 [ 305.164198][ T5897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 305.366447][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 305.388932][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.462138][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.506857][ T5897] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 305.562781][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.644429][ T5897] usb 1-1: config 0 descriptor?? [ 306.006711][ T5897] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 306.998937][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 307.018055][ T7938] macvlan2: entered promiscuous mode [ 307.023843][ T7938] bond0: entered promiscuous mode [ 307.029684][ T7938] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 307.080853][ T5898] usb 1-1: USB disconnect, device number 3 [ 309.323809][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 309.365510][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.626'. [ 309.884751][ T7975] loop5: detected capacity change from 0 to 40427 [ 309.912021][ T7975] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 309.946546][ T7975] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 310.001225][ T7975] F2FS-fs (loop5): invalid crc value [ 311.559642][ T8026] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.936160][ T8026] x_tables: ip_tables: osf match: only valid for protocol 6 [ 312.475424][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 312.510937][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 312.908620][ T8050] loop4: detected capacity change from 0 to 512 [ 312.915815][ T8050] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.925634][ T8050] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 312.981382][ T8050] loop4: detected capacity change from 0 to 256 [ 316.771909][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 316.823128][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 317.383093][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 317.522793][ T5823] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 317.974697][ T5823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.984674][ T5823] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.009906][ T5823] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 318.019577][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.786811][ T5823] usb 4-1: usb_control_msg returned -32 [ 318.812759][ T5823] usbtmc 4-1:16.0: can't read capabilities [ 318.870464][ T8087] loop1: detected capacity change from 0 to 40427 [ 318.916364][ T8087] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 319.052885][ T8087] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 319.136569][ T8087] F2FS-fs (loop1): invalid crc value [ 320.070859][ T5898] usb 4-1: USB disconnect, device number 2 [ 320.327716][ T2148] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 320.498246][ T2148] usb 6-1: Using ep0 maxpacket: 8 [ 320.513823][ T2148] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 320.542015][ T2148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.617061][ T2148] usb 6-1: config 0 descriptor?? [ 320.843081][ T2148] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 320.883842][ T2148] asix 6-1:0.0: probe with driver asix failed with error -32 [ 320.936092][ T2148] usb 6-1: USB disconnect, device number 4 [ 322.988189][ T8160] usb usb1: usbfs: process 8160 (syz.3.684) did not claim interface 0 before use [ 323.012469][ T8160] usb usb1: usbfs: process 8160 (syz.3.684) did not claim interface 0 before use [ 323.450223][ T8167] overlayfs: failed to resolve './file0': -2 [ 323.537905][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 323.768125][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 324.595975][ T8178] loop5: detected capacity change from 0 to 40427 [ 324.605963][ T8178] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 324.613871][ T8178] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 324.625263][ T8178] F2FS-fs (loop5): invalid crc value [ 324.746111][ T8178] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 324.753333][ T8178] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 326.853722][ T5897] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 326.857500][ T8193] syz.5.690: attempt to access beyond end of device [ 326.857500][ T8193] loop5: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 326.892180][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.899165][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.496592][ T5897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.515801][ T5897] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.533217][ T5897] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.542343][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.742761][ T5897] usb 2-1: usb_control_msg returned -71 [ 327.748426][ T5897] usbtmc 2-1:16.0: can't read capabilities [ 328.043120][ T5897] usb 2-1: USB disconnect, device number 4 [ 328.279819][ T8209] overlayfs: failed to resolve './file0': -2 [ 329.107998][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 329.248909][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 329.358662][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 329.686873][ T8229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.708'. [ 331.274040][ T8250] netlink: 'syz.5.696': attribute type 4 has an invalid length. [ 331.382814][ T8251] sctp: [Deprecated]: syz.1.715 (pid 8251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.382814][ T8251] Use struct sctp_sack_info instead [ 332.261319][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.721'. [ 332.795653][ T8272] netlink: 44 bytes leftover after parsing attributes in process `syz.0.725'. [ 333.481721][ T8298] netlink: 312 bytes leftover after parsing attributes in process `syz.2.734'. [ 333.636235][ T8288] loop3: detected capacity change from 0 to 40427 [ 333.644175][ T8288] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 333.651925][ T8288] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 333.675581][ T8288] F2FS-fs (loop3): invalid crc value [ 333.690482][ T8300] overlayfs: failed to resolve './file0': -2 [ 334.817222][ T8288] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 334.824500][ T8288] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 335.253787][ T8314] syz.3.731: attempt to access beyond end of device [ 335.253787][ T8314] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 335.894479][ T8319] netlink: 44 bytes leftover after parsing attributes in process `syz.0.739'. [ 336.172360][ T8326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.743'. [ 338.199118][ T8354] loop4: detected capacity change from 0 to 512 [ 338.206469][ T8354] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.225807][ T8354] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 338.262347][ T8321] loop4: detected capacity change from 0 to 256 [ 338.670701][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 338.684602][ T8360] overlayfs: failed to resolve './file0': -2 [ 340.226793][ T8370] netlink: 44 bytes leftover after parsing attributes in process `syz.3.756'. [ 340.869020][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 341.092728][ T5897] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 341.658077][ T5897] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.706703][ T5897] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.763173][ T5897] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.783377][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.795711][ T8404] overlayfs: failed to resolve './file0': -2 [ 342.034788][ T5897] usb 4-1: usb_control_msg returned -32 [ 342.069774][ T5897] usbtmc 4-1:16.0: can't read capabilities [ 342.592769][ T5897] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 342.648901][ T8414] netlink: 44 bytes leftover after parsing attributes in process `syz.5.773'. [ 342.666710][ T5823] usb 4-1: USB disconnect, device number 3 [ 342.812859][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 342.848036][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.926780][ T5897] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 342.997656][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.671518][ T5897] usb 2-1: config 0 descriptor?? [ 343.943728][ T5897] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 344.132817][ T2148] usb 2-1: USB disconnect, device number 5 [ 346.037508][ T8450] loop4: detected capacity change from 0 to 512 [ 346.044820][ T8450] EXT4-fs: Ignoring removed mblk_io_submit option [ 346.086629][ T8450] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 346.119882][ T8450] loop4: detected capacity change from 0 to 256 [ 346.433311][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 346.494675][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'. [ 346.903805][ T8459] loop1: detected capacity change from 0 to 40427 [ 347.069608][ T8459] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 347.077639][ T8459] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 347.212890][ T8459] F2FS-fs (loop1): invalid crc value [ 347.695404][ T8459] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 347.702809][ T8459] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 348.050493][ T8459] syz.1.788: attempt to access beyond end of device [ 348.050493][ T8459] loop1: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 351.252690][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.801'. [ 351.373040][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 351.428786][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.804'. [ 352.289240][ T8544] netlink: 'syz.3.806': attribute type 1 has an invalid length. [ 352.363001][ T8544] netlink: 'syz.3.806': attribute type 3 has an invalid length. [ 352.422732][ T8544] netlink: 'syz.3.806': attribute type 2 has an invalid length. [ 352.492786][ T8544] netlink: 212 bytes leftover after parsing attributes in process `syz.3.806'. [ 352.511907][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 355.434207][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 355.476460][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 356.367812][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.828'. [ 356.967326][ T8614] overlayfs: failed to resolve './file1': -2 [ 357.386712][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.835'. [ 357.962064][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 