last executing test programs: 4m52.198053134s ago: executing program 3 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 4m52.088651946s ago: executing program 3 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace(0x4208, r0) tkill(r0, 0x12) 4m51.93286496s ago: executing program 3 (id=1046): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x11, &(0x7f0000000500)=@string={0x11, 0x3, "01701b634e445fb823855e09a95949"}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x4009, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4m51.291577255s ago: executing program 3 (id=1050): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x12140c5, &(0x7f0000000580)={[{@fat=@quiet}, {@shortname_mixed}, {@fat=@sys_immutable}, {@utf8no}, {@fat=@nfs}, {@utf8}, {@shortname_win95}, {@utf8no}, {}, {@utf8}, {@numtail}, {@numtail}, {@utf8no}]}, 0x0, 0x2c4, &(0x7f0000002880)="$eJzs3M9rE1sUwPHTpG3SlDZZlAfvweMdnhvdDG38C4K0IAaU2oi6EKZ2oiFjEmZiJCK2O7f+HcWlKwX1H+jGnXtxUwTBTRfiSJKZdpqOGlvrNM33A+3c3jNnfnBnypkLM9vXn96rll2jbDYlkVZJiGzIjkiu0/KN+ctEtz0pYRtybvrzu3+v3rh5qVAsLi6rLhVWzudVdfa/Vw8ePfv/TXP62vPZlynZyt3a/pR/v/XX1t/bX1eCrddFTF2t15vmqm3pWsWtGqpXbMt0La3UXMtpqqlOEC/b9UajrWZtbSbTcCzXVbPW1qrV1mZdm05bzTtmpaaGYehMRkZN8pczSpvLy2bhWA4GcZiK6nScgpmMDJY2/8RBAQCAkyWu+v9uxdWKq7V6p77/Qf2fkHD8J/W/yEjX/4fV6PxKR4Yi60kMl079n/Hv3/2o/wEAAAAAAAAAAAAAAAAAAAAAGAY7npf1PC8bLIOflP9KSPD3d9IPvlKAoXLE8ceQC724lxaxn7RKrVJv2YsXylIRWyyZnxD50r0eOlKe12svXSwuzmtXTl7b637+equUlFSQH8jt5nvh/IVevobz12VCMuH95yUrc9H5+Yj8VmlSzp7xUv6eLTEkK29vS11sWete13v5jxdUL1wu9uVPddcDAAAAAOA0MHTXged3SYgYhgZzfH3xXufe/IBkQ/MDXsT8QN/z9bj8Mx7nmQMAAAAAMDrcSamatm05bvvhaW8EH7P9LRsUift00oOuPC4ifs+LkzIWgzQSItIfmjjQE91IHm2UP4rsvy/mYh/uQze85O61+uF+7w4YJD3O/0oAAAAAjkNQ9I/FfSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIywQb8iFqx/mI+QBbmp2M4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBm+BQAA///9SBKE") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 4m51.136590828s ago: executing program 3 (id=1053): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000a02000/0x4000)=nil, 0x4000}, 0x0, 0x2}) 4m50.857492474s ago: executing program 3 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xfe) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0x78) prlimit64(0x0, 0x1, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) 4m50.529223662s ago: executing program 32 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xfe) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0x78) prlimit64(0x0, 0x1, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) 4m17.753707798s ago: executing program 5 (id=1388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4m17.425395075s ago: executing program 5 (id=1392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x28840) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 4m17.20691681s ago: executing program 5 (id=1395): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x220881f, &(0x7f00000000c0), 0xa, 0x52f, &(0x7f0000000380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2/file0\x00', 0x62c0, 0x54) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES16=r0], 0x21, 0x1ca, &(0x7f0000000780)="$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") mkdir(&(0x7f0000000040)='./file2/file0\x00', 0x0) 4m15.94650839s ago: executing program 5 (id=1409): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@fat=@debug}, {@utf8}, {@fat=@nfs}, {@utf8no}, {@uni_xlate}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@fat=@flush}, {@numtail}, {@uni_xlateno}]}, 0x0, 0x2cd, &(0x7f0000002a80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x93085, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 4m15.619253018s ago: executing program 5 (id=1412): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x800) accept4$vsock_stream(r0, 0x0, 0x0, 0x800) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 4m15.031832251s ago: executing program 5 (id=1416): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000240)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0xcc) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='^', 0xb2b1, 0x8000c61) r2 = open(&(0x7f0000000300)='./file1\x00', 0x18e97e, 0x13e) sendfile(r2, r2, 0x0, 0x10000006) 4m14.768354497s ago: executing program 33 (id=1416): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000240)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0xcc) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='^', 0xb2b1, 0x8000c61) r2 = open(&(0x7f0000000300)='./file1\x00', 0x18e97e, 0x13e) sendfile(r2, r2, 0x0, 0x10000006) 1m19.677028468s ago: executing program 6 (id=3141): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0x72}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011"], 0x74}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) 1m19.166043848s ago: executing program 6 (id=3146): close(0x3) r0 = gettid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe2, 0x0, 0x7fc000fd}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001080)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(0x3) 1m18.146166198s ago: executing program 6 (id=3153): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101001, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101004, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101005, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) close_range(r0, 0xffffffffffffffff, 0x0) 1m18.028600991s ago: executing program 6 (id=3155): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) readv(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb1098, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) 1m17.860396334s ago: executing program 6 (id=3157): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 1m16.397059272s ago: executing program 6 (id=3170): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x700, 0x700, 0x2c}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 1m15.762204945s ago: executing program 34 (id=3170): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x700, 0x700, 0x2c}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 44.268499297s ago: executing program 0 (id=3409): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 43.645344929s ago: executing program 0 (id=3413): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7da3, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 43.029593151s ago: executing program 0 (id=3419): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4606340302010000000000000002003e00030000008f020000000000004000000000000000bf00000000000000030000006001380002000e000f00040001000000220700000000000000000000800000000000000057bdffffffffffff07000000000000000800000000000000850000000000000003"], 0xb0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 42.376812464s ago: executing program 0 (id=3424): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}}, 0x24}}, 0x0) 40.828213105s ago: executing program 0 (id=3434): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$eventfd(r1, &(0x7f0000000380)=0x8, 