last executing test programs: 25.871090096s ago: executing program 3 (id=64): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 25.531639351s ago: executing program 3 (id=66): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000000c0)=0x3ff, 0x4) mmap(&(0x7f0000516000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket(0x28, 0xa, 0x8000) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x39, 0x9, 0xfffffffd, 0xfffffffe, {0x1}}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x1d}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005b00)=ANY=[@ANYBLOB="2c00000012009702600000000000000007000000", @ANYRESHEX=r2], 0x2c}}, 0x400) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000006c0)='Z', 0x1, r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000000) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r6, 0x289e0cb5, 0x0) 21.136120789s ago: executing program 3 (id=73): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002880), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000085}, 0x4) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 18.185116356s ago: executing program 2 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x2, @pix_mp={0x7, 0xca, 0x584e4f53, 0x3, 0xb, [{0x5, 0x7fff}, {0x8, 0x4}, {0x72}, {0xa, 0x9}, {0x100, 0x3}, {0x80000001, 0x72f8}, {0x1, 0xf}, {0x3, 0xa109}], 0x0, 0x63, 0x0, 0x2, 0x5}}) r2 = gettid() timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffff40, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_get$pid(0x2, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d08, &(0x7f0000000040)=0x45) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x20000000, @private2}}, 0x0, 0x0, 0x24, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c4a2b9acf80c07fb1a854dad740100000000000000c29600"}, 0xd8) 16.64935834s ago: executing program 3 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0xc00, 0x0) pipe(&(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xe47, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) msgget(0x3, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x40012121) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x80, 0x0, 0x100}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsmount(r5, 0x0, 0x0) fsopen(&(0x7f00000000c0)='fusectl\x00', 0x0) socket$inet(0x2, 0x1, 0x100) 15.313380081s ago: executing program 4 (id=86): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x189202) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x1000, 0x3010, 0x2, 0x2000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044, 0x1}) io_uring_enter(r6, 0x47b9, 0x3e80, 0xc, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000400)=""/143, 0x80000005, 0x8f}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, 0x0, 0x8000) 14.02710891s ago: executing program 3 (id=89): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x5}]}}]}, 0xac}}, 0x0) 12.601433963s ago: executing program 3 (id=94): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 12.393196566s ago: executing program 1 (id=95): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open(0x0, 0x0, 0xf0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x808, &(0x7f00000003c0)=ANY=[], 0x1, 0x1c0, &(0x7f0000000440)="$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") socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x2787bf88466864e, 0x8000) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, 0x0, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r4, r4, 0x0, 0x40008) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) r5 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x40, 0x0, 0x7}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001900674c000000000400000003e000000200000000000000000000000000000000000000000a00000000d683c140bfa1fe62375400"/72, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000004"], 0xb8}}, 0x4c050) 11.987444493s ago: executing program 2 (id=96): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000001c0)=""/24, 0x18) 11.286670544s ago: executing program 1 (id=97): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r1, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r8, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) 10.981301648s ago: executing program 2 (id=98): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x0, 0xe, "e900", 0xc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x29, 0x7, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 10.083693552s ago: executing program 1 (id=99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="ff"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[]) 8.045174024s ago: executing program 1 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0xc00, 0x0) pipe(&(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xe47, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) msgget(0x3, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x40012121) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x80, 0x0, 0x100}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsmount(r5, 0x0, 0x0) fsopen(&(0x7f00000000c0)='fusectl\x00', 0x0) socket$inet(0x2, 0x1, 0x100) 7.971543115s ago: executing program 0 (id=102): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) alarm(0x8000000000000001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="01002abd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657680696d300000080003000200000008000b000900000006001100ffff0000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) bind$inet(r5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1}) 7.916368026s ago: executing program 4 (id=103): socket$kcm(0x11, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000300)=0x60, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xe8, 0x0, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbc, 0x7, 0x5aa9, @remote, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3980}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000000}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 6.840684933s ago: executing program 0 (id=104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x108a012, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x2010, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket(0x40000000015, 0x5, 0x81) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) getpid() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x4, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote, 0x6, 0x0, 0x0, 0x0, 0x9, 0x3fff}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x0, 0x3) 6.781313854s ago: executing program 2 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0}) syz_emit_ethernet(0xc5, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff884700000000000000000000000000000000401a00a7006500000e219078e0000002e0000001860a346715960ce5e061445433c1e00000017fffffff0a010100000000080000000000000007ac1414aa000089880a016e9ab6960008e000000100000003ac1414bb0000008a0000000000000006ac14140a7eaa00010001ac1414bb00000005890bed0a010102e00000020000004e204e2204519078c84753b9081af4edab9464977e1a668761d696a7c69227744ef6ab7c04", @ANYRES16=r2], &(0x7f0000000180)={0x1, 0x1, [0x929, 0x19e, 0x221, 0x66f]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf2503000000180001801400020073797a5f74756e00fbffffff0000000005000300000000000500020007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$eJzs2k1rVFcYB/Bz05SkCXkppS3Jpoe2i3ZzabIsXSSUBEoHFM0IKkhuyESHGWfC3FnMiItZu/IjuBaX7gTJF8h3cOEuCNFVVl7R0bwRFyrJCPn9NvOHPwPn4cDhWdydf+7frm3k6UbWDkNJEoYWQi/sJWE6DIUPeuHP3/9+ee/y1Wv/L5ZKS5diXF5cmZuPMU7+8vT63Ue/brXHrzyefDIStqdv7OzOP9/+aXtm5/XKrWoeq3lsNNsxi2vNZjtbq1fiejWvpTFerFeyvBKrjbzSOtJv1Jubm92YNdYnxjZblTyPWaMba5VubDdju9WN2c2s2ohpmsaJscCXKD/cK4qwW3y7Goqi+O5BGN8KE8/CVEi+j8kPC8mPq8nPvWRmtyimBn1UToX7P98OPeqjIbzodcqdcv+33y//V1r6K74zffCvV51O+Zv9fq7fx6P9SBh738+f2I+GP37r92+7fy+UjvWzYf30xwcAOHfSuO/E/S5NP9b306H98Nj+Nhxmh89sDD5T3r1Ty+r1SksQBGE/DPpl4iwcXPqgTwIAAAAAAAAAAMCnOIvPCQc9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HV7EwAA///n0Xgk") 6.301565392s ago: executing program 4 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x2, @pix_mp={0x7, 0xca, 0x584e4f53, 0x3, 0xb, [{0x5, 0x7fff}, {0x8, 0x4}, {0x72}, {0xa, 0x9}, {0x100, 0x3}, {0x80000001, 0x72f8}, {0x1, 0xf}, {0x3, 0xa109}], 0x0, 0x63, 0x0, 0x2, 0x5}}) r2 = gettid() timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffff40, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_get$pid(0x2, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d08, &(0x7f0000000040)=0x45) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x20000000, @private2}}, 0x0, 0x0, 0x24, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c4a2b9acf80c07fb1a854dad740100000000000000c29600"}, 0xd8) 4.47936774s ago: executing program 1 (id=107): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open(0x0, 0x0, 0xf0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x808, &(0x7f00000003c0)=ANY=[], 0x1, 0x1c0, &(0x7f0000000440)="$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") socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x2787bf88466864e, 0x8000) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, 0x0, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r4, r4, 0x0, 0x40008) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) r5 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x40, 0x0, 0x7}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001900674c000000000400000003e000000200000000000000000000000000000000000000000a00000000d683c140bfa1fe62375400"/72, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000004"], 0xb8}}, 0x4c050) 4.293461303s ago: executing program 0 (id=108): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000001c0)=""/24, 0x18) 3.434513586s ago: executing program 0 (id=109): openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0d83) r0 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000b00)={[{0x5, 0x4e00, "f1e54dfedd"}]}) 2.741619487s ago: executing program 2 (id=110): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0xfe, 