358.005493][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 359.389050][ T8647] netlink: 100 bytes leftover after parsing attributes in process `syz.3.842'. [ 360.043619][ T8661] overlayfs: failed to resolve './file1': -2 [ 361.472924][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 361.527255][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 362.622803][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 362.872750][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.882570][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.938409][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.973528][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.278593][ T9] usb 5-1: usb_control_msg returned -32 [ 363.322926][ T9] usbtmc 5-1:16.0: can't read capabilities [ 363.403017][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 363.418299][ T9] usb 5-1: USB disconnect, device number 2 [ 363.422437][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.870'. [ 363.826776][ T8714] input: syz0 as /devices/virtual/input/input11 [ 366.147853][ T8745] loop3: detected capacity change from 0 to 40427 [ 366.173860][ T8745] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 366.181676][ T8745] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 366.215540][ T8745] F2FS-fs (loop3): invalid crc value [ 366.385454][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 366.413011][ T8745] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 366.420117][ T8745] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 366.572845][ T5898] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 366.602836][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 366.844661][ T8766] syz.3.885: attempt to access beyond end of device [ 366.844661][ T8766] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 367.585469][ T8770] [ 367.586038][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.587824][ T8770] ====================================================== [ 367.587837][ T8770] WARNING: possible circular locking dependency detected [ 367.611607][ T8770] 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 Not tainted [ 367.618385][ T8770] ------------------------------------------------------ [ 367.625405][ T8770] syz.1.891/8770 is trying to acquire lock: [ 367.631298][ T8770] ffffffff9012cee8 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0x120/0x28b0 [ 367.640444][ T8770] [ 367.640444][ T8770] but task is already holding lock: [ 367.647814][ T8770] ffff88807f3da1a0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 367.657964][ T8770] [ 367.657964][ T8770] which lock already depends on the new lock. [ 367.657964][ T8770] [ 367.668387][ T8770] [ 367.668387][ T8770] the existing dependency chain (in reverse order) is: [ 367.677408][ T8770] [ 367.677408][ T8770] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 367.686056][ T8770] __mutex_lock+0x199/0xb90 [ 367.691125][ T8770] smc_switch_to_fallback+0x2d/0x9f0 [ 367.696950][ T8770] smc_sendmsg+0x13d/0x520 [ 367.701914][ T8770] __sys_sendto+0x498/0x510 [ 367.706961][ T8770] __x64_sys_sendto+0xe0/0x1c0 [ 367.712273][ T8770] do_syscall_64+0xcd/0x260 [ 367.717331][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.723764][ T8770] [ 367.723764][ T8770] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 367.731445][ T8770] lock_sock_nested+0x41/0xf0 [ 367.736677][ T8770] sockopt_lock_sock+0x54/0x70 [ 367.742085][ T8770] do_ip_setsockopt+0xfe/0x3240 [ 367.747499][ T8770] ip_setsockopt+0x59/0xf0 [ 367.752446][ T8770] tcp_setsockopt+0xa7/0x100 [ 367.757576][ T8770] do_sock_setsockopt+0x224/0x470 [ 367.763157][ T8770] __sys_setsockopt+0x1a0/0x230 [ 367.768564][ T8770] __x64_sys_setsockopt+0xbd/0x160 [ 367.774307][ T8770] do_syscall_64+0xcd/0x260 [ 367.779355][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.785783][ T8770] [ 367.785783][ T8770] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 367.793027][ T8770] __lock_acquire+0x1173/0x1ba0 [ 367.798422][ T8770] lock_acquire+0x179/0x350 [ 367.803459][ T8770] __mutex_lock+0x199/0xb90 [ 367.808511][ T8770] start_sync_thread+0x120/0x28b0 [ 367.814086][ T8770] do_ip_vs_set_ctl+0x451/0x11d0 [ 367.819578][ T8770] nf_setsockopt+0x8d/0xf0 [ 367.824543][ T8770] ip_setsockopt+0xcb/0xf0 [ 367.829576][ T8770] tcp_setsockopt+0xa7/0x100 [ 367.834705][ T8770] smc_setsockopt+0x1b6/0xa00 [ 367.839918][ T8770] do_sock_setsockopt+0x224/0x470 [ 367.845500][ T8770] __sys_setsockopt+0x1a0/0x230 [ 367.850897][ T8770] __x64_sys_setsockopt+0xbd/0x160 [ 367.856555][ T8770] do_syscall_64+0xcd/0x260 [ 367.861608][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.868043][ T8770] [ 367.868043][ T8770] other info that might help us debug this: [ 367.868043][ T8770] [ 367.878292][ T8770] Chain exists of: [ 367.878292][ T8770] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 367.878292][ T8770] [ 367.891913][ T8770] Possible unsafe locking scenario: [ 367.891913][ T8770] [ 367.899375][ T8770] CPU0 CPU1 [ 367.904746][ T8770] ---- ---- [ 367.910109][ T8770] lock(&smc->clcsock_release_lock); [ 367.915505][ T8770] lock(sk_lock-AF_INET); [ 367.922464][ T8770] lock(&smc->clcsock_release_lock); [ 367.930392][ T8770] lock(rtnl_mutex); [ 367.934416][ T8770] [ 367.934416][ T8770] *** DEADLOCK *** [ 