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x80, 0x86) copy_file_range(r3, 0x0, r2, &(0x7f00000000c0)=0x8010000, 0x10001, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xf000, 0x863, 0x0) 38.829062954s ago: executing program 0 (id=3444): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 38.211987046s ago: executing program 35 (id=3444): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 5.175552778s ago: executing program 4 (id=3620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x98, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0x2, 0x2, 0x4, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x1, 0xb, 0x5, 0x0, 0x8000], 0x200000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.871938564s ago: executing program 4 (id=3624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.163874888s ago: executing program 4 (id=3625): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x800001, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 4.05421041s ago: executing program 2 (id=3627): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x21d}, [@alu={0x4, 0x1, 0x0, 0x5, 0xc, 0x32, 0x4}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.782105205s ago: executing program 2 (id=3629): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x90000009}) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x4, 0x4, 0x0, 0x800007f, 0x9, 0x7, 0x200, 0x7}}, 0x43) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffa, 0x4e2c, 0x200, 0x16, "0027207d82070071ec25f2f77cf65281ff6304"}) r3 = syz_open_pts(r0, 0x80) dup3(r3, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/227, 0x25) 3.731870977s ago: executing program 1 (id=3630): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) getsockname$packet(r0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 3.521951081s ago: executing program 7 (id=3632): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x2010800, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x5502, &(0x7f0000000980)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x1, 0x7fffffff, 0x8}) 3.457073222s ago: executing program 2 (id=3633): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.415338253s ago: executing program 1 (id=3635): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./exp\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='localhost ./exp 2147483647 0\n\x00', 0x1d) close(r1) 2.230293406s ago: executing program 4 (id=3637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "eead00000000000000f46d7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1add0a80939a8ebf07cb417308a3d40aa1c788df600"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2.229320126s ago: executing program 1 (id=3638): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) r1 = semget$private(0x0, 0x4, 0x36d) semctl$SETVAL(r1, 0x3, 0x10, 0x0) 2.229231616s ago: executing program 2 (id=3639): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041010}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x7fffffff, @mcast1}, 0x1c) 1.946714582s ago: executing program 1 (id=3641): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000106a050052000000000001090224000100009006090400fe020300000009210500060122280009058103"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0xe, 0x28, {0x28, 0x7, "82631b612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a521382aa92b2a885"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.734529836s ago: executing program 8 (id=3642): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) ppoll(&(0x7f0000000100)=[{r1, 0x408}], 0x1, 0x0, 0x0, 0x0) 1.601096988s ago: executing program 7 (id=3643): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000500), &(0x7f0000000240)=r1}, 0x20) read(r1, &(0x7f0000000080)=""/5, 0x5) 1.488289561s ago: executing program 8 (id=3644): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file1/file4/file5\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000600)='./file0\x00', r2, &(0x7f00000001c0)='./file1/file4/file5\x00', 0x2) 1.439634972s ago: executing program 7 (id=3645): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2001, r1}, 0x0) landlock_restrict_self(r0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.280545525s ago: executing program 8 (id=3646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e621ae3b5}, 0x14) 1.226409796s ago: executing program 2 (id=3648): r0 = inotify_init() r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 1.218500206s ago: executing program 7 (id=3649): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, &(0x7f0000001f80)=""/4096, 0x1000) 1.164282177s ago: executing program 1 (id=3650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "00db"}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 1.124037508s ago: executing program 4 (id=3651): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e24, 0xd11a264e830033ad, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0xfffffeec}, 0xae, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 987.987471ms ago: executing program 8 (id=3652): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x8000000000009, 0xffffffffffffffff}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x100005, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x42}, {0x803, 0x2, 0x5, 0x45, 0x44, 0x0, 0x4, 0xf8, 0xfc, 0x4, 0x6, 0x6f, 0x20c}, {0xbfffffff, 0x83, 0x38, 0x3, 0x84, 0x4, 0x3, 0x50, 0xc, 0x2, 0x6f, 0x8, 0x9}], 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 858.861023ms ago: executing program 7 (id=3653): read(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x9e, 0xd, 0x0, 0x2, 0x3, 0x9, 0x2ca, 0x38, 0x25e, 0x406, 0xffff, 0x20, 0x1, 0xfff8, 0x41e, 0x200}, [{0x6474e551, 0x2714, 0xf20c, 0x1, 0x9ce6, 0x6, 0x3, 0x8}]}, 0x58) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 753.758645ms ago: executing program 2 (id=3654): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002180)={{{@in=@private=0xa010102, @in6=@private2, 0x4e22, 0x0, 0x4e22, 0xc4b, 0xa, 0xa0}, {0x4, 0xff, 0x100000001, 0xfffffffe, 0x2, 0x3ff, 0x4, 0x100000001}, {0x1, 0xff, 0x4, 0x3a42}, 0x9, 0x6e6bb1, 0x0, 0x0, 0x3, 0x2}, {{@in=@empty, 0x4d5, 0x3c}, 0xa, @in6=@mcast1, 0x3506, 0x3, 0x2, 0x2, 0x4, 0x4, 0x1}}, 0xe8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 744.180685ms ago: executing program 4 (id=3655): io_setup(0x8, &(0x7f0000000540)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 523.15716ms ago: executing program 7 (id=3656): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x2, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x4000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 459.925341ms ago: executing program 8 (id=3657): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000340)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="277922c31d68964cc03e9e8592c222e18acc0f5ae6346cd023fcf98cd237b648447e00e281207a7038c3997e69161f989366d7738c6a807c2726adf695efe754229a48c802d694690baf032cd88751b51245ac2ae3cb87e2da3db338e806c84063ea8ee43acea049545630a1692335e4d9ad11c42dc95224386146bcbfa6e0e32934404b4254075accf64cfd5bbc23a190ca981970738abb255a1c05a7a7261f683d10f4794ae174671d216a657598331b469a73bd985469b03b8545b5f7d48a08205ae92d6abe68819fa23e161b654b2871e649b19bd2b7d79838f3d80fc506560b33c20a6cc20877bf2eefcdaab788d15ce7e9634c272973df277427cb913d08aa0b235b1a797617e798a18c4b555c5835e17114c49a57f23f0d8f0a22e3522e5a8e9e788bcdf48c08862177ce92e00a606211b9302639bb851867acdbd7920b47618e9994a6fec653c692d733d5f6fa1305bf9f2582a3ca12fb440550ee9614932fb67d04092a8171c800c6796b44bf78eaa7506cb5f09c3e63b0e80738e09c767438f60fb1a3cc3e8c57caa6c5058d5e1c64903f9b81a90bd0221bce6d209c8123dc4381412da223ec55d193a8e5b8cbe69503b6b3b6d44ce168e48d794f2c655486ae999750f123814a3ea830cc0e9c71ce5b260414a44ffbed56791bac519504f3745012cac2384507df2cd1ff1f0c693b0a0f7aab727e5b1856b2d9b7ec809a60b96a063967389f5ff96958226292eff653ad449bda3902c1683aafa81b0c689864f3bf3929abddc567acdbd0af6154184f55aa5b86b94a035c98aa3565dcb3394fed13e64800d3917e69b8fb7a9affa2ab0ed3b6d21ee31826979efc6f1cd62327357143e268988d072732786223ed15eae9d42c267afd9b377cc2b0c3bf5b6bc8cbdceeb336bccdc708a0cc4773e900a2778bd8c97a342147b1fae79fd6271e3b25a9a630ad38a9aa6d84806549ac07a8ca631b6b565cd45b9ad30cd047af2063a4ff070c04ee4b8b1a7152fd3d29825000bed0b237df40f01e8b59014fe8b4236381d10bf04d57aa7a1aac76e9af7466fe0b3724df3decae064c3a3d3000e285ec83e1c893e9c08eefe5f4fd86f457f90ed4b675ec7d5457cef36043bd7c1c611115c63a7d7819dcce86d71a0255193436aa96d2619fb2d52db332dbe3245f84125e221ab5a918ad13217b914cc61685761686c56f74fa5c10a6c1a586bd5abc2585ea9d6ac070647cf3f631508debe7c28d6482f0f8a2afea7a61d2f0c166a1b7dd6135ac9c7469c95ccd1025d0149cee049873cb9d69a89e9bab13a80183944876522c8f0c0c551ca7f4faa495c643bec973b92bf13dfa9803981394ff290cb1f4e48d3356224ec7df9284baef008c19949c4570b4d753c4fa0dc97175209102a38a0f3e8fa9e6b52319b81db379f4bee52bdcdc136825179ab72d9ac6f3f5a72cae5b11340f8056eb050523c5049938a2572eaafbce4e073e115a520da2f1905ec6daf637bbfc879b02fdb58bd8426526b916366bce92f87ad76d1ef5ca6946006ccf17687fdfa62cd23e441e2f6effbdd0a175ce00ca86cb0dfc2cad7f818caf7dbf64ce6e63b5320954957c100701c06024a02c28ab13250f029ae8f2dea7fcb60f5cb65f4f8bba2ac3270811bb4c12641b7fb0f80d14ffc2a9c45f2001b0d54c98465d1cd2619a1546134bad9268ff48710fa833a3f3191711d1c7bdfcb502acdc51b9f9642c1066bb01a9e912e0de1b5f8acf8d9e1177a252df26b7cb690747d2023d7cdff3904281b37218981ddb6d044360d65be09dc2efdf3cef9f9d6416d81485bed6a997ff00daa26fbd59c39705b7e590a95362bc4cb54329a89840af5c1cf587e8c05a3b4f83d45ea2b06110fdb93627da88e09c51e669ae3bc43632aa638d1549ada4f1c11d935cc9757e254c0c0417852be06a023f27a41bf1e086648a365cefaf7bc994f083a68d5643256a3cb9263c571576c6d0b1dd221dc7fbdd9cb908f631eb3f1158b41d28893ece18af0f8b8c03bd960de7868d231a6e2d19c4975d0c2f8f910f6fdae49618379bbc0d41ba2c7922409b036d08d217529cb3317f0caf97e94b679fbcaf808a1a859cd4f468e4df8ee3567c684ba1f04213c7fbff3857fbde87c722f4c3a6cf027b13706ce61b7a9fa4eb823607600e7007fc114fb5f303d5986785a680ad68101d41ca518056da41ab94ff03ae20b23e50cb5cd9345788e6e7773bb5d0423c35861f10f3484be3ce23adc4a46560463a704f8c631dddfea199ba045f5d6c20ef130fbeccb32de365d28c88108904f523d936801b846e7130e68dc843c0ddbe490f305f5884642dc1d51ba2937537ec1c1d1ba1f8b5add859132b52a8f44349d7de31486a4c017109595d07231d6329f50de6802eee32b9d6fcdb2b16f58ce1ea0fa2e7c462e4d73c8cbdbdef5c714696f6ff8b7ca46f5f8277d5181475099377763cdf5a2b20d5a6ece550919b567d412ae2523444f49f09510a5f8d2397b4545d9377f40d4d57be884b2643f6737b1c9ac2708d3e48b590e5b7362fc86f5f56e116a544f3a80c1ae66a2e42a335b015ed6ffbc3b6ad6740fdad3ee9168effce9ddb9ae97845cf2a38c79df3813a4a8408895d8dd33bdb254fd620dd3c833cb33fb3af63befd7ac09178f6f4fefbd136c727957ca25cc4e365ac2ef7cee2c88d29901c11c5d8d12d7c9bd1f1eb591d6da52b26e64144bf691059f001352598fd1ad651c9d23d8e74aaf99400e4b87a7c8141be5eb3f9a563cb76f163ec93e24e4219ea98b3191223d93b02d032e66d674e9ad844b3115fa0d07c41637db3b46b0133b9b1b8fc85d5494787f63692d18f5512f6e8515c0c14b844996db924954c59d9f1dec047b235163891edb13d05e16e212bd5003cdce8cdf7260bd90fab16d8a8032ab9b86bf62be8253e02e0c2fc0a1396b1f48a9258818626dec32d5035b1c16463a7953b4a977915898b07d1129699dbd341742357f25bbb6099503dc59878f544a84eda8011d10d273e4af343b051036556c1d31327161f76a2670cef78917915d37d9e707865b0dc1881201958856a50694ebfb8a4b850a234278ea48db61f6e322512e317d5fd55627c60084da63a6ea6d0df272faf59f26d05a88d8b400d728b975e78ef53867a68e2b6bb85c3356f062449f8b1a17ec2adf0307c98aef35da9e0d235bc730fb79a6acfd187a32b6e5f915598009bf07b398069afc19e7d42e9c2666572bf68b7d1e21aa232da07df107a1eae11424f867a9228158456e58db9d87969a68ae7837c20a5a2166324a89a193be2cb43fc9a4896583839e96dc2d2c9317e3dd217c234406f7a1704f5a958469f8c55f7073920405b2ea60e8ee9209932aba2199eb1d4146cd7870805348c5ddebf374700d6969ea1d45a5695f70e63dbba7d5659c2ac527cf95f735530c23abd9c1db64ec66b174fbef5f26fe3963879f77f42abd1dd7eac962deb43f2aa0d4b61ba37b23ad99e30a0bcfd0af86c219170a025a357ed3e3b70b520bcb0cf507ac4241e4b545d306fdf4ca2d4fb48d751c6948392691ccb5dd5a8be9534a2684ae38fac7445dc3367e9a8d96cfdaced050092959cd434b4fcebf180fc313c8f2631dc6323544ab3315cbc1d72baf9239ef7ea1412816de7fa77b05c9a999e197949e5e8ee6536318ca7d5cf15dda41fee8429533a332c1a25ae4b2fd1bf1ededee9c3d740d1e6c98cc85309e3b6f10a7cb5c5e6e4b8772621ca50d1e38f25fd82ffa3c92578c0802b457f8b33bfecf75309a85d8603b7599aabe8f1078a81a0bb5d40a4341cf0fc882ebac3d7fdc6fd8455153340dacd3c2ae558d0c6b057b98f6b533ba245221a43440f222feb40848e5c33c75ef084cce1e1f1c06261ba4035b987c09b46bff92db4022e358f2d6dc0f229d4fa63d57d49c865b7f33e490790f67fe426c691aa6feb8bc72dc759b44b61b88c02d6c23d3bb590e24813ce8c1534afeb8709d9dd41872bfef287c89b07158463de8b37016fb71ff18d78de431c4f9869d6c0719d649325a3ba437a714f36bdf59f88cf0602134a003e746efab8ef201acf73b396c9e64cc971bb81844450a92b8f11b4006cbea25ae8f4300fb98df7146c5e4a9f3ca620355f9d679e66288a8b4da298662242a8a333cdd828d91f4da4f7ce991092d49455b3da53b31ff92f5866695d5f76a033af6d2f44658ad94c1c6c601a296bd0f3e6b9e64a89653285f2ed775a8ff2cb4d1557bc491f44c5a3349ef58e25a03c3787b770c596fab20fe08248993cf28c28575ff8caeb0adea9789b667b253c3ebbd49a8977c2ff0f382bb604453d419cd6cfbad7d5a41605996bc6db74f2ddf8b29bdbb4355ffdb65a53437548154df7a8e8aec1d7435f2b33d0b83bbca7e1bb59f4ecd5502f0ab0d32bd2f38bcf730d51bbd85cacc455dee2313b7cbc37efabecb7fdeb6273fa4a84bcee0427b081ba6649faae4aa8b521b4cc80dac5e65c28dc1514e218cf06a3a10a96da464517ec03bbcefdb7e1e84c1178f083d3240df711bd80d7edc7ad037387d824e9bfbedd036615d2b8329de3d1702a4c33e928caa916665e39c01a50c030d4e3873cf3bba2d675dfe3cc8909fcaa6aaef885d4725680d544b39d29ed232a37554e29d1882d3f12391181f33b5744fd7344216aad50005525f54e401f11e95268a2a50a940f8184f142062d524bdb70d91f898251bf06bafb5c630049cdf85c4ba756d4cfb814fc95f56a188476f699026e76ca4f26dd78dc2f983589002e348db9056f46734c3235dce0268995f9f2649dfbbbfed57e823211f7260e6be507fdb9f7ec808e34cacc7777a8a9350cc5c8e16938adb959d1c34951be3a849357b7db349d7c19698ef325341f9e0c78ca0777abd83c90bdff486f0617a541b001c089d63758f85032efd2a5b6cd1d42fb8bbab3a50ba775229756fd83460f6181de4d9fa8cb24920b966df24e12652d8f1f83c3e214f10174dd7e49f41494494c03151ac77d16894ead