0x6220, &(0x7f0000008d00)="$eJzs3c9vHGf9B/DP7C//yLep1UPVb4SQm5YfpTSJkxICBdoe4MClB5QrSuS6VUQKKAkorSziykLiwIm/AITEESGOiAN/QA9cuXHiRCQbCdQTg8Z+nni82e06tb2z9rxekjPzmWd2/YzfO/sjM7NPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADx3e98b6WIiBs/TQuWIv4vuhGdiIWqXo6IheWlvH4vIp6LneZ4NiL6cxHV7Xf+eTri1Yj46GzE1vb6arX48gH78e0//O233z/z1l9/37/4nz/e6742br3793/57z89ONw2AwAAQNuUZVkW6WP+ufT5vtN0pwCAqciv/2WSl5/6+lf/eOvPs9QftVqtVqunUNeVoz2oFxGxUb9N9Z7B4XgAOGE24uOmu0CD5N9qvYg403QngJlWNN0BjsXW9vpqkfIt6q8Hy7vt+VyQfflvFI+u7xg3nWT4HJNpPb42oxvPjOnPwpT6MEty/p3h/G/stg/Sesed/7SMy3+we+lT6+T8u8P5Dzk9+XdG5t9WOf/eE+XflT8AAAAAAMyw/P//Sw0f/507/KYcyCcd/12eUh8AAAAAAAAA4Kgddvy/R4z/BwAAADOr+qxe+fXZvWXjvoutWn69iHhqaH2gZdLFMotN9wMAAAAAAAAAAAAA2qS3ew7v9SKiHxFPLS6WZVn91A3XT+qwtz/p2r790GZNP8kDAMCuj87ma/n7uwuKiPmIuJ6+66+/uLhYlvMLi+ViuTCX388O5ubLhdrn2jytls0NDvCGuDcoqzubr92ubtLn5Untw/dX/a5B2T1Ax45I+mPGmOYGAweA9AIVseUV6ZQpy6fHvfmAfez/p9BSLDX9uGL2Nf0wBQAAAI5fWZZlkb7O+1w65t9pulMAwFTk1//h4wKHqjtj2iOO5v7VarVarVZ/qrquHO1BvYiIjfptqvcMhuMHgBNmIz5uugs0SP6t1ouI55ruBDDTiqY7wLHY2l5fLVK+Rf31II3vns8F2Zf/RrFzu3z7UdNJhs8xmdbjazO68cyY/jw7pT7Mkpx/Zzj/G7vtg7Tecec/LePyH+xcMtc+Of/ucP5DTk/+nZH5t1XOv/dE+XflDwAAAAAAMyz///+S4795kwEAAAAAAADgxNnaXl/N173m4/+fGbGe6z9Pp5x/8aT5L6R5+Z9oOf/OUP5fHFqvW5t/+Obe/v+v7fXV39375//n6UHzn8szRXpkFekRUaTfVPTS9DBb97jNfndQ/aZ+0en20jk/Zf+duBW3Yy0u7Vu3k/4ee+0r+9qrnvb3tV/e1957rP3KvvZ++t6BciG3X4jV+FHcjrd32qu2uQnbPz+hvZzQnvPvev5vpZx/r/ZT5b+Y2ouhaeXhh53H9vv6dNTveePWZ39x6fg3Z6LN6D7atrpq+8430J+dv8mZQfzk7tqdC/dv3rt3ZyXSZN/Sy5EmRyzn39/5mdt7/n9htz0/79f314cfDp44/1mxGb2x+b9Qm6+296Up960JOf9B+sn5v53aR+//Jzn/8fv/yw30BwAAAAAAAAAAAAAAAD5JWZY7l4i+ERFX0/U/TV2bCQBMV379L5O8XK1Wq9Vq9emr68rRXq8XEfGX+m2q9ww/G3VnAMAs+29E/L3pTtAY+bdY/r6/avpi050Bpuru+x/84Obt22t37jbdEwAAAAAAAADg08rjfy7Xxn9+MSKWhtbbN/7rm7F82PE/e3nm0QCjRzzQ9xibnUG3Uxtu/PnYGZ/7wrjxv8/H4+N/5zFxu/XtGKM/oX0woX1uQvv8yKV7aY280KMm5/98bbzzKv9zQ8Ovt2H81+Ex79sg53++9niu8v/C0Hr1/MvfzFz+GwddcTM6+/K/eO+9H1+8+/4Hr9x67+a7a++u/fDKysqlK1evXrt27eI7t26vXdr993h6PQNy/nnsa+eBtkvOP2cu/3bJ+X8u1fJvl5z/51Mt/3bJ+ef3e/Jvl5x//uwj/3bJ+b+Uavm3S87/S6mWf7tsba/PVfm/nGr5t0ve/7+cavm3S87/lVTLv11y/hdSLf92yflfTPUB8vf18KdIzj8f4bL/t0vOfyXV8m+XnP/lVMu/XXL+V1It/3bJ+b+aavm3S87/K6mWf7vk/K+mWv7tkvP/aqrl3y45/2upln+75Py/lmr5t0vO/+upln+75PxfS7X82yXn/41Uy79dcv7fTLX82yXn/61Uy79dcv6vp1r+7bL3/f9mzMzCzM+P9g67MSPbddJmmn5mAgAAAAAAAAAAAACGTeN04qa3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd68xcp31/cDP7M1rhxADITj5G9gkJgRnya4v8YV/XUy4NkC5JRR6wXa9a7PgG167BIpk00CJhFFRBWr6oi0g1EaqKqyKF7SiNC+qXl6V9gV9U1FVompUhSigIrUVzVYz53kez8zOzsza4/XseT4fKfntzpyZc+bMmdn97vq7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmt35xvnP1YqiqP/X+N/monhB/eONU5sbl73uRm8hAAAAcK3+t/H/525JFxzs40ZNy/zNK/7+m0tLS0vFB0a/PP6lpaV0xVRRjG8oisZ10eV//WCteZngsWKyNtL0+UiP1Y/2uH6sx/XjPa6f6HH9hh7XT/a4ftkOWGZj+fOYxp1ta3y4udylxa3FeOO6bR1u9Vhtw8hI/FlOQ61xm6XxY8VCcaKYL2Zbli+XrTWW//ad9XW9rYjrGmla19b6EfKjTx2N21AL+3hby7qu3Gf0wzcUUz/+0aeO/uG5Z27vNHvuhpb7K7fz3rvq2/mZcEm5rbViQ9oncTtHmrZza4fnZLRlO2uN29U/bt/O5/rcztErm7mm2p/zyWKk8fF3G/tprPnHemk/bQ2X/dfdRVFcvLLZ7cssW1cxUmxquWTkyvMzWR6R9fuoH0ovLsZWdZze2cdxWp9z21qP0/bXRHz+7wy3G1thG5qfph9+emLZ877a4zSqP+qVXivtx+CgXyvDcgzG4+K7jQf9eMdjcFt4/J+6Z+VjsOOx0+EYTI+76Ri8q9cxODIx2tjm9CTUGre5cgzuaFl+tLGmWmM+fU/3Y3Dm3MkzM4uf+ORrF04eOT5/fP7Urh07Znft2bNv376ZYwsn5mfL/1/l3h5+m4qR9Bq4K+y7+Bp4dduyzYfq0lcH9zqc7PI63Ny27KBfh2PtD662Ni/I5cd0+dp4uL7TJy+NFCu8xhrPz/Zrfx2mx930Ohxreh12/JrS4XU41sfrsL7Mme39fc8y1vRfp224Xl8LNjcdg+3fj7Qfg4P+fmRYjsHJcFz88/aVvxZsDdv7+PRqvx8ZXXYMpocb3nvql6Tv9yf3NUan4/KO+hU3TRTnF+fP3v/okXPnzu4owlgTL2k6VtqP101Nj6lYdryOrPp4Pbjwisfv6HD55rCvJl9b/9/kis9VfZnd93d/rhpf3Trvz5ZLdxZhDNha789OX83r+zNlyS77s77MZ2au/XvxlEub3n/HV3j/jbn/+XJ96a4eGx0fK1+/o2nvjLe8H7c+VWON965aY93PzfT3fjwe/lvr9+Nbu7wfb2lbdtDvx+PtDy6+H9d6/bTj2rQ/n5PhODkx2/39uL7Mlp2rPSbHur4f3x1mLez/14SkkHJR07Gz0nGb1jU2Nh4e11hcQ+txuqtl+fGQzerrenLn1R2n995d3tdoenRXrNVxOtW27KCP0/R+tdJxWuv107er0/58Tobj4tZd3Y/T+jJP7b72986N8cOm986JXsfg+OhEfZvH00FYvt8vbYzH4P3F0eJ0caKYa1w70Tieao11TT/Q3zE4Ef5b6/fKLV2OwXvblh30MZi+jq107NXGlj/4AWh/PifDcfHEA92Pwfoyb9o72O9d7w2XpGWavndt//naSj/zuqNtN13Pn3nVt/Ov9nb/2Wx9mRP7Vpszu++n+8IlN3XYT+2v35VeU3PF2uynLWE7n9m38n6qb099mS/t7/N4OlgUxYWPPdj4eW/4/cqfnv/eN1t+79LpdzoXPvbgszcf++vVbD8A69/z5dhUfq1r+s1UP7//BwAAANaFmPtHwkzkfwAAAKiMmPvjvwpP5H8AAACojJj7x8JMMsn/W970zMLzF4rUzF8K4vVpNzxULhc7rrPh86mlK+qXP/j1+Z/8+YX+1j1SFMVPH/r1jstveShuV2kqbOflN7devvyGF/pa/+FHrizX3F//Srj/+Hj6PQw6VXBni6L49i1faKxn6oOXGvOphw435nsvPv5YfZnn9pefx9s//ZJy+d8L5d+Dx4603P7psB9+EObs2zvvj3i7b1x6zda977+yvni72l0vbDzsJz5U3m/8OzlffKxcPu7nlbb/Lz7/5Dfqyz/6qs7bf2Gk8/Y/Ge7362H+98vL5Zufg/rn8XafDdsf1xdvd//XvtNx+y9/rlz+zFvK5Q6HGdd/b/h821ueWWjeX4/WjrQ8ruKt5XJx/bPf+63G9fH+4v23b//koUst+6P9+HjqH8v7mWlbPl4e1xP9Wdv66/fTfHzG9T/5m4db9nOv9V9+79Mvr99v+/rva1tutO327X+x6fc/+4WO64vbc/BPzrQ8noPvCa/jsP4nPhSOx3D9/1z+Qst6o8PvaX3/ict/ZfOFlscTve3H5fovv/54Y/771E9+96YX3PzCi6+s77ui+O77yvvrtf7jf3C6Zfu/etv2xvMRr48d/fb1rySu/+zHp0+dXjy/MNe0Vxt/O+cd5fZsmNy4qb69t4T31vbPD50+9+H5s1OzU7NFMVXdP6F31b4W5rPluLja229/JDyfd/zOtzfd8w+fj5f/08Pl5ZfeXn7denVY7ovh8s3l87dUu8b1P3HnbY3Xd+2p8vOWHvsAbN32H/v6WjA8/vbvC+LxfualH27sh/p1ja8b8XV9jdv//bnyfr4V9utS+MvMd912ZX3Ny8e/jXDpfeXr/Zr3X3ibi8/rH4Xn+50/KO8/bld8vN8P38d8Z0vr+108Pr51YaT9/ht/xeNieD8pLpbXx6Xi/r703G0dNy/+HZLi4u2Nz3873c/tq3qYK1n8xOLMiYVT5x+dOTe/eG5m8ROfPHTy9PlT5w41/pbnoY/0uv2V96dNjfenufk9u4vZjUVRnC5m1+AN6/psf/2j/rb/zCNH5/bO3jM3f+zI+WPnHjkzf/b40cXFo/Nzi/ccOXZs/uO9br8wd2DHzv279u6cPr4wd2Df/v279k8vnDpd34xyo3rYM/vR6VNnDzVusnhg9/4dDzywe3b65Om5+QN7Z2enz/e6feNr03T91r82fXb+xJFzCyfnpxcXPjl/YMf+PXt29vxrgCfPHFucmjl7/tTM+cX5szPlY5k617i4/rWv1+2ppsV/Kb+fbVcr/xBf8a779qS/z1r39U+veFflIm1/QPSZ8Ldo/u5FZ/b183nM/eNhJpnkfwAAAMhBzP0TYSbyPwAAAFRGzP0bwkzkfwAAAKiMmPsnw0wyyf/6//r//fX/y+v1//Pq/5/5WNkrXe/9/9if1//Pww3u/1/z+vX/9f+r1//vvz+/3rdf/1//n+WGrf8fc//Gosgy/wMAAEAOYu7fFGYi/wMAAEBlxNx/U5iJ/A8AAACVEXP/C8JMMsn/OfT/391hsVX2/3f2KlxVv/+/bs7/v7HQ/9f/b+7/xydH/z8bq+7fv//hlk/1/wP9f/3/ddb//7ch2H79f/1/2o2veM2N6v/H3H9zmEkm+R8AAAByEHP/C8NM5H8AAACojJj7bwkzkf8BAACgMmLu3xxmkkn+z6H/34nz/1e2/+/8//r/gz3/f9PG6P+vD87/313n/v/ETcsu0v9fZf9/Uv9/PZ7/f3yw2z/c/f+em6//z3UxbOf/j7n/RWEmmeR/AAAAyEHM/S8OM5H/AQAAoDJi7n9JmIn8DwAAAJURc/+tYSaZ5H/9f/1//X/9f/3/zuvvff7/8iP9/+Gi/9+d8//34Pz/efX/B7z9w93/H/T5/8ff3H57/X86Gbb+f8z9Lw0zyST/AwAAQA5i7r8tzET+BwAAgMqIuf9lYSbyPwAAAFRGzP1bwkwyyf/6//r/+v/6//r/ndffu/9f0v8fLvr/3en/96D/r/+v/99f/7/DN7/6/3QybP3/mPtvDzPJJP8DAABADmLuvyPMRP4HAACAyoi5//+Fmcj/AAAAUBkx928NM8kk/+v/6//r/+fV/79vQv9f/7/a9P+70//vQf9f/1//v8/z/y+3mv7/hl53RmUMW/8/5v6Xh5lkkv8BAAAgBzH3vyLMRP4HAACAyoi5/5VhJvI/AAAAVEbM/VNhJpnkf/3/avX///gvn3hlof+v/99j/RXt/8fDQP8/c/r/3en/96D/r/+v/78m/X/yMWz9/5j77wwzyST/AwAAQA5i7r8rzET+BwAAgMqIuf/uMBP5HwAAACoj5v5tYSaZ5H/9/2r1/yP9f/3/buuvaP8/0f/Pm/5/B00vUv3/HvT/9f+z7//H7371/xmMYev/x9z/qjCTTPI/AAAA5CDm/nvCTOR/AAAAqIyY+18dZiL/AwAAQGXE3H9vmEkm+V//X/9f/1//X/+/8/r1/9cn/f/uVtv/n9D/1//Pqv8fvyTk3P93/n8Ga9j6/zH3vybMpP/83/6tKgAAADBkYu7fHmaSye//AQAAIAfx32+W/+5V/gcAAIAqirl/Oswkk/yv/6//n1P/v6b/r/+v/195+v/dOf9/D/r/mff/nf9f/59BG7b+f8z9rw0zyST/AwAAQA5i7r8/zET+BwAAgMqIuX8mzET+BwAAgMqIuX82zCST/K//r/+fU//f+f/1//X/q0//vzv9/x70//X/q9b/Lwr9f26oYev/x9y/I8wkk/wPAAAAOYi5f2eYifwPAAAAlRFz/64wE/kfAAAAKiPm/t1hJpnkf/1//X/9f/1//f/O69f/X5+69e+/3Mft9f8D/X/9f/3/avT/nf+fG2zY+v8x9z8QZpJJ/gcAAIAcxNy/J8xE/gcAAIDKiLl/b5hJyP+d/l03AAAAsL7E3L8vzCST3//r/1ek//8bf9uybv1//f9u6x9M/3+j/n+Y+v/DpaLn/29/WVy19dn/fz49fv1//f9h3n79f/1/lhu2/n/M/fvDTDLJ/wAAAJCDmPtfF2Yi/wMAAEBlxNz//8NM5H8AAACojJj7fybMJJP8r/9fkf5/G/1//f9u63f+f/3/Kqto/39g1mf/f4Xz/4/o/+v/D9f26//30//f0OtuqJjr3/+PH/XX/4+5/0CYSSb5HwAAAHIQc//PhpnI/wAAAFAZMfe/PsxE/gcAAIDKiLn/YJhJJvlf/1//X/9f///69P9fX7Qbxv5//eDR/68W/f/uKtX/d/5//f8h2379f+f/Z7lhO/9/zP1vCDPJJP8DAABADmLufzDMRP4HAACAyoi5/41hJvI/AAAAVEbM/W8KM8kk/+v/6//r/+v/O/9/5/Xr/69P+v/d6f/3oP+v/6//r//PQN24/v+GjtfH3P/mMJNM8j8AAADkIOb+t4SZyP8AAABQGTH3vzXMRP4HAACAyoi5/21hJpnkf/1//X/9f/1//f/O69f/X5/0/7vT/+9B/1//X/9f/5+BGrbz/8fc/3NhJpnkfwAAAMhBzP0PhZnI/wAAAFAZMfe/PcxE/gcAAIDKiLn/HWEmmeR//X/9f/1//X/9/87r1/9fn/T/u9P/70H/X/9f/1//n4Eatv5/zP3vDDPJJP8DAABADmLu//kwE/kfAAAAKiPm/neFmcj/AAAAUBkx9787zCST/K//r/8/XP3/pQvNt9P/1/8vBtX/r99I/z8L+v/d6f/30KH/v0H/X/9f/1//n6s2bP3/mPvfE2aSSf4HAACAHMTc/94wE/kfAAAAKiPm/veFmcj/AAAAUBkx9z8cZpJJ/tf/z7L/nx7y8PX/nf9f/9/5//X/r43+f3f6/z04/7/+/7rs/4+H+dHp+LVJ/59hMWz9/5j7HwkzyST/AwAAQA5i7n9/mIn8DwAAAJURc/8vhJnI/wAAAFAZMfd/IMwkk/yv/59l/3+Iz/9ftf7/WMvxkVP/f7Lp+UzHpf6//v8a0P/vTv+/B/1//f9h7v+Ho3njCrd3/n+G0bD1/2Pu/2CYSSb5HwAAAHIQc/8vhpnI/wAAAFAZMff/UpiJ/A8AAACVEXP/L4eZZJL/9f/1//X/nf/f+f87r1//f33S/+9O/78H/f98+v9jg9/+G3f+/5L+P8No2Pr/Mff/SpjJisHv2f/s42ECAAAAQyTm/g+FmWTy+38AAADIQcz9h8JM5H8AAACojJj7D4eZZJL/9f/b+//xjKr6//r/+v/6//r/69Hg+v8vu7ko9P/1//X/K9v/vw7br/+v/89yw9b/j7n/SJhJJvkfAAAAchBz/6+Gmcj/AAAAUBkx9x8NM5H/AQAAoDJi7p8LM8kk/691/7+p1zs+nP1/5/+/2v7/T/X/9f8D/f/O9P/XhvP/d6f/34P+v/6//r/+PwM1bP3/mPvnw0wyyf8AAABQYenHwTH3Hwszkf8BAACgMmLuPx5mIv8DAABAZcTc/+Ewk0zyv/P/6/87//+N6P+PtSyv/1/S/9f/HwT9/+70/3vQ/9f/1//X/2eghq3/H3P/QphJJvkfAAAAchBz/0fCTOR/AAAAqIyY+z8aZiL/AwAAQGXE3H8izCST/K//r/+fe/+/VhQXnf9f/7/T+vX/1yf9/+70/3vQ/9f/1//X/2eghq3/H3P/yTCTTPI/AMD/sXcfTXKd1x2Hr0mkWdkfwWuvvKRX5MIfwFvvXOW1LVGiciChnEUqUlmiJCrnnKmcc85UzlSgAkWpalQYnnOAQffcC2Aa0/e+7/NsjoEiNA1xRNbfqF+9ANCD3P3/H7fY/wAAANCM3P33ilvsfwAAAGhG7v57xy2d7H/9v/6/9/5/2Mr7//v/+vb7/3v+Dun/9f9HYaW/P7b+rzsoCj+w///3q677H/2//l//P0r/r//X/3O+ufX/ufuvjVs62f8AAADQg9z994lb7H8AAABoRu7++8Yt9j8AAAA0I3f/dXFLJ/tf/6//1//r//f1/7d5/1//v2ze/x+3jP7/qt3dXf3/Ovr/eX9+/b/+n1Vz6/9z998vbulk/wMAAEAPcvffP26x/wEAAKAZufsfELfY/wAAANCM3P0PjFs62f/6f/2//n8p/f+JBb//H98P+n/9/xHQ/49bRv/v/X/9/zI/v/5f/8+qi+//D/zH9kb6/9z9D4pbOtn/AAAA0IPc/Q+OW+x/AAAAaEbu/ofELfY/AAAANCN3/0Pjlk72v/5f/6//X0r/f0Tv/+v/9f8Ld8tw9p8J+v9V+v8JE/3/MOj/x1xwP7/+t7ecz38A/b/+n1UX3/8f+B+1kf4/d//D4pZrhuHEpf4mAQAAgFnJ3f/wuKWTP/8HAACAHuTuvz5usf8BAACgGbn7b4hbOtn/+n/9v/5f/6//X//19f/L5P3/cYfv///tX/7vf/vt/73/P877/5vu/898ZzTZ/8usOzK3/j93/+m4pZP9DwAAAD3I3f+IuMX+BwAAgGbk7n9k3GL/AwAAQDNy9z8qbulk/+v/W+v/r9z3687p//dqF/3/0vv//9T/6//1/xP0/+O8/z9h7x9zO/VD/b/+3/v/3v/ncObW/+fuf3Tc0sn+BwAAgB7k7n9M3GL/AwAAQDNy9z82brH/AQAAoAnHhqF2/+Pilk72v/6/tf5//6/z/n9r/b/3/wf9v/5/gv5/nP5/Qivv/1/id822+/nD2vbn1//r/1k1t/4/d//j45ZO9j8AAAD0IHf/E+IW+x8AAACakbv/iXGL/Q8AAADNyN3/pLilk/2v/9f/L6P/z6+g/9f/X/7+P+n/l0n/P07/P6GV/v8SbbufX/rn1//r/1k1t/4/d/+T45ZO9j8AAAD0IHf/U+IW+x8AAACakbv/qXGL/Q8AAADNyN1/Y9zSyf7X/+v/l9H/e/9f/+/9f/3/hdH/j9P/T9D/6//1//p/Nmpu/X/u/pvilk72PwAAAPQgd//T4hb7HwAAAJqRu//pcYv9DwAAAM3I3f+MuKWT/a//1//r//X/+v/1X1//v0z6/3H6/wn6f/2//l//z0bNqP8/51edGp4Zt3Sy/wEAAKAHufufFbfY/wAAANCM3P3PjlvsfwAAAGhG7v6b45ZO9r/+fzb9/17O11b/vzMMg/5/6LT/3znn72d9X+r/9f9HQP8/Tv8/Qf+v/9f/6//ZqBn1/3s/zt3/nLilk/0PAAAAPcjd/9y4xf4HAACAZuTuf17cYv8DAABAM3L3Pz9u6WT/6/9n0//vaav/9/7/+d8fPfX/3v9fpf8/Gvr/cfr/Cfp//b/+X//PRs2t/8/d/4K46cTxS/4tAgAAADOTu/+FcUsnf/4PAAAAPcjd/6K4xf4HAACAhbpp5Wdy9784bulk/+v/N9v/nzjn5/T/+v/zvz/0//p//f/lp/8fp/+foP/X/+v/9f9s1Nz6/9z9L4lbOtn/AAAA0IPc/bfELfY/AAAANCN3/0vjFvsfAAAAmpG7/2VxSyf7X//v/X/9v/5f/7/+6+v/l0n/P07/P0H/f2A/fyFPY+v/D93/nzz7f+r/acNF9P+7u7vXX/b+P3f/y+OWTvY/AAAA9CB3/61xi/0PAAAAzcjd/4q4xf4HAACAZuTuf2Xc0sn+1/932v/nt/qy+v8bhkH/r//X/+v/x+n/x+n/J+j/vf/v/X/9Pxs1t/f/c/e/Km7pZP8DAABAD3L3vzpusf8BAACgGbn7XxO32P8AAADQjNz9r41bOtn/+v9O+3/v/+v/9f9H3f/fPej/j8Qi+v+dg7/+3Pv/0/p//f+I7vr///qPfT/U/+v/WTW3/j93/+vilk72PwAAAPQgd//r4xb7HwAAAJqRu/8NcYv9DwAAAM3I3f/GuOlYJ/tf/6//1//r//X/67/+Eb//f2IYBv3/Biyi/x8x9/5/M+//n/+/8rP0//r/JX9+/b/+n1Vz6/9z978pbulk/wMAAEAPcve/OW6x/wEAAKAZufvfErfY/wAAANCM3P1vjVs62f/6f/2//l//33z/f3oR/b/3/zdE/z9uHv3/wfT/+v8lf379v/6fC7et/j93/9vilk72PwAAAPQgd//b4xb7HwAAAJqRu/8dcYv9DwAAAM3I3f/OuKWT/a//1/9fTP+fn1P/31b/f3J2/f+pff95nbz/r//fEP3/OP3/BP2//l//f5P+n02a2/v/ufvfFbd0sv8BAACgB7n73x23/l+39j8AAAA0I3f/e+IW+x8AAACakbv/vXFLJ/tf/6//9/6//r/59//1/13R/4/T/0/Q/+v/9f/e/2ej5tb/5+5/X9zSyf4HAACAHuTuf3/cYv8DAABAM3L3fyBusf8BAACgGbn7b4tbOtn/+n/9v/5f/6//v+fvof6/Dfr/cZe9/z925vPv6P/1/9XP/1P8r0D/r/+f+vW0aW79f+7+D8Ytnex/AAAAaM3xNT+Xu/9DcYv9DwAAAM3I3f/huMX+BwAAgEU6tubncvd/JG5Z5P5fV6GP0//r//X/+n/9//qvr/9fpq30//lNof/3/n/op///130/Wtr7/+f/++vKQf+v/2fT5tb/5+7/aNyyyP0PAAAArJO7/2Nxi/0PAAAAzcjd//G4xf4HAACAZuTu/0Tc0sn+1//r//X/+n/9//qvr/9fJu//j9P/T9D/b/X9/KV/fv2//p9Vc+v/c/d/Mm7pZP8DAABAD3L3fypusf8BAACgGbn7Px232P8AAADQjL3dn3FZh/tf/6//1//r//X/67++/n+Z9P/j9P8T9P/6f/2//p+Nmlv//5m9X3Vq+Gzc0sn+BwAAgB7k7v9c3GL/AwAAQDNy938+brH/AQAAoBm5+78Qt3Sy/xfc/9+x/jek/x+a7P93d3ev1//r//f/fs72/7cvuP+/Wf+/Yfr/cfr/Cfp//f/s+//z/y15lv6fOZpb/5+7/4txSyf7HwAAAHqQu/9LcYv9DwAAAM3I3f/luMX+BwAAgGbk7v9K3NLJ/l9w/3/Ab2iB/f8p/b/3//X/g/f/9f8bov8fp/+f0GL/f+rCf/vb7ucPa9uf3/v/+n9Wza3/z93/1bilk/0PAAAAPcjd/7W4xf4HAACAZuTu/3rcYv8DAABAM3L3fyNu6WT/6/+Prv8/899dL+//7wzrP7/+X/+v/9f/X257/f21+v+D6P8ntNj/X4Rt9/NL//z6f/0/q+bW/+fu/2bcsn/4Hb+43yUAAACwNTeu/lTu/m/FLZ38+T8AAAD0IHf/t+MW+x8AAACakbv/O3FLJ/tf/z+D9/8b7P+9/7/++0P/P+v+/wr9fxu8/z9O/z9B/6//1/9vqP/P72b9f+/m1v/n7v9u3NLJ/gcAAIAe5O7/Xtxyzc62PhIAAACwYbn7vx+3+PN/AAAAaEbu/tvjlnP2/7q2uxX6f/2//l//r/9f//X1/8uk/x93of3/yeFw/X/S/+v/9f+99v/e/+ceR9z/3zDV/+fu/0Hc4s//AQAAYHGOH/Dzuft/GLfY/wAAANCM3P0/ilvsfwAAAGhG7v4fxy13XrGtj3Sk9P/6f/3/RP9/V3yD6//1//r/RdD/j/P+/wT9/yb6+av1/230/8Og/+fwjrj/n/xx7v6fxC3+/B8AAACakbv/p3GL/Q8AAADNyN3/s7jF/gcAAIBm5O7/edzSyf7X/+v/D9n/76WZTff/3v/X/wf9/zLo/8dtv/+/dfTL6v+b6P+9/99I/7+x9/9P7wyD/r9bc+v/c/f/Im7pZP8DAABAD3L3/zJusf8BAACgGbn7fxW32P8AAADQjNz9v45bOtn/W+v/479q/f/i+//23/8f7f93B/2//l//Py/6/3Hb7//H6f/1/0v+/Pp/7/+zam79f+7+38Qtnex/AAAA6EHu/jviFvsfAAAAmpG7/7dxi/0PAAAAzcjd/7u4pZP97/1//b/+3/v/+v/1X1//v0z6/3H6//Xqb5T+X/+v/9f/s1Fz6/9z9/8+bulk/wMAAEAPcvf/IW6x/wEAAKAZufvvjFvsfwAAAGhG7v4/xi1N7P9jk3+F/n+R/X/l0fp//b/+X//Pfvr/cdvs///7n6e/rPf/t97/50fQ/+v/9f9sxNz6/9z9f4pbmtj/AAAAwBm5+/8ct9j/AAAA0Izc/X+JW+x/AAAAaEbu/rvilk72/0T/f7L+Qv3/KO//7//8+v/13x/6f/2//v/y0/+P8/7/BP2/9//1//p/Nmpu/X/u/r/GLZ3sfwAAAOhB7v674xb7HwAAAJqRu/9vcYv9DwAAAM3I3f/3uKWT/e/9/yX1/1fr//X/+n/9v/5/gv5/nP5/gv5f/6//1/+zUXPr/3P3/yMAAP//ASdR2g==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x40000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0x40045731, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x0, 