367.934416][ T8770] [ 367.942588][ T8770] 1 lock held by syz.1.891/8770: [ 367.947542][ T8770] #0: ffff88807f3da1a0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 367.958143][ T8770] [ 367.958143][ T8770] stack backtrace: [ 367.964084][ T8770] CPU: 0 UID: 0 PID: 8770 Comm: syz.1.891 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 367.964125][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 367.964143][ T8770] Call Trace: [ 367.964155][ T8770] [ 367.964168][ T8770] dump_stack_lvl+0x116/0x1f0 [ 367.964216][ T8770] print_circular_bug+0x275/0x350 [ 367.964277][ T8770] check_noncircular+0x14c/0x170 [ 367.964334][ T8770] __lock_acquire+0x1173/0x1ba0 [ 367.964368][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.964411][ T8770] lock_acquire+0x179/0x350 [ 367.964439][ T8770] ? start_sync_thread+0x120/0x28b0 [ 367.964483][ T8770] ? __pfx___might_resched+0x10/0x10 [ 367.964530][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.964573][ T8770] __mutex_lock+0x199/0xb90 [ 367.964618][ T8770] ? start_sync_thread+0x120/0x28b0 [ 367.964660][ T8770] ? start_sync_thread+0x120/0x28b0 [ 367.964702][ T8770] ? __pfx___mutex_lock+0x10/0x10 [ 367.964748][ T8770] ? __lock_acquire+0x5ca/0x1ba0 [ 367.964779][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.964817][ T8770] ? __lock_acquire+0xaa4/0x1ba0 [ 367.964851][ T8770] ? start_sync_thread+0x120/0x28b0 [ 367.964890][ T8770] ? rtnl_lock+0x9/0x20 [ 367.964917][ T8770] start_sync_thread+0x120/0x28b0 [ 367.964961][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.964999][ T8770] ? __lock_acquire+0xaa4/0x1ba0 [ 367.965031][ T8770] ? __pfx_start_sync_thread+0x10/0x10 [ 367.965075][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.965115][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.965153][ T8770] ? find_held_lock+0x2b/0x80 [ 367.965193][ T8770] ? __might_fault+0xe3/0x190 [ 367.965249][ T8770] ? __might_fault+0xe3/0x190 [ 367.965298][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.965339][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.965377][ T8770] ? read_word_at_a_time+0xe/0x20 [ 367.965432][ T8770] ? do_ip_vs_set_ctl+0x451/0x11d0 [ 367.965483][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.965522][ T8770] do_ip_vs_set_ctl+0x451/0x11d0 [ 367.965572][ T8770] ? __lock_acquire+0xaa4/0x1ba0 [ 367.965603][ T8770] ? __mutex_trylock_common+0x10/0x250 [ 367.965634][ T8770] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 367.965686][ T8770] ? __pfx___mutex_trylock_common+0x10/0x10 [ 367.965717][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.965757][ T8770] ? __pfx___might_resched+0x10/0x10 [ 367.965804][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.965846][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.965888][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.965926][ T8770] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 367.965991][ T8770] ? nf_setsockopt+0x8d/0xf0 [ 367.966032][ T8770] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 367.966083][ T8770] nf_setsockopt+0x8d/0xf0 [ 367.966128][ T8770] ip_setsockopt+0xcb/0xf0 [ 367.966158][ T8770] tcp_setsockopt+0xa7/0x100 [ 367.966196][ T8770] smc_setsockopt+0x1b6/0xa00 [ 367.966226][ T8770] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 367.966288][ T8770] ? __pfx_smc_setsockopt+0x10/0x10 [ 367.966320][ T8770] ? errseq_sample+0x53/0x70 [ 367.966360][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.966402][ T8770] ? __pfx_smc_setsockopt+0x10/0x10 [ 367.966433][ T8770] do_sock_setsockopt+0x224/0x470 [ 367.966482][ T8770] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 367.966537][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.966582][ T8770] __sys_setsockopt+0x1a0/0x230 [ 367.966625][ T8770] __x64_sys_setsockopt+0xbd/0x160 [ 367.966663][ T8770] ? do_syscall_64+0x91/0x260 [ 367.966707][ T8770] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.966745][ T8770] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.966788][ T8770] do_syscall_64+0xcd/0x260 [ 367.966835][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.966867][ T8770] RIP: 0033:0x7fdf2fb8d169 [ 367.966892][ T8770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.966923][ T8770] RSP: 002b:00007fdf3092f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 367.966952][ T8770] RAX: ffffffffffffffda RBX: 00007fdf2fda5fa0 RCX: 00007fdf2fb8d169 [ 367.966973][ T8770] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 367.966992][ T8770] RBP: 00007fdf2fc0e2a0 R08: 0000000000000018 R09: 0000000000000000 [ 367.967012][ T8770] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.967031][ T8770] R13: 0000000000000000 R14: 00007fdf2fda5fa0 R15: 00007ffe52fc59a8 [ 367.967062][ T8770] [ 367.969835][ T5898] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.090894][ T8775] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 368.184970][ T5898] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.195435][ T8770] IPVS: stopping master sync thread 8775 ... [ 368.199960][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.853746][ T5898] usb 1-1: usb_control_msg returned -32 [ 368.859473][ T5898] usbtmc 1-1:16.0: can't read capabilities [ 368.872991][ T5898] usb 1-1: USB disconnect, device number 4