6c8dbd76921af9d065e1fd66dee01966ec317b2394bdad5ad3bbc19d5cbd2f998a80288c3c7d4a6d920e76fd7ac967ce7ba839b3443852ca681154cf6617c2041aa129a47e6beeeb7148920b577085c22bef1c2865f93e323e6103f3a685d542c73976df029b94afb3f5442a1a0dd5a9f8dbef5eb54cfe37a2df9891ce8f5658d728fcc07932c07cf097f09f1b69e9002b742e03fd78820ede2e60e095681aa906a97df20a3cce135fbdf0f770063ede222fe5f2cadf6b55d7eab829f86919ab0dc4e4fad77c2cbdf87981240ff63b9463ccf03b890c46233c3b6e0c54a1236c3f0c1e3812903b47c4aac784e0397423667396f01cfb07d6649ab0e5d0c0ff2bbe6795068d85cd1f282212d93b97613c75199130fe6a3ee28f24be01cdf4b2d2988a144c93be0ae043fb856bb4c21b695aa5d1e9bd1161d1a986c919d4efa84a9b04b1355dafe64a503d84ab4f3b5b76a1438e4cceb5c03d1442d1bf4a69a996431f2b736c626d8354a90e53f3fbaacb91075887c854043755bd8954ab9fff18b0262e3b3925251dc124305797888bb2bbd872c9b8d57d68d2c467a8b318ffde6a44f9a5f9967bf184a97d86be0e4449413c327d203fca8719ce046343a33c1bbe48b97becbc44095192e98da87a9b2ba234d250dfdf7ae6b5e5f91058dac2b20c0b7525484fd5278c74e8276625646dbdfd47a2cb6a48177b6226e1ee6e2c9a588512a269e6037e813cd741a2cf096f32d60cd7b68e4657f5607b0a296d8633e12be7ae72f9f6f895352f6676ef8b09d01bd024ae159c5780ecc6aafebf59895ca9b736164c30e5958b9aba1b49cc27949019467fa9b3fb6518ba9a359ee9c7035eba2066c786261e11a9b0a064cf96c8be43bf3119bc403e16476b112395354cba94950512c29646ccbb031d126e7ac1e9d972738bf08d2e15f3976e5a8ca653e57cf035a6c0eeb064cfbe1839da2bce876d5e9e37c9b952879c240c94510c82b71b3419b5ee7d7d5ef81f71194d34f6ada76ec8eaf4e6e9e924b71dffd273539ff44c82a05b6a7ea584157941daed273a0e739eca5db356ed547e9080ce6b163bef52df9a7ea7d56c5997e72d4c4fca3e77dc82d53cda693a66cfaabc7a163417d1e454e34c3ed177848b006501e900d16770bbb91d3234034284079a5bca16ee53e3b4e95c61014771a7e372e3bffdf399d4311d22957f46706b7b1a748b8e2a96a6cc4dc9db1e77f1f53196da5ee1948eb88aa5aa154add1376a453366820dd0bd77d3bfa003bc481fb2e2d8defda1da351a667e46b1c0fe58ff3c65d097f731f36225ad641cbb3c043d3cad02eeae1314ba5f6e4d53182241a28c2d01e4af9fad8c10bba1e6361db8f20b65fe214db3fe3891ded443a06b3a4be7132fd5a24e9e094ed08b50b1941bc40a9b18e4bc569ad22ff082e2ee54e382e791f443121df080a1abce25cd474128dd4ca10a749b80f91a9229875d9d09d3a24480a9883b96499c6df8d6d53c80f4a46e71d4b0767b1c3ceca0223cb87dc65c2180df575f7b0c090e1aaa61d2ba8aa6c0719c75d911e4dfc00d8c328295f150f0d3b450f9503bb359ca4d15788133a848aa7629b014d3413a4bf3b9a821b63b7cabc8ac84301b2819e3f4b7a4389652f5d0683f101b9ec1a937aec026e80bb88b6e9989253ba9dd64c79f7b7ca00d8c0edf29998ba9fe0d5563c59854df5e2bc92d38ca40298132b1c02e7da32c57ef85898dc8eb92cf17e4cf834aaccecb3b5ecac9da87044f64cb43310f50ad0b72debf3e733975c6c857b37cbfeb1b016cd4f0573c8b69e54e3eeb893fea4677109a4eecc9e7f7e3fd3d40e69f9f880a6dee14dc7c27ed2c57f269ff66ef841b787583fb83ff2814e8eacc877910be60e1db93bbc3f53e9511f3948a8a8e0011e40b03f4804e8967b1e443797fb9cbb2978d71e54b6af71b9cca3d6441dbf108c625ed779bcec18d9f70f06df382732d0b49bbebe347f563081527636c025828065a1ca8ef239febacfb3d2438efe4b23c1f973f5d7d4b5a3497b94c25ea951f29e48b3dd326685d8c06bccc06822451b4d4c7b1c2f3e86eda9b175b34b7b7e8cbc1b73681b5d8c3ebd4167dffa50d718b5607975e8653767eb7e87bcb6a6fb1940a4c6ca41f916acdab7d143f685fe9714366b66076abab743c646ea8c42847ae6fb3ae7a5145b9438b9203bb818cd294127efe7c776418afaf237704488193706c1f52807a608f0b2c361a6aa13b7b2e985b364a11f876f5644b7e2b84d4b90c0ab050126ec76e9594e682ef6e00f7a3e85e260280cf2b03700a00b0c0d2990f3897f670dc6401adb6419af14bafa35d56cf65b332086deb8857d59a7487179b7d2e6c525e54324fb837541be9d8b459872964086a3f98f9b795aef6e37a8b72bdbc1d087f622b2a4213fbcebbdbe6000da8dc3733522ba74653d23487c5dcaa5f4af161e7c73999168ed0f3566de365778a63cab1c100ddcfd8de12383b60676bce46a76a25251fb666b892b366183d02a3d591dfb97edf854af890ef65ebe8506d00420a64a900e7f20cc378224410cba88dee93e2787b13aa0fb6d7d97c582da047da1f367bfd6f226e13d303bce23b35e9d994c9d54a4e6d457b07bcae49edd6de6fcfe8b0ceb8d0fb693686319dfc61fceb7c5405ad812e266d35e51181e2c5180e0a64cc685466999048db40771405142e5e08cc0417a5b87a85672828d1425354db56f148b81fc0e648e578e33f38f26190f36635e432c1e21bfbbcbf5d8bb9b291d1e18d3d311558b2a60218f492f7880f8afee557a665d7cfc4a20bfd75449af8b0f19ca7b45764a7a4c116564b3e39674adf5eb079fad35b8e743d822079875aad7dfc1ae401bdf6ea77700e9b2bb3e2c459ccd8f28c9337c2900cb84076fc0a3d45858c51417ab5412ac0a00230043a793f44183326b47b60fe15c7f22a43c767ce5c8181a9a4c44964d26fc50ece3d85b533e5eafdd87384a7c73ea7da097b0f8770b7629caddaf12de1b0a447451b6b6ced331789bf917e24a1519aec5e2125a7913f84d9a7fa088933f0e1418f6223146b8bcb6ae221ec5bbc8666958e9edd03e83a320059b5f095b074078c755d524c6584363b55bb01e183a39f4b5138ff890b1c67222fe303af951d839e3a71cce561874df1e63b5ba53aa0fb13d3ec0138a526e297b1876311f8db632876a3669c79f47d4edbebcf403e44b29d8c8d999a87961485e4ac0fd7fb66f638d3b6f3973591b9eaf528726d352c2ba39b160deeabd0d4c1387f1dd29db58477aa5e25e48be96e95c93081eb7a1ba17417db741255d2f9368d226ed665a02bbcec14c8458e255f93d1e024b0c090a66c78f362956b9aae8db13e9bb1ba6b1439b9c2f9df0cbbbff37c03b6d97e5ec0f651b9c47c44df4fdaf1e1e58ee049df8970309990bb3b3f3bb1817660a6e438bb50b5ee10739df9df4df5eede96e270402a48641752558fad1806544a739742774c5e0e20f5468faf61dbfc9fede5a07ab7a54e9d0a2932d458050485925a2581a8af3e3539c820de4ab18bc2c94fb51961eca805405adf6d2d18af8be34b2eb803dda4af4499c56397b154b28f7737242e7ff3cf7eca57f6a1e068bf357710a8caa5a870c476b712ad9b2a9b51c823a3a32604f3464246ac90fd2129c012fa2f705b5fc28c3030c34d7df1a831c549dadb62bac2d2dfdddc821b96ac589619b3179982c45062270d9abc6794cf5bbc6a5f3d5d2f7e6e2741b573de9869fad21033e7088f6b6dfd2aa8bd3e7789809ec530caf908948806045652dffb56e2741340d7fef6223ce4e3f00ae648c07be306f8d67b22066e9bc252c2ada60d3ecc79cb29cfd4deb4e22d78092445fb27de9782b7cafb541cc04f30eff09de188c1fe9bed4cdfcc9f02eace508e488673abb4f3cbb399c0f5330300270d38492fd543a84ef0904f725b29131dae600ffac79415562a1a337ac51b1ea9a2d8561eb2885d2e08feebd5ec87e9b58ffdccb9155b2a978b0a0812789d4df930653c5cdc079fb45eba1a38e9f823f40f29f5234b70d2d6e7c9b7098f0caf0cbe3fecf452c66874fd3268f765b28881e382134eceed7a0b30c8661a4d1c361d299cc0eb0f57706d2bf900433f5fc0d3466c4dfe727c7e69cb8478c9f3c66b3a98b8932af4a6a0a4dd4eeb8dce9326c539459b82af5028192d7d1b81d0c6d424bba6e976e85c0a5b7bd6cca4ec4d00ee7458112178763cc4f8dc908ea86e313ee2a2a4cc1e204157240fdaa3f7c221166ee0d7c112422f357e081b0bdab46c34c1352ccf3efc7ae1ec3737bac470f8fef5942ac97fff8c1c6642e5cf2f733f776821f7527213f213772f60c31a26e71b4980cdf6896a3d9bcb13282eaa348cee4b2257f24abdfa58ccb4d238f0b34ec9bbf9a4f1764de447b9af04f9960700c38ff26523eb4f4e77863c538c6d26ce03bf4da7241881465c447c0cb0fe1792e141290923f79993228c053f1d2cfab750a87b64f48ea27d8550623b46ffc04ce1fd168f481de2d7ce2c57c4a98d31346ce2da7ddd05d0195b77b02eb95a50aecd6181dbb545b6f9badd7def429f7b833bc98b0295e13799577aea34e3f691b0df86ee42e331bc6d3554543a9db9512b6fb67c2333814efb4a6fb897e0a85e150111b5d34be4532a1e2ba044ffefdabf428d91b10fd627d2e613f295c38d274396a502d2e7334b295be14507d7fca78c53bd5359c5ea04cbbd1edb3c31025b06e7a93b198ff525478a6b87a22b1978951b26c19603a74e79bdf29daa153bf0ea5c0205298a352e9cd4d809115012b924bf338ffd3cc800a57891b9a728978bc060dc155c69ac65af5f4b3051e938d7cd22ef1de21e8f12311e3c8417b7ba7ae3f7c5d4d840fc2