0xb8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000040)=0x80000000, 0x4) read$FUSE(r4, &(0x7f0000001640)={0x2020}, 0x2020) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}], 0x1, 0x0, 0x0, 0x3) 2.235606945s ago: executing program 4 (id=111): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0000) close_range(r0, 0xffffffffffffffff, 0x0) 2.133616347s ago: executing program 1 (id=112): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xcb, 0xd, 0x8, 0x424, 0xcf19, 0xb78b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0x1e, 0xb9, 0x9f}}]}}]}}, 0x0) 1.94878554s ago: executing program 4 (id=113): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 1.733835693s ago: executing program 4 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x2, @pix_mp={0x7, 0xca, 0x584e4f53, 0x3, 0xb, [{0x5, 0x7fff}, {0x8, 0x4}, {0x72}, {0xa, 0x9}, {0x100, 0x3}, {0x80000001, 0x72f8}, {0x1, 0xf}, {0x3, 0xa109}], 0x0, 0x63, 0x0, 0x2, 0x5}}) r2 = gettid() timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffff40, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_get$pid(0x2, r2) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x1100, 0x3c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d08, &(0x7f0000000040)=0x45) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x20000000, @private2}}, 0x0, 0x0, 0x24, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c4a2b9acf80c07fb1a854dad740100000000000000c29600"}, 0xd8) 1.208629591s ago: executing program 0 (id=115): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) alarm(0x8000000000000001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657680696d300000080003000200000008000b000900000006001100ffff0000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) bind$inet(r5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1}) 1.148669262s ago: executing program 2 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xc5, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff884700000000000000000000000000000000401a00a7006500000e219078e0000002e0000001860a346715960ce5e061445433c1e00000017fffffff0a010100000000080000000000000007ac1414aa000089880a016e9ab6960008e000000100000003ac1414bb0000008a0000000000000006ac14140a7eaa00010001ac1414bb00000005890bed0a010102e00000020000004e204e2204519078c84753b9081af4edab9464977e1a668761d696a7c69227744ef6ab7c04", @ANYRES16=r2], &(0x7f0000000180)={0x1, 0x1, [0x929, 0x19e, 0x221, 0x66f]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf2503000000180001801400020073797a5f74756e00fbffffff0000000005000300000000000500020007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) 0s ago: executing program 0 (id=117): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 72.403833][ T4240] cgroup: Unknown subsys name 'net' [ 72.534785][ T4240] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.052883][ T4240] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.585285][ T4265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.586337][ T4266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.593766][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.608728][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.608738][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.623715][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.624422][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.631993][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.639947][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.646906][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.661484][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.668868][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.676543][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.685325][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.690152][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.693532][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.699660][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.708094][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.716599][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.720713][ T4267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.728516][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.736068][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.741919][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.749082][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.762696][ T4261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.764830][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.773117][ T4261] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.786372][ T4261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.818436][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.826100][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.065533][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 76.284241][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.291740][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.300580][ T4252] device bridge_slave_0 entered promiscuous mode [ 76.351767][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.359146][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.367721][ T4252] device bridge_slave_1 entered promiscuous mode [ 76.419948][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 76.472013][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.506966][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 76.522187][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 76.541932][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.587897][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 76.612731][ T4252] team0: Port device team_slave_0 added [ 76.624783][ T4252] team0: Port device team_slave_1 added [ 76.714809][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.721921][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.747909][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.763767][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.770995][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.797315][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.819732][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.826878][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.835130][ T4253] device bridge_slave_0 entered promiscuous mode [ 76.859704][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.866914][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.875171][ T4251] device bridge_slave_0 entered promiscuous mode [ 76.899736][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.906891][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.914963][ T4253] device bridge_slave_1 entered promiscuous mode [ 76.944045][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.951492][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.959763][ T4251] device bridge_slave_1 entered promiscuous mode [ 76.975331][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.982642][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.991199][ T4250] device bridge_slave_0 entered promiscuous mode [ 77.009739][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.034957][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.043546][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.052159][ T4250] device bridge_slave_1 entered promiscuous mode [ 77.073593][ T4252] device hsr_slave_0 entered promiscuous mode [ 77.080584][ T4252] device hsr_slave_1 entered promiscuous mode [ 77.089373][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.108659][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.146902][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.155578][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.163743][ T4260] device bridge_slave_0 entered promiscuous mode [ 77.173576][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.202132][ T4253] team0: Port device team_slave_0 added [ 77.208679][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.215844][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.224414][ T4260] device bridge_slave_1 entered promiscuous mode [ 77.250367][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.264303][ T4253] team0: Port device team_slave_1 added [ 77.303082][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.321623][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.328946][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.355084][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.368628][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.381211][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.393118][ T4251] team0: Port device team_slave_0 added [ 77.420234][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.427317][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.453584][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.474965][ T4251] team0: Port device team_slave_1 added [ 77.496356][ T4250] team0: Port device team_slave_0 added [ 77.521547][ T4260] team0: Port device team_slave_0 added [ 77.535983][ T4250] team0: Port device team_slave_1 added [ 77.567357][ T4260] team0: Port device team_slave_1 added [ 77.573641][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.580874][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.607919][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.619674][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.626657][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.653545][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.693235][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.700419][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.726676][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.738664][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.745646][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.771913][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.791802][ T4253] device hsr_slave_0 entered promiscuous mode [ 77.798932][ T4253] device hsr_slave_1 entered promiscuous mode [ 77.805505][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.813447][ T4253] Cannot create hsr debugfs directory [ 77.858448][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 77.859613][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.864822][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 77.872155][ T4258] Bluetooth: hci4: command 0x0409 tx timeout [ 77.878031][ T4261] Bluetooth: hci1: command 0x0409 tx timeout [ 77.884195][ T4258] Bluetooth: hci2: command 0x0409 tx timeout [ 77.892194][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.922502][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.947714][ T4251] device hsr_slave_0 entered promiscuous mode [ 77.954499][ T4251] device hsr_slave_1 entered promiscuous mode [ 77.961349][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.970187][ T4251] Cannot create hsr debugfs directory [ 77.990486][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.997585][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.023658][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.079779][ T4250] device hsr_slave_0 entered promiscuous mode [ 78.088020][ T4250] device hsr_slave_1 entered promiscuous mode [ 78.094583][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.102488][ T4250] Cannot create hsr debugfs directory [ 78.170769][ T4260] device hsr_slave_0 entered promiscuous mode [ 78.180183][ T4260] device hsr_slave_1 entered