e56dc3f7a9b253f13b45c0bf249cab8e0b9bf97d36153b63c3df2acdfcec0a36e45069dd0a7947bd2e2925f74d0aaa2bfc22a8333883c6ec588acd89a6601fd61a4b5407b3d6443b765074bd4dcc56fa01638c9cd2e2e54249bc41849a727ea31f3d8994b365673df134e46bd3872ac1c7c479b472215c6b3ff7af96708996bd0735ebcd0a772008e05b7feb6344b6d6010222881d3b0462dd67f06522f77f63b5bffcce98f33f3337175d880fc2bd2145ac58286938cdf75bd56504390c500123065e53a487e9634ffefe03ccea989b13af327cdd840d342308ce12ad26f40ca242c97f28cc15f8e9709e19a0be5c3ea016a62735efc2dc5c6184547003cdc897afdd30ebd086af9449ff17ad64e9ee066107b3464313c4fe7344e6126351a07683ffbfb5fde7a743ffd3053f3e751e9ba89729a9195ac0ec423cb58a8c83435e24e2fb250b527162621284d8ef4b47ae6f5278bc22d248099622dcb1cfaa8376e32908e76bb6f88818e9e9616acf7f38d7b88b80490a7229c74d012627e3995c749b57a89b18149ffc8f60c0cf9c0f527fe48e1c49e13b15d8ca641a96607ca956486631f8d01618d9cfb2985b0c6e175bba854da27821834833babcce08efc328675c78673579ec83ae8015366ecd2f844587afdc595d9dba4f2c313f1f4a31d2c482fa5c4f86fa5ede03af0cc641c873307c4239f1c66764034fb29f10b1b746cf2149e7874b2e0ece9db4aa78b46377d9b7d13f8f9555546a51af50b6d3bc54e298c9486ba50ff1ac43b9dfe35bf7ff9f99313f76a3ad51c029cbda04cf13905b9c483ca6d7921a331ad7727ea65441ed2376a0b200b0dec05f09e8b231b47166fc2b0f140e8ec95646785d5db61f6f615f1d22cf7ad7b3e5e6d56ba0b3d0a2b4c205c707399c4ebe9b0cd053e0bc04a8d4da6f88719e6d8536c1dfa5b75ba78797656084588c8a951730709161df35f21a49163b1ad35a5d692517fe2baba0f06eebb5e0695668b40742e78fcfb33cdcd97ed4d375709c191e09abf376031a514ffecfe53ab81da5b270e816204d535ae1bdffbe2cedeac400fb2e707c01c442c86f816d28ddc4ec13116fc1555d0f6f385917dee220931307aa04ab9bbbc1ca7d3fbaa3df935457363c48ecc982efd0bf1dd77d92aede03596aaeeb859ec07fc866463860134c6b61e72719a4e6bab7918c0a190339176fa31ea43b15563171d9f3fd50474aaff66dc3f2d7b893bb25ad3f3ed41282d2b068aac9fed43a1e2e175d05ca1279abb824244a8a3c5c67cc5edc6088f37bd90449278f14b1059e00cde02ce0ead4b0f15d260d275326ad2043ba38a88eeeae6647e7daf30845083ed986ff0fc432bd43bfd4f4963702632c70b8f6270930a36adb2e2681eb444f93847597e8727100fcd9eea6bb46f5e7a96e98df0bfa128381bf48d164bf7695ba8bda8e15d706bc9d5d5b079d87d8bb4a8f6be7a3f171107fa9e11a5e847dc46ce7a08f90cb66ce14293d19d2db1f0048795a99184199e28089765b931d9b4771cb1c6c5d77f18de2b36631f0b3f9ce3dc201570c9fc4179c1d01f8d9d0ebb6db01781455471107b4234e96599e8c2fe943198393a59bb401a6be7ac5930c7554eff5", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x100000005, {0x1, 0x3, 0x34, 0x8, 0x8, 0xffff672b, {0x2, 0x7, 0x101, 0xffff, 0xfffffffffdffffff, 0x8, 0x7, 0xce90cbb, 0xffffff4d, 0x1000, 0x0, r2, 0xee01, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 131.350468ms ago: executing program 1 (id=3658): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000000100)=""/162, 0xa2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 8 (id=3659): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@block_validity}, {@nogrpid}, {@quota}]}, 0x1, 0x526, &(0x7f00000027c0)="$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") setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x3, 0x3, 0x5, 0x6, 0x6, 0x3, 0x9, 0xfffffffd}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x4e22, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) kernel console output (not intermixed with test programs): 000 [ 303.663037][T11557] R13: 00007f1bf0026038 R14: 00007f1bf0025fa0 R15: 00007ffcfd915988 [ 303.671007][T11557] [ 303.806216][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2385'. [ 303.836217][ T5189] wlan1: Trigger new scan to find an IBSS to join [ 303.922670][ T5193] net_ratelimit: 28 callbacks suppressed [ 303.922684][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 304.092671][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 304.233211][ T5201] bond1: (slave batadv0): failed to get link speed/duplex [ 304.362693][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 304.508283][T11578] sctp: [Deprecated]: syz.2.2392 (pid 11578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.508283][T11578] Use struct sctp_sack_info instead [ 304.525277][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 304.662455][ T5171] bond1: (slave batadv0): failed to get link speed/duplex [ 304.773351][ T5201] bond1: (slave batadv0): failed to get link speed/duplex [ 304.872527][ T5193] wlan1: Trigger new scan to find an IBSS to join [ 304.879381][ T5171] wlan1: Trigger new scan to find an IBSS to join [ 304.912413][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 304.974675][T11589] netlink: 'syz.2.2397': attribute type 4 has an invalid length. [ 305.006234][T11589] netlink: 'syz.2.2397': attribute type 4 has an invalid length. [ 305.042908][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 305.139132][T11593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2400'. [ 305.168738][T11557] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 305.183635][T11595] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2399'. [ 305.212660][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 305.364142][T11602] device batadv_slave_1 entered promiscuous mode [ 305.387776][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2402'. [ 305.488312][T11602] device batadv_slave_1 left promiscuous mode [ 305.510413][T11602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.612769][ T4316] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 305.769384][T11617] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 305.785098][ T5189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.812337][ T4316] usb 7-1: Using ep0 maxpacket: 32 [ 305.832404][ T5189] wlan1: Trigger new scan to find an IBSS to join [ 305.841705][ T5191] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 305.858182][ T4316] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 305.888745][ T4316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.910879][ T4316] usb 7-1: Product: syz [ 305.935109][ T4316] usb 7-1: Manufacturer: syz [ 305.943388][ T4316] usb 7-1: SerialNumber: syz [ 305.960526][ T4316] usb 7-1: config 0 descriptor?? [ 306.385069][ T4316] airspy 7-1:0.0: Board ID: 00 [ 306.397021][ T4316] airspy 7-1:0.0: Firmware version: [ 306.878635][ T5189] wlan1: Trigger new scan to find an IBSS to join [ 307.438286][ T4316] airspy 7-1:0.0: Registered as swradio24 [ 307.466324][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 307.487745][ T4316] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 307.524998][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'. [ 307.604918][T11648] netlink: 'syz.4.2418': attribute type 15 has an invalid length. [ 307.633878][ T4316] usb 7-1: USB disconnect, device number 5 [ 307.667117][T11648] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 307.675675][T11648] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 307.683801][T11648] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 307.691864][T11648] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 307.729951][T11657] overlayfs: failed to clone upperpath [ 307.765171][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 307.784528][ T5171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.796095][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'. [ 307.817664][T11648] netlink: 'syz.4.2418': attribute type 15 has an invalid length. [ 307.829903][T11648] netdevsim netdevsim4 eth0: set [0, 2] type 1 family 0 port 60387 - 0 [ 307.838761][T11648] netdevsim netdevsim4 eth1: set [0, 2] type 1 family 0 port 60387 - 0 [ 307.847231][T11648] netdevsim netdevsim4 eth2: set [0, 2] type 1 family 0 port 60387 - 0 [ 307.855517][T11648] netdevsim netdevsim4 eth3: set [0, 2] type 1 family 0 port 60387 - 0 [ 307.864274][ T5171] wlan1: Creating new IBSS network, BSSID 66:ac:d3:fd:d2:0a [ 307.871925][ T5191] wlan1: Trigger new scan to find an IBSS to join [ 307.885868][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.896814][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2422'. [ 308.746052][ C0] Unknown status report in ack skb [ 308.932619][ T5175] net_ratelimit: 26 callbacks suppressed [ 308.932631][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 309.102653][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 309.242743][ T5171] bond1: (slave batadv0): failed to get link speed/duplex [ 309.360584][T11685] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2433'. [ 309.392789][ T5171] bond1: (slave batadv0): failed to get link speed/duplex [ 309.505389][ T5201] bond1: (slave batadv0): failed to get link speed/duplex [ 309.712722][ T5171] bond1: (slave batadv0): failed to get link speed/duplex [ 309.809341][T11727] xt_hashlimit: size too large, truncated to 1048576 [ 309.852284][ T5191] bond1: (slave batadv0): failed to get link speed/duplex [ 309.887980][T11727] xt_hashlimit: max too large, truncated to 1048576 [ 310.006975][T11735] overlayfs: failed to clone upperpath [ 310.032672][ T5184] bond1: (slave batadv0): failed to get link speed/duplex [ 310.243450][ T5184] bond1: (slave batadv0): failed to get link speed/duplex [ 310.392564][ T5191] bond1: (slave batadv0): failed to get link speed/duplex [ 310.555832][T11746] overlayfs: failed to clone upperpath [ 310.872256][ T5184] wlan1: Trigger new scan to find an IBSS to join [ 311.105179][T11767] FAULT_INJECTION: forcing a failure. [ 311.105179][T11767] name failslab, interval 1, probability 0, space 0, times 0 [ 311.206179][T11770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.294538][T11767] CPU: 0 PID: 11767 Comm: syz.0.2461 Not tainted syzkaller #0 [ 311.302032][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.312103][T11767] Call Trace: [ 311.315462][T11767] [ 311.318380][T11767] dump_stack_lvl+0x188/0x24e [ 311.323050][T11767] ? show_regs_print_info+0x12/0x12 [ 311.328239][T11767] ? load_image+0x410/0x410 [ 311.332726][T11767] ? __might_sleep+0xd0/0xd0 [ 311.337316][T11767] ? __lock_acquire+0x7ea0/0x7ea0 [ 311.342326][T11767] ? __lock_acquire+0x7ea0/0x7ea0 [ 311.347337][T11767] should_fail_ex+0x390/0x4c0 [ 311.352012][T11767] should_failslab+0x5/0x20 [ 311.356498][T11767] slab_pre_alloc_hook+0x59/0x300 [ 311.361509][T11767] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 311.367126][T11767] ? kvmalloc_node+0x6c/0x180 [ 311.371825][T11767] __kmem_cache_alloc_node+0x4f/0x270 [ 311.377182][T11767] ? __kmalloc+0xe4/0x240 [ 311.381495][T11767] ? kvmalloc_node+0x6c/0x180 [ 311.386157][T11767] __kmalloc_node+0xa2/0x240 [ 311.390731][T11767] kvmalloc_node+0x6c/0x180 [ 311.395219][T11767] v4l2_ctrl_new+0x796/0x1490 [ 311.399907][T11767] v4l2_ctrl_new_custom+0x53c/0x7a0 [ 311.405108][T11767] ? v4l2_ctrl_new_std+0x300/0x300 [ 311.410220][T11767] ? __kmem_cache_alloc_node+0x19d/0x270 [ 311.415870][T11767] ? kvmalloc_node+0x6c/0x180 [ 311.420534][T11767] ? media_request_object_init+0x88/0xe0 [ 311.426152][T11767] ? v4l2_ctrl_handler_init_class+0x204/0x2d0 [ 311.432224][T11767] vim2m_open+0x1ac/0x630 [ 311.436549][T11767] v4l2_open+0x201/0x340 [ 311.440780][T11767] chrdev_open+0x585/0x5f0 [ 311.445621][T11767] ? cd_forget+0x160/0x160 [ 311.450023][T11767] ? fsnotify_perm+0x39b/0x550 [ 311.454796][T11767] ? cd_forget+0x160/0x160 [ 311.459203][T11767] do_dentry_open+0x7dd/0x10b0 [ 311.463972][T11767] path_openat+0x2674/0x2f10 [ 311.468556][T11767] ? kasan_set_track+0x60/0x70 [ 311.473306][T11767] ? verify_lock_unused+0x140/0x140 [ 311.478488][T11767] ? do_sys_openat2+0xdd/0x4f0 [ 311.483239][T11767] ? do_filp_open+0x420/0x420 [ 311.488173][T11767] do_filp_open+0x1ee/0x420 [ 311.492665][T11767] ? vfs_tmpfile+0x470/0x470 [ 311.497250][T11767] ? _raw_spin_unlock+0x24/0x40 [ 311.502087][T11767] ? alloc_fd+0x590/0x640 [ 311.506491][T11767] do_sys_openat2+0x14b/0x4f0 [ 311.511157][T11767] ? do_sys_open+0xe0/0xe0 [ 311.515559][T11767] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 311.521525][T11767] ? lock_chain_count+0x20/0x20 [ 311.526361][T11767] __x64_sys_openat+0x135/0x160 [ 311.531204][T11767] do_syscall_64+0x4c/0xa0 [ 311.535607][T11767] ? clear_bhb_loop+0x60/0xb0 [ 311.540265][T11767] ? clear_bhb_loop+0x60/0xb0 [ 311.544924][T11767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.550805][T11767] RIP: 0033:0x7fe1fed5e9ce [ 311.555219][T11767] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.574812][T11767] RSP: 002b:00007fe1fcff5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 311.583222][T11767] RAX: ffffffffffffffda RBX: 00007fe1fcff66c0 RCX: 00007fe1fed5e9ce [ 311.591175][T11767] RDX: 0000000000000002 RSI: 00007fe1fcff5c00 RDI: ffffffffffffff9c [ 311.599126][T11767] RBP: 00007fe1fcff5c00 R08: 0000000000000000 R09: 0000000000000000 [ 311.607078][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 311.615030][T11767] R13: 00007fe1ff026038 R14: 00007fe1ff025fa0 R15: 00007ffdeac50fc8 [ 311.623000][T11767] [ 311.861540][T11782] overlayfs: failed to clone upperpath [ 312.064117][ T5191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.002712][ T5179] net_ratelimit: 28 callbacks suppressed [ 314.002725][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 314.152874][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 314.282286][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 314.370722][T11843] ip_tables: iptables: counters copy to user failed while replacing table [ 314.422669][ T5171] bond1: (slave batadv0): failed to get link speed/duplex [ 314.502347][T11845] loop0: detected capacity change from 0 to 164 [ 314.572727][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 314.732392][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 314.842716][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 315.034496][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 315.204502][ T5191] bond1: (slave batadv0): failed to get link speed/duplex [ 315.292429][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2502'. [ 315.725071][T11883] netlink: 'syz.6.2506': attribute type 8 has an invalid length. [ 315.771123][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2506'. [ 