promiscuous mode [ 78.187129][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.194850][ T4260] Cannot create hsr debugfs directory [ 78.406417][ T4252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.416727][ T4252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.431262][ T4252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.462073][ T4252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.554895][ T4251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.566622][ T4251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.577986][ T4251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.597576][ T4251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.652243][ T4250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.664154][ T4250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.675473][ T4250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.692019][ T4250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.775575][ T4253] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.816235][ T4253] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.825819][ T4253] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.841043][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.864766][ T4253] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.876803][ T4260] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.892937][ T4260] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.921270][ T4260] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.931375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.941607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.965461][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.973204][ T4260] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.985792][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.014179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.023797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.033776][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.041179][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.050482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.060741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.069503][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.076582][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.084405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.094020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.121921][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.130093][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.140496][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.153580][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.182279][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.192342][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.202647][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.212261][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.222945][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.230123][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.240223][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.249096][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.257664][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.264760][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.283135][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.291684][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.341142][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.350283][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.359711][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.368613][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.377693][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.386418][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.395947][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.405089][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.414240][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.422802][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.431475][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.469174][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.477963][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.486514][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.495445][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.506872][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.515915][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.524578][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.542478][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.554545][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.571373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.579795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.612949][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.655679][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.664592][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.684543][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.695093][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.702346][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.718093][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.758074][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.773851][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.795823][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.803071][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.824968][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.834765][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.849959][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.865929][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.875207][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.898321][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.910474][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.930676][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.938177][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 79.948388][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 79.954475][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 79.958683][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.961621][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 79.967914][ T4261] Bluetooth: hci3: command 0x041b tx timeout [ 80.006014][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.018573][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.038009][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.065445][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.094745][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.118982][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.138741][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.145824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.160565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.172423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.184695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.220630][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.229986][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.240746][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.247949][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.256013][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.265467][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.274467][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.281679][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.289549][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.297080][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.304838][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.313800][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.322767][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.334174][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.349092][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.359591][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.374115][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.387855][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.396672][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.413032][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.420367][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.488593][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.496704][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.511997][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.521920][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.530215][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.538645][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.549706][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.558629][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.565833][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.574080][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.583317][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.592374][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.602806][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.611650][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.645655][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.655380][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.676790][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.686990][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.702570][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.714575][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.729553][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.743255][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.754477][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.774552][ T4260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.792189][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.818940][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.829448][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.839429][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.853837][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.916012][ T4252] device veth0_vlan entered promiscuous mode [ 80.928701][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.945350][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.954563][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.968799][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.981291][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.990267][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.018944][ T4251] device veth0_vlan entered promiscuous mode [ 81.035099][ T4252] device veth1_vlan entered promiscuous mode [ 81.068206][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.082297][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.098226][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.121128][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.136046][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.156945][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.164870][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.174385][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.183110][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.203051][ T4251] device veth1_vlan entered promiscuous mode [ 81.227081][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.310380][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.342573][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.351319][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.361740][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.374713][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.391829][ T4251] device veth0_macvtap entered promiscuous mode [ 81.414852][ T4252] device veth0_macvtap entered promiscuous mode [ 81.429417][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.440794][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.451854][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.474118][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.503470][ T4251] device veth1_macvtap entered promiscuous mode [ 81.532831][ T4252] device veth1_macvtap entered promiscuous mode [ 81.549774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.568072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.609008][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.620370][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.646774][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.659625][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.680877][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.694817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.705150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.727428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.749269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.766411][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.809341][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.829072][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.845416][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.855912][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.882137][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.900981][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.916176][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.945821][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.967805][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.977549][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.986305][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.017532][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 82.023634][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 82.033404][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.040921][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 82.040942][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 82.046957][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 82.080662][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.111382][ T4251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.123924][ T4251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.133401][ T4251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.142527][ T4251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.161496][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.188368][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.255445][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.269894][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.284830][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.306358][ T4260] device veth0_vlan entered promiscuous mode [ 82.331978][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.341420][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.421497][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.442513][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.452613][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.462145][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.478107][ T4260] device veth1_vlan entered promiscuous mode [ 82.527049][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.563518][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.574309][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.584831][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.593589][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.602882][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.611481][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.619941][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.628417][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.660151][ T4253] device veth0_vlan entered promiscuous mode [ 82.684337][ T4250] device veth0_vlan entered promiscuous mode [ 82.727069][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.736500][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.750735][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.761389][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.770438][ T4253] device veth1_vlan entered promiscuous mode [ 82.782407][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.789042][ T4250] device veth1_vlan entered promiscuous mode [ 82.797375][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.812524][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.821504][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.830052][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.838838][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.862633][ T4260] device veth0_macvtap entered promiscuous mode [ 82.874522][ T4260] device veth1_macvtap entered promiscuous mode [ 82.923424][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.932415][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.942163][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.951602][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.960348][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.971865][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.980943][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.002028][ T4253] device veth0_macvtap entered promiscuous mode [ 83.024245][ T4250] device veth0_macvtap entered promiscuous mode [ 83.040455][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.055352][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.066986][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.076653][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.085642][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.094572][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.106574][ T4253] device veth1_macvtap entered promiscuous mode [ 83.123319][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.124002][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.144156][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.145137][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.154073][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.154090][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.165756][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.195581][ T4250] device veth1_macvtap entered promiscuous mode [ 83.217125][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.226931][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.236138][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.253965][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.265655][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.279693][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.306623][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.318257][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.329155][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.344046][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.405368][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.415010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.475139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.510873][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.620164][ T4260] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.660290][ T4260] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.698034][ T4260] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.732884][ T4260] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.767809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.781710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.790795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.842284][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.883753][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.884409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.908585][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.964668][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.986481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.012243][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.053862][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.089195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.097868][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 84.104062][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 84.104728][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 84.110283][ T4261] Bluetooth: hci3: command 0x0419 tx timeout [ 84.116915][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 84.170941][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.216076][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.253644][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.337646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.347262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 84.410149][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.426474][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.442105][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.457508][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.467559][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.478138][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.492396][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.506871][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.541905][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.825718][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.872904][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.889025][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.904710][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.917433][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.930048][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.942555][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.955534][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.977015][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.021449][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.108546][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.130179][ T4250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.141321][ T4250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.157595][ T4250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.166989][ T4250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.172806][ T4354] loop3: detected capacity change from 0 to 16 [ 85.196513][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.207913][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.219831][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.230527][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.240649][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.262906][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.303553][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.318126][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.330135][ T4354] erofs: (device loop3): mounted with root inode @ nid 36. [ 85.339020][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.366028][ T4350] block device autoloading is deprecated and will be removed. [ 85.375435][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.394996][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.442047][ T4354] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 85.459645][ T4253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.477401][ T4253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.489122][ T4355] input: syz0 as /devices/virtual/input/input5 [ 85.507094][ T4354] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 85.520458][ T4253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.529901][ T4354] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 85.703787][ T4358] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 85.713666][ T4358] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 85.723092][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 85.733442][ T4358] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 85.742857][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 85.752159][ T4358] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 85.761740][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 85.771209][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 85.780898][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 85.790839][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 85.800655][ T4358] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 85.810217][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 85.820548][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 85.830444][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 85.840190][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 85.852227][ T4358] syz.3.7: attempt to access beyond end of device [ 85.852227][ T4358] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 85.866550][ T4358] syz.3.7: attempt to access beyond end of device [ 85.866550][ T4358] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 85.881139][ T4358] syz.3.7: attempt to access beyond end of device [ 85.881139][ T4358] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 85.897521][ T4358] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 85.909876][ T4358] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 85.919464][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 85.928830][ T4358] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 85.939045][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 85.948606][ T4358] erofs: (device loop3): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 85.958482][ T4358] syz.3.7: attempt to access beyond end of device [ 85.958482][ T4358] loop3: rw=524288, sector=24, nr_sectors = 8 limit=16 [ 85.972280][ T4358] syz.3.7: attempt to access beyond end of device [ 85.972280][ T4358] loop3: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 86.201737][ T4253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.219760][ T4358] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537] [ 86.380782][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.395922][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.491221][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.549673][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.574323][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.616791][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.656997][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.728955][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.823303][ T14] cfg80211: failed to load regulatory.db [ 86.954282][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.168539][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.313066][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.601050][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.706753][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.831889][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.864254][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.173034][ T4374] loop2: detected capacity change from 0 to 32768 [ 88.180263][ T4374] XFS: ikeep mount option is deprecated. [ 88.579621][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.705298][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.736898][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.837019][ T4385] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 88.864101][ T4374] XFS (loop2): Mounting V5 Filesystem [ 89.542576][ T4374] XFS (loop2): Ending clean mount [ 89.554717][ T4374] XFS (loop2): Quotacheck needed: Please wait. [ 89.749339][ T4374] XFS (loop2): Quotacheck: Done. [ 89.890117][ T4399] loop4: detected capacity change from 0 to 512 [ 89.908297][ T4399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.111380][ T4396] loop3: detected capacity change from 0 to 8 [ 90.123320][ T27] audit: type=1326 audit(1749954356.387:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ced8e929 code=0x7ffc0000 [ 90.169627][ T4401] loop1: detected capacity change from 0 to 2048 [ 90.288213][ T4401] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.299039][ T4399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 90.324944][ T27] audit: type=1326 audit(1749954356.397:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ced8e929 code=0x7ffc0000 [ 90.393629][ T4401] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.422538][ T4399] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.436747][ T27] audit: type=1326 audit(1749954356.397:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe8ced8e929 code=0x7ffc0000 [ 90.459935][ T27] audit: type=1326 audit(1749954356.397:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ced8e929 code=0x7ffc0000 [ 90.482457][ T27] audit: type=1326 audit(1749954356.397:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ced8e929 code=0x7ffc0000 [ 90.526142][ T27] audit: type=1326 audit(1749954356.397:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe8ced8e929 code=0x7ffc0000 [ 90.549710][ T27] audit: type=1326 audit(1749954356.397:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8ced8e963 code=0x7ffc0000 [ 90.590676][ T27] audit: type=1326 audit(1749954356.397:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe8ced8d3df code=0x7ffc0000 [ 90.762649][ T27] audit: type=1326 audit(1749954356.397:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe8ced8e9b7 code=0x7ffc0000 [ 90.791694][ T27] audit: type=1326 audit(1749954356.397:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8ced8d290 code=0x7ffc0000 [ 91.037384][ T4302] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 91.164949][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 91.235103][ T4260] XFS (loop2): Unmounting Filesystem [ 91.336171][ T4302] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 91.718514][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.110359][ T4302] usb 5-1: config 0 descriptor?? [ 92.639101][ T4433] loop0: detected capacity change from 0 to 8 [ 92.678995][ T4433] SQUASHFS error: Failed to read block 0x500000001e8: -5 [ 92.687018][ T4433] unable to read xattr id index table [ 93.840119][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 94.886915][ T4302] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 94.896566][ T4302] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 94.916143][ T4302] [drm:udl_init] *ERROR* Selecting channel failed [ 94.933784][ T4302] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 94.941607][ T4302] [drm] Initialized udl on minor 2 [ 94.949717][ T4302] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 94.959161][ T4302] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 94.981937][ T4418] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.054900][ T4302] usb 5-1: USB disconnect, device number 2 [ 95.396856][ T4462] ALSA: mixer_oss: invalid OSS volume 'MON' [ 95.412109][ T4462] overlayfs: failed to resolve './file1': -2 [ 96.099246][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.334913][ T4461] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 96.513889][ T26] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 96.531014][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.579425][ T4470] ======================================================= [ 96.579425][ T4470] WARNING: The mand mount option has been deprecated and [ 96.579425][ T4470] and is ignored by this kernel. Remove the mand [ 96.579425][ T4470] option from the mount to silence this warning. [ 96.579425][ T4470] ======================================================= [ 96.674189][ T26] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.683508][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.759232][ T4470] loop0: detected capacity change from 0 to 256 [ 96.760875][ T26] usb 4-1: config 0 descriptor?? [ 96.766573][ T4470] exfat: Bad value for 'umask' [ 96.772361][ T4457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.916388][ T26] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 96.943948][ T4466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.037259][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.045966][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.532466][ T4482] loop2: detected capacity change from 0 to 512 [ 98.648710][ T4490] loop1: detected capacity change from 0 to 16 [ 98.661365][ T4490] erofs: (device loop1): mounted with root inode @ nid 36. [ 98.734303][ T4490] syz.1.26: attempt to access beyond end of device [ 98.734303][ T4490] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 98.900917][ T4299] usb 4-1: USB disconnect, device number 2 [ 98.919773][ T4482] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 99.129539][ T4482] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.652736][ T4495] loop4: detected capacity change from 0 to 128 [ 100.229145][ T4498] loop3: detected capacity change from 0 to 40427 [ 100.287687][ T4502] syz.1.26 (4502): drop_caches: 2 [ 100.398806][ T4498] F2FS-fs (loop3): invalid crc value [ 100.471208][ T4498] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.555359][ T4509] 9pnet_fd: Insufficient options for proto=fd [ 101.433545][ T4498] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.521950][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 101.950941][ T4519] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.819134][ T4522] loop0: detected capacity change from 0 to 16 [ 102.939370][ T4522] erofs: (device loop0): mounted with root inode @ nid 36. [ 104.642111][ T4251] syz-executor: attempt to access beyond end of device [ 104.642111][ T4251] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.871795][ T4522] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 104.881024][ T4522] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 104.898765][ T4254] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 104.912557][ T4522] erofs: (device loop0): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 104.921691][ T4522] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 104.930759][ T4522] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 104.939740][ T4522] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 104.948724][ T4522] erofs: (device loop0): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 104.957803][ T4522] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 104.966755][ T4522] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 104.975879][ T4522] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 104.985425][ T4522] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 104.996821][ T4522] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 105.017602][ T4522] syz.0.33 (4522) used greatest stack depth: 20392 bytes left [ 105.030009][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 105.030020][ T27] audit: type=1800 audit(1749954371.297:24): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.33" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 105.624084][ T4535] binder: 4531:4535 ioctl c0306201 0 returned -14 [ 106.585165][ T4543] netlink: 'syz.2.40': attribute type 12 has an invalid length. [ 107.035351][ T4554] loop2: detected capacity change from 0 to 512 [ 107.213465][ T4559] loop0: detected capacity change from 0 to 16 [ 107.234033][ T4559] erofs: (device loop0): mounted with root inode @ nid 36. [ 107.276054][ T4554] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.303844][ T4560] binder: 4552:4560 ioctl 4018620d 0 returned -22 [ 107.653345][ T4554] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.40: bg 0: block 248: padding at end of block bitmap is not set [ 107.859533][ T4554] Quota error (device loop2): write_blk: dquota write failed [ 107.872985][ T4554] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 107.883263][ T4554] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.40: Failed to acquire dquot type 1 [ 108.000231][ T4559] syz.0.45: attempt to access beyond end of device [ 108.000231][ T4559] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 108.025611][ T4554] EXT4-fs (loop2): 1 truncate cleaned up [ 108.043126][ T4563] loop3: detected capacity change from 0 to 512 [ 108.067939][ T4554] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.264409][ T4566] sched: RT throttling activated [ 109.817340][ T4568] process 'syz.1.46' launched './file0' with NULL argv: empty string added [ 110.163844][ T4532] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.850231][ T4570] syz.0.45 (4570): drop_caches: 2 [ 111.373373][ T4578] binder: 4574:4578 ioctl c0306201 0 returned -14 [ 111.382062][ T4578] binder: 4574:4578 ioctl c0306201 0 returned -14 [ 112.315128][ T4588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49'. [ 113.341733][ T4584] loop1: detected capacity change from 0 to 4096 [ 113.774984][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 113.961937][ T4604] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 113.968905][ T4604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.989287][ T4604] vhci_hcd vhci_hcd.0: Device attached [ 114.277370][ T4338] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 114.708210][ T4605] vhci_hcd: connection reset by peer [ 114.729607][ T33] vhci_hcd: stop threads [ 114.742058][ T33] vhci_hcd: release socket [ 114.944265][ T33] vhci_hcd: disconnect device [ 116.165279][ T4620] netlink: 'syz.0.58': attribute type 13 has an invalid length. [ 116.881488][ T4613] loop3: detected capacity change from 0 to 4096 [ 117.053961][ T4613] NILFS (loop3): invalid segment: Checksum error in segment payload [ 117.144205][ T4613] NILFS (loop3): trying rollback from an earlier position [ 117.176766][ T4613] NILFS (loop3): recovery complete [ 117.269040][ T4633] binder: 4623:4633 ioctl c0306201 0 returned -14 [ 117.277599][ T4633] binder: 4623:4633 ioctl c0306201 0 returned -14 [ 117.328006][ T27] audit: type=1326 audit(1749954639.510:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.2.60" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23abb8e929 code=0x0 [ 118.796100][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 118.806216][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 119.458221][ T4338] vhci_hcd: vhci_device speed not set [ 119.650908][ T4662] loop1: detected capacity change from 0 to 16 [ 119.669753][ T4662] erofs: (device loop1): mounted with root inode @ nid 36. [ 120.447706][ T4665] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 120.456868][ T4665] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 120.519535][ T4672] ALSA: mixer_oss: invalid OSS volume 'MON' [ 120.529520][ T4672] overlayfs: failed to resolve './file1': -2 [ 121.104867][ T4254] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 121.116298][ T4665] erofs: (device loop1): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 121.126085][ T4665] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 121.135234][ T4665] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 121.143922][ T4640] loop0: detected capacity change from 0 to 1024 [ 121.144249][ T4665] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 121.334540][ T4665] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 121.343740][ T4665] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 121.352819][ T4665] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 121.361978][ T4665] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 121.371731][ T4665] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 121.383361][ T4665] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 121.420571][ T27] audit: type=1800 audit(1749954643.680:26): pid=4665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.67" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 122.358177][ T4678] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 122.364784][ T4678] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.372646][ T4678] vhci_hcd vhci_hcd.0: Device attached [ 122.380153][ T4679] vhci_hcd: connection closed [ 122.383656][ T4485] vhci_hcd: stop threads [ 122.811873][ T4485] vhci_hcd: release socket [ 122.816387][ T4485] vhci_hcd: disconnect device [ 123.287349][ T4696] binder: 4684:4696 ioctl c0306201 0 returned -14 [ 123.295844][ T4696] binder: 4684:4696 ioctl c0306201 0 returned -14 [ 123.574597][ T4699] loop4: detected capacity change from 0 to 128 [ 125.753744][ T4715] loop0: detected capacity change from 0 to 2048 [ 125.817020][ T4719] loop4: detected capacity change from 0 to 16 [ 125.843172][ T4715] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.879403][ T4719] erofs: (device loop4): mounted with root inode @ nid 36. [ 126.341581][ T4725] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 126.350744][ T4725] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 126.470350][ T4727] ALSA: mixer_oss: invalid OSS volume 'MON' [ 126.487317][ T4727] overlayfs: failed to resolve './file1': -2 [ 127.134755][ T27] audit: type=1800 audit(1749954649.420:27): pid=4725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.80" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 127.271204][ T4254] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 127.981043][ T4743] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 127.987643][ T4743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 127.995757][ T4743] vhci_hcd vhci_hcd.0: Device attached [ 128.277554][ T4338] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 128.655725][ T4744] vhci_hcd: connection reset by peer [ 128.663137][ T4345] vhci_hcd: stop threads [ 128.668983][ T4345] vhci_hcd: release socket [ 128.744387][ T4345] vhci_hcd: disconnect device [ 131.561165][ T4777] loop1: detected capacity change from 0 to 16 [ 131.586046][ T4777] erofs: (device loop1): mounted with root inode @ nid 36. [ 131.968390][ T4779] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 131.977538][ T4779] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 132.116775][ T4254] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 132.134097][ T4779] erofs: (device loop1): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 132.143687][ T4779] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 132.152900][ T4779] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 132.162023][ T4779] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 132.171196][ T4779] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 132.180320][ T4779] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 132.189593][ T4779] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 132.198755][ T4779] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 132.207864][ T4779] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 132.218835][ T4779] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 132.254354][ T27] audit: type=1800 audit(1749954654.531:28): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.95" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 132.461008][ T4779] syz.1.95 (4779) used greatest stack depth: 20384 bytes left [ 132.908287][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.915756][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.052324][ T4788] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 133.061361][ T4788] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 133.339312][ T4770] loop0: detected capacity change from 0 to 32768 [ 133.473869][ T4338] vhci_hcd: vhci_device speed not set [ 137.213524][ T4815] loop0: detected capacity change from 0 to 128 [ 137.588394][ T4532] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.571256][ T4827] loop1: detected capacity change from 0 to 16 [ 139.619488][ T4827] erofs: (device loop1): mounted with root inode @ nid 36. [ 139.811786][ T4831] loop2: detected capacity change from 0 to 128 [ 140.266976][ T4834] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 140.276066][ T4834] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 140.285785][ T4254] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 140.297416][ T4834] erofs: (device loop1): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 140.307306][ T4834] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 140.316580][ T4834] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 140.325634][ T4834] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 140.334936][ T4834] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 140.344033][ T4834] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 140.353169][ T4834] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 140.362227][ T4834] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 140.379499][ T4834] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 140.389403][ T4834] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 140.404368][ T27] audit: type=1800 audit(1749954662.694:29): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.107" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 140.747259][ T4299] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.953757][ T4299] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 140.967401][ T4299] usb 1-1: config 0 has no interface number 0 [ 141.004174][ T4299] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.050061][ T4299] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 141.077260][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.097252][ T4299] usb 1-1: Product: syz [ 141.101493][ T4299] usb 1-1: Manufacturer: syz [ 141.122016][ T4299] usb 1-1: SerialNumber: syz [ 141.165732][ T4299] usb 1-1: config 0 descriptor?? [ 141.200720][ T4299] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 141.424514][ C0] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 141.626568][ T4299] usb 1-1: USB disconnect, device number 2 [ 141.669199][ T4299] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 142.079239][ T4839] loop2: detected capacity change from 0 to 32768 [ 142.107358][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.299892][ T4848] syz.2.110: attempt to access beyond end of device [ 142.299892][ T4848] loop2: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 142.677262][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 142.685744][ T7] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 142.720837][ T106] blkno = 5002c, nblocks = 1 [ 142.725521][ T106] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 142.725521][ T106] [ 142.733000][ T7] usb 2-1: config 0 has no interface number 0 [ 142.765267][ T7] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=b7.8b [ 142.805409][ T106] ERROR: (device loop2): remounting filesystem as read-only [ 142.813144][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.885438][ T7] usb 2-1: config 0 descriptor?? [ 143.474955][ T22] usb 2-1: USB disconnect, device number 2 [ 143.888665][ T22] ================================================================== [ 143.896806][ T22] BUG: KASAN: use-after-free in hdm_disconnect+0x109/0x1c0 [ 143.904057][ T22] Read of size 8 at addr ffff888023541898 by task kworker/1:0/22 [ 143.911809][ T22] [ 143.914173][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.1.141-syzkaller #0 [ 143.922184][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.932343][ T22] Workqueue: usb_hub_wq hub_event [ 143.937444][ T22] Call Trace: [ 143.940754][ T22] [ 143.943712][ T22] dump_stack_lvl+0x168/0x22e [ 143.948443][ T22] ? __lock_acquire+0x7c50/0x7c50 [ 143.953508][ T22] ? show_regs_print_info+0x12/0x12 [ 143.958733][ T22] ? load_image+0x3b0/0x3b0 [ 143.963259][ T22] ? __virt_addr_valid+0x465/0x540 [ 143.968391][ T22] ? hdm_disconnect+0x109/0x1c0 [ 143.973265][ T22] print_report+0xa8/0x220 [ 143.977787][ T22] kasan_report+0x10b/0x140 [ 143.982319][ T22] ? hdm_disconnect+0x109/0x1c0 [ 143.987197][ T22] hdm_disconnect+0x109/0x1c0 [ 143.991893][ T22] usb_unbind_interface+0x1ee/0x860 [ 143.997117][ T22] ? kernfs_remove_by_name_ns+0x113/0x150 [ 144.002872][ T22] ? usb_driver_release_interface+0x1b0/0x1b0 [ 144.008970][ T22] device_release_driver_internal+0x522/0x850 [ 144.015063][ T22] bus_remove_device+0x2e2/0x400 [ 144.020058][ T22] device_del+0x628/0xa70 [ 144.024413][ T22] ? kill_device+0x160/0x160 [ 144.029021][ T22] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 144.035022][ T22] ? usb_disconnect+0x107/0x8a0 [ 144.039899][ T22] ? mutex_lock_nested+0x10/0x10 [ 144.044855][ T22] ? _raw_spin_lock_irq+0xab/0xe0 [ 144.049904][ T22] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 144.055328][ T22] usb_disable_device+0x3e2/0x890 [ 144.060388][ T22] usb_disconnect+0x348/0x8a0 [ 144.065110][ T22] hub_event+0x1d20/0x5210 [ 144.069571][ T22] ? verify_lock_unused+0x140/0x140 [ 144.074807][ T22] ? led_work+0x6e0/0x6e0 [ 144.079146][ T22] ? read_lock_is_recursive+0x10/0x10 [ 144.084542][ T22] ? preempt_schedule_thunk+0x16/0x18 [ 144.089943][ T22] ? process_one_work+0x7a1/0x1160 [ 144.095070][ T22] process_one_work+0x898/0x1160 [ 144.100026][ T22] ? worker_detach_from_pool+0x240/0x240 [ 144.105681][ T22] ? _raw_spin_lock_irq+0xab/0xe0 [ 144.110728][ T22] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 144.116122][ T22] ? kthread_data+0x4b/0xc0 [ 144.120647][ T22] worker_thread+0xaa2/0x1250 [ 144.125354][ T22] kthread+0x29d/0x330 [ 144.129441][ T22] ? worker_clr_flags+0x1a0/0x1a0 [ 144.134479][ T22] ? kthread_blkcg+0xd0/0xd0 [ 144.139095][ T22] ret_from_fork+0x1f/0x30 [ 144.143537][ T22] [ 144.146564][ T22] [ 144.148892][ T22] Allocated by task 7: [ 144.152960][ T22] kasan_set_track+0x4b/0x70 [ 144.157574][ T22] __kasan_kmalloc+0x8e/0xa0 [ 144.162185][ T22] hdm_probe+0x8f/0x13d0 [ 144.166444][ T22] usb_probe_interface+0x5a0/0xaf0 [ 144.171576][ T22] really_probe+0x2aa/0xc70 [ 144.176091][ T22] __driver_probe_device+0x18c/0x330 [ 144.181384][ T22] driver_probe_device+0x4f/0x420 [ 144.186415][ T22] __device_attach_driver+0x2c6/0x510 [ 144.191803][ T22] bus_for_each_drv+0x175/0x200 [ 144.196677][ T22] __device_attach+0x29b/0x460 [ 144.201459][ T22] bus_probe_device+0xbc/0x1e0 [ 144.206244][ T22] device_add+0xa00/0xfb0 [ 144.210589][ T22] usb_set_configuration+0x1991/0x1fd0 [ 144.216067][ T22] usb_generic_driver_probe+0x89/0x150 [ 144.221540][ T22] usb_probe_device+0x139/0x270 [ 144.226406][ T22] really_probe+0x2aa/0xc70 [ 144.230920][ T22] __driver_probe_device+0x18c/0x330 [ 144.236217][ T22] driver_probe_device+0x4f/0x420 [ 144.241256][ T22] __device_attach_driver+0x2c6/0x510 [ 144.246642][ T22] bus_for_each_drv+0x175/0x200 [ 144.251508][ T22] __device_attach+0x29b/0x460 [ 144.256278][ T22] bus_probe_device+0xbc/0x1e0 [ 144.261070][ T22] device_add+0xa00/0xfb0 [ 144.265416][ T22] usb_new_device+0xd4d/0x1620 [ 144.270203][ T22] hub_event+0x2b02/0x5210 [ 144.274627][ T22] process_one_work+0x898/0x1160 [ 144.279599][ T22] worker_thread+0xaa2/0x1250 [ 144.284289][ T22] kthread+0x29d/0x330 [ 144.288388][ T22] ret_from_fork+0x1f/0x30 [ 144.292825][ T22] [ 144.295156][ T22] Freed by task 22: [ 144.298970][ T22] kasan_set_track+0x4b/0x70 [ 144.303580][ T22] kasan_save_free_info+0x2d/0x50 [ 144.308621][ T22] ____kasan_slab_free+0x126/0x1e0 [ 144.313755][ T22] slab_free_freelist_hook+0x131/0x1a0 [ 144.319233][ T22] __kmem_cache_free+0xb6/0x1f0 [ 144.324101][ T22] device_release+0x92/0x1c0 [ 144.328736][ T22] kobject_put+0x21d/0x460 [ 144.333177][ T22] hdm_disconnect+0xef/0x1c0 [ 144.337777][ T22] usb_unbind_interface+0x1ee/0x860 [ 144.342993][ T22] device_release_driver_internal+0x522/0x850 [ 144.349071][ T22] bus_remove_device+0x2e2/0x400 [ 144.354030][ T22] device_del+0x628/0xa70 [ 144.358374][ T22] usb_disable_device+0x3e2/0x890 [ 144.363416][ T22] usb_disconnect+0x348/0x8a0 [ 144.368115][ T22] hub_event+0x1d20/0x5210 [ 144.372538][ T22] process_one_work+0x898/0x1160 [ 144.377491][ T22] worker_thread+0xaa2/0x1250 [ 144.382182][ T22] kthread+0x29d/0x330 [ 144.386267][ T22] ret_from_fork+0x1f/0x30 [ 144.390703][ T22] [ 144.393033][ T22] Last potentially related work creation: [ 144.398751][ T22] kasan_save_stack+0x3a/0x60 [ 144.403456][ T22] __kasan_record_aux_stack+0xb2/0xc0 [ 144.408841][ T22] call_rcu+0x14b/0x970 [ 144.413018][ T22] generic_shutdown_super+0x130/0x340 [ 144.418411][ T22] kill_block_super+0x7c/0xe0 [ 144.423107][ T22] deactivate_locked_super+0x93/0xf0 [ 144.428408][ T22] cleanup_mnt+0x463/0x4f0 [ 144.432862][ T22] task_work_run+0x1ca/0x250 [ 144.437470][ T22] exit_to_user_mode_loop+0xe6/0x110 [ 144.442771][ T22] exit_to_user_mode_prepare+0xb1/0x140 [ 144.448354][ T22] syscall_exit_to_user_mode+0x16/0x40 [ 144.453842][ T22] do_syscall_64+0x58/0xa0 [ 144.458541][ T22] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.464485][ T22] [ 144.466813][ T22] The buggy address belongs to the object at ffff888023540000 [ 144.466813][ T22] which belongs to the cache kmalloc-8k of size 8192 [ 144.480879][ T22] The buggy address is located 6296 bytes inside of [ 144.480879][ T22] 8192-byte region [ffff888023540000, ffff888023542000) [ 144.494340][ T22] [ 144.496676][ T22] The buggy address belongs to the physical page: [ 144.503110][ T22] page:ffffea00008d5000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23540 [ 144.513278][ T22] head:ffffea00008d5000 order:3 compound_mapcount:0 compound_pincount:0 [ 144.521626][ T22] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 144.529638][ T22] raw: 00fff00000010200 ffffea00009f8400 dead000000000003 ffff888017442280 [ 144.538234][ T22] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 144.546822][ T22] page dumped because: kasan: bad access detected [ 144.553250][ T22] page_owner tracks the page as allocated [ 144.558968][ T22] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3994, tgid 3994 (S50crond), ts 49614996001, free_ts 49560727821 [ 144.579222][ T22] post_alloc_hook+0x173/0x1a0 [ 144.584185][ T22] get_page_from_freelist+0x1a26/0x1ac0 [ 144.589745][ T22] __alloc_pages+0x1df/0x4e0 [ 144.594342][ T22] alloc_slab_page+0x5d/0x160 [ 144.599039][ T22] new_slab+0x87/0x2c0 [ 144.603119][ T22] ___slab_alloc+0xbc6/0x1220 [ 144.607810][ T22] __kmem_cache_alloc_node+0x1a0/0x260 [ 144.613284][ T22] kmalloc_trace+0x26/0xe0 [ 144.617746][ T22] tomoyo_init_log+0x1081/0x1f50 [ 144.622701][ T22] tomoyo_supervisor+0x326/0x10b0 [ 144.627743][ T22] tomoyo_env_perm+0x146/0x1e0 [ 144.632521][ T22] tomoyo_find_next_domain+0x157a/0x1a40 [ 144.638173][ T22] tomoyo_bprm_check_security+0x100/0x150 [ 144.643913][ T22] security_bprm_check+0x5e/0x90 [ 144.648873][ T22] bprm_execve+0xa77/0x18a0 [ 144.653408][ T22] do_execveat_common+0x51b/0x6c0 [ 144.658461][ T22] page last free stack trace: [ 144.663138][ T22] free_unref_page_prepare+0x8b4/0x9a0 [ 144.668623][ T22] free_unref_page+0x2e/0x3f0 [ 144.673331][ T22] __unfreeze_partials+0x1a5/0x200 [ 144.678463][ T22] put_cpu_partial+0x17c/0x250 [ 144.683246][ T22] qlist_free_all+0x76/0xe0 [ 144.687765][ T22] kasan_quarantine_reduce+0x144/0x160 [ 144.693241][ T22] __kasan_slab_alloc+0x1e/0x80 [ 144.698118][ T22] slab_post_alloc_hook+0x4b/0x480 [ 144.703247][ T22] kmem_cache_alloc+0x123/0x2f0 [ 144.708121][ T22] getname_flags+0xb7/0x500 [ 144.712639][ T22] do_sys_openat2+0xcf/0x490 [ 144.717250][ T22] __x64_sys_openat+0x135/0x160 [ 144.722139][ T22] do_syscall_64+0x4c/0xa0 [ 144.726574][ T22] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.732493][ T22] [ 144.734823][ T22] Memory state around the buggy address: [ 144.740458][ T22] ffff888023541780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.748532][ T22] ffff888023541800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.756606][ T22] >ffff888023541880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.764674][ T22] ^ [ 144.769531][ T22] ffff888023541900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.777604][ T22] ffff888023541980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.785703][ T22] ================================================================== [ 145.090507][ T4860] binder: 4856:4860 ioctl c0306201 0 returned -14 [ 145.552174][ T4863] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 145.561343][ T4863] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 145.651771][ T22] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 145.659049][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.1.141-syzkaller #0 [ 145.667063][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.677156][ T22] Workqueue: usb_hub_wq hub_event [ 145.682224][ T22] Call Trace: [ 145.685526][ T22] [ 145.688485][ T22] dump_stack_lvl+0x168/0x22e [ 145.693213][ T22] ? memcpy+0x3c/0x60 [ 145.697235][ T22] ? show_regs_print_info+0x12/0x12 [ 145.702477][ T22] ? load_image+0x3b0/0x3b0 [ 145.707036][ T22] panic+0x2c9/0x710 [ 145.710975][ T22] ? bpf_jit_dump+0xd0/0xd0 [ 145.715512][ T22] ? check_panic_on_warn+0x6c/0xa0 [ 145.720666][ T22] check_panic_on_warn+0x80/0xa0 [ 145.725641][ T22] ? hdm_disconnect+0x109/0x1c0 [ 145.730534][ T22] end_report+0x66/0x110 [ 145.734824][ T22] kasan_report+0x118/0x140 [ 145.739387][ T22] ? hdm_disconnect+0x109/0x1c0 [ 145.744287][ T22] hdm_disconnect+0x109/0x1c0 [ 145.749010][ T22] usb_unbind_interface+0x1ee/0x860 [ 145.754256][ T22] ? kernfs_remove_by_name_ns+0x113/0x150 [ 145.760020][ T22] ? usb_driver_release_interface+0x1b0/0x1b0 [ 145.766193][ T22] device_release_driver_internal+0x522/0x850 [ 145.772308][ T22] bus_remove_device+0x2e2/0x400 [ 145.777295][ T22] device_del+0x628/0xa70 [ 145.781677][ T22] ? kill_device+0x160/0x160 [ 145.786298][ T22] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 145.792319][ T22] ? usb_disconnect+0x107/0x8a0 [ 145.797212][ T22] ? mutex_lock_nested+0x10/0x10 [ 145.802189][ T22] ? _raw_spin_lock_irq+0xab/0xe0 [ 145.807254][ T22] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 145.812676][ T22] usb_disable_device+0x3e2/0x890 [ 145.817750][ T22] usb_disconnect+0x348/0x8a0 [ 145.822484][ T22] hub_event+0x1d20/0x5210 [ 145.826941][ T22] ? verify_lock_unused+0x140/0x140 [ 145.832210][ T22] ? led_work+0x6e0/0x6e0 [ 145.836576][ T22] ? read_lock_is_recursive+0x10/0x10 [ 145.841993][ T22] ? preempt_schedule_thunk+0x16/0x18 [ 145.847418][ T22] ? process_one_work+0x7a1/0x1160 [ 145.852575][ T22] process_one_work+0x898/0x1160 [ 145.857559][ T22] ? worker_detach_from_pool+0x240/0x240 [ 145.863241][ T22] ? _raw_spin_lock_irq+0xab/0xe0 [ 145.868312][ T22] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 145.873732][ T22] ? kthread_data+0x4b/0xc0 [ 145.878289][ T22] worker_thread+0xaa2/0x1250 [ 145.883023][ T22] kthread+0x29d/0x330 [ 145.887149][ T22] ? worker_clr_flags+0x1a0/0x1a0 [ 145.892219][ T22] ? kthread_blkcg+0xd0/0xd0 [ 145.896864][ T22] ret_from_fork+0x1f/0x30 [ 145.901324][ T22] [ 145.904644][ T22] Kernel Offset: disabled [ 145.908977][ T22] Rebooting in 86400 seconds..