315.835339][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2506'. [ 316.015443][T11886] netlink: 'syz.0.2507': attribute type 27 has an invalid length. [ 317.125435][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.131767][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.391222][T11886] bridge0: port 3(veth0) entered disabled state [ 317.397718][T11886] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.404970][T11886] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.442482][T11886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.587304][T11886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.468647][T11886] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.514806][T11886] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.560749][T11886] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.607451][T11886] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.877856][T11886] device ipip1 left promiscuous mode [ 320.167593][T11886] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.177269][T11886] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.186182][T11886] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.195055][T11886] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.302740][ T5189] net_ratelimit: 6 callbacks suppressed [ 320.302753][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 320.474352][ T5191] bond1: (slave batadv0): failed to get link speed/duplex [ 320.582142][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 320.722129][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 320.942626][ T5191] bond1: (slave batadv0): failed to get link speed/duplex [ 320.996730][T11956] netlink: 'syz.4.2533': attribute type 1 has an invalid length. [ 321.085508][T11956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 321.141784][T11962] bond2: (slave veth7): Enslaving as an active interface with a down link [ 321.186428][T11965] device lo entered promiscuous mode [ 321.231132][T11965] device tunl0 entered promiscuous mode [ 321.275431][ T4317] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 321.296632][T11965] device gre0 entered promiscuous mode [ 321.439021][T11965] device gretap0 entered promiscuous mode [ 321.482861][ T4317] usb 7-1: Using ep0 maxpacket: 16 [ 321.499028][ T4317] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.539396][ T4317] usb 7-1: config 0 interface 0 has no altsetting 0 [ 321.567627][ T4317] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 321.598351][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.625907][ T4317] usb 7-1: config 0 descriptor?? [ 321.648902][T11965] device erspan0 entered promiscuous mode [ 321.678500][T11965] device ip_vti0 entered promiscuous mode [ 321.698996][T11965] device ip6_vti0 entered promiscuous mode [ 321.727477][T11965] device sit0 entered promiscuous mode [ 321.775466][T11965] device ip6tnl0 entered promiscuous mode [ 321.800157][T11965] device ip6gre0 entered promiscuous mode [ 321.826770][T11965] device ip6gretap0 entered promiscuous mode [ 321.851956][T11965] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.860726][T11965] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.878821][T11958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.891646][T11958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.914520][ T4317] usbhid 7-1:0.0: can't add hid device: -71 [ 321.929363][ T4317] usbhid: probe of 7-1:0.0 failed with error -71 [ 321.949512][T11965] device bridge0 entered promiscuous mode [ 321.964475][ T4317] usb 7-1: USB disconnect, device number 6 [ 322.005047][T11965] device bond0 entered promiscuous mode [ 322.010738][T11965] device bond_slave_0 entered promiscuous mode [ 322.019157][T11965] device bond_slave_1 entered promiscuous mode [ 322.045522][T11965] device team0 entered promiscuous mode [ 322.051802][T11965] device team_slave_0 entered promiscuous mode [ 322.060322][T11965] device team_slave_1 entered promiscuous mode [ 322.087962][T11965] device dummy0 entered promiscuous mode [ 322.111628][T11965] device nlmon0 entered promiscuous mode [ 322.126223][T11965] device caif0 entered promiscuous mode [ 322.148117][T11965] device batadv0 entered promiscuous mode [ 322.175856][T11965] device veth0 entered promiscuous mode [ 322.198771][T11965] device veth1 entered promiscuous mode [ 322.227268][T11965] device wg1 entered promiscuous mode [ 322.260060][T11965] device wg2 entered promiscuous mode [ 322.279183][T11965] device veth0_to_bridge entered promiscuous mode [ 322.319552][T11965] device veth1_to_bridge entered promiscuous mode [ 322.356893][T11965] device veth0_to_bond entered promiscuous mode [ 322.420447][T11965] device veth1_to_bond entered promiscuous mode [ 322.470398][T11965] device veth0_to_team entered promiscuous mode [ 322.508098][T11965] device veth1_to_team entered promiscuous mode [ 322.543379][ T4317] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 322.556973][T11965] device veth0_to_batadv entered promiscuous mode [ 322.571826][T11965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.590245][T11965] device batadv_slave_0 entered promiscuous mode [ 322.616063][T11965] device xfrm0 entered promiscuous mode [ 322.638555][T11965] device veth0_to_hsr entered promiscuous mode [ 322.675280][T11965] device veth1_to_hsr entered promiscuous mode [ 322.708207][T11965] device hsr0 entered promiscuous mode [ 322.732243][T11965] device veth1_virt_wifi entered promiscuous mode [ 322.748093][ T4317] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.765073][ T4317] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.771900][ T4317] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 322.785027][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.801441][ T4317] usb 7-1: config 0 descriptor?? [ 322.827356][T11965] device veth0_virt_wifi entered promiscuous mode [ 322.846945][T11965] device virt_wifi0 entered promiscuous mode [ 322.910705][T11965] device vlan0 entered promiscuous mode [ 322.929155][T11965] device vlan1 entered promiscuous mode [ 322.955367][T11965] device macvlan0 entered promiscuous mode [ 322.986201][T11965] device macvlan1 entered promiscuous mode [ 322.999492][T11965] device ipvlan0 entered promiscuous mode [ 323.016438][T11965] device ipvlan1 entered promiscuous mode [ 323.060829][T11965] device macvtap0 entered promiscuous mode [ 323.090590][T11965] device macsec0 entered promiscuous mode [ 323.117157][T11965] device geneve0 entered promiscuous mode [ 323.141386][T11965] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.154756][T11965] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.165494][T11965] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.177657][T11965] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.189365][T11965] device geneve1 entered promiscuous mode [ 323.220732][T11965] device netdevsim0 entered promiscuous mode [ 323.234524][ T4317] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0005/input/input7 [ 323.260826][ T4317] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 323.313463][T11965] device netdevsim1 entered promiscuous mode [ 323.378411][T11965] device netdevsim2 entered promiscuous mode [ 323.445742][T11965] device netdevsim3 entered promiscuous mode [ 323.477975][T11965] device wlan0 entered promiscuous mode [ 323.528140][T11965] device wlan1 entered promiscuous mode [ 323.675843][ T4318] usb 7-1: USB disconnect, device number 7 [ 323.738016][T11965] device bond2 entered promiscuous mode [ 323.748016][T11965] device ip6erspan0 entered promiscuous mode [ 323.768050][T11965] device vrf0 entered promiscuous mode [ 323.779055][T11965] device ip6gre1 entered promiscuous mode [ 323.797733][T11965] device gre2 entered promiscuous mode [ 323.997701][T11965] device sit1 entered promiscuous mode [ 324.094723][T11965] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.103862][T11965] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.112878][T11965] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.121893][T11965] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.134900][T11965] device  entered promiscuous mode [ 324.329252][T11965] device bond4 entered promiscuous mode [ 324.363222][T11965] device erspan1 entered promiscuous mode [ 324.384490][T11965] device sit2 entered promiscuous mode [ 324.429084][T11965] device veth2 entered promiscuous mode [ 324.449332][T11965] device veth3 entered promiscuous mode [ 324.679726][T11985] device vlan2 entered promiscuous mode [ 324.708679][T11985] device bridge0 entered promiscuous mode [ 324.747660][T11986] bridge0: port 1(vlan3) entered blocking state [ 324.766878][T11986] bridge0: port 1(vlan3) entered disabled state [ 324.791626][T11986] device vlan3 entered promiscuous mode [ 324.829814][T11986] device bridge_slave_0 entered promiscuous mode [ 324.890364][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 324.942236][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 325.052857][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 325.212230][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 325.362158][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 325.492183][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 325.632712][ T5191] bond1: (slave batadv0): failed to get link speed/duplex [ 325.763787][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 325.892614][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 326.042695][ T5191] bond1: (slave batadv0): failed to get link speed/duplex [ 326.162731][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 326.294505][ T5191] bond1: (slave batadv0): failed to get link speed/duplex [ 326.412701][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 326.542718][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 326.574082][T12070] netlink: 'syz.6.2576': attribute type 10 has an invalid length. [ 326.606775][T12070] device syz_tun entered promiscuous mode [ 326.645602][T12070] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 327.328558][T12110] bond4: (slave macvlan2): Opening slave failed [ 327.654800][T12120] netlink: 'syz.2.2595': attribute type 15 has an invalid length. [ 327.698643][T12120] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2595'. [ 327.759260][T12121] netlink: 'syz.2.2595': attribute type 11 has an invalid length. [ 327.810056][T12121] netlink: 'syz.2.2595': attribute type 15 has an invalid length. [ 327.850992][T12121] netlink: 'syz.2.2595': attribute type 16 has an invalid length. [ 327.885986][T12121] netlink: 'syz.2.2595': attribute type 21 has an invalid length. [ 327.930717][T12121] netlink: 'syz.2.2595': attribute type 25 has an invalid length. [ 327.989221][T12121] netlink: 'syz.2.2595': attribute type 27 has an invalid length. [ 328.046684][T12121] netlink: 'syz.2.2595': attribute type 28 has an invalid length. [ 328.081427][T12121] netlink: 'syz.2.2595': attribute type 29 has an invalid length. [ 328.255482][T12136] overlayfs: failed to clone upperpath [ 329.913245][ T5189] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 330.452431][ T5179] net_ratelimit: 30 callbacks suppressed [ 330.452446][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 330.613292][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 330.762731][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 330.882606][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 331.022612][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 331.152649][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 331.292118][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 331.394446][T12233] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 331.404164][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 331.512601][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 331.653562][T12240] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2644'. [ 333.645259][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2674'. [ 334.078155][T12338] netlink: 197348 bytes leftover after parsing attributes in process `syz.1.2681'. [ 334.552273][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 335.467860][T12381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2700'. [ 335.564187][ T5175] net_ratelimit: 31 callbacks suppressed [ 335.564201][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 335.642171][T12385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2699'. [ 335.883189][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 335.956080][T12405] netlink: 668 bytes leftover after parsing attributes in process `syz.6.2707'. [ 335.992361][ T5184] bond1: (slave batadv0): failed to get link speed/duplex [ 336.133268][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 336.272665][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 336.397388][T12415] kAFS: No cell specified [ 336.475656][T12416] validate_nla: 1 callbacks suppressed [ 336.475669][T12416] netlink: 'syz.0.2708': attribute type 1 has an invalid length. [ 336.596305][T12418] loop6: detected capacity change from 0 to 8 [ 336.720249][T12416] netlink: 'syz.0.2708': attribute type 2 has an invalid length. [ 336.742954][T12418] SQUASHFS error: Failed to read block 0x4de: -5 [ 336.798516][T12418] SQUASHFS error: Failed to read block 0x4de: -5 [ 336.829685][ T26] kauditd_printk_skb: 203 callbacks suppressed [ 336.829695][ T26] audit: type=1800 audit(1791445403.038:605): pid=12418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2712" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 336.887700][T12416] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2708'. [ 337.072597][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 337.232711][ T5177] bond1: (slave batadv0): failed to get link speed/duplex [ 337.372264][ T5184] bond1: (slave batadv0): failed to get link speed/duplex [ 337.447889][T12430] loop6: detected capacity change from 0 to 4096 [ 337.477116][T12434] FAULT_INJECTION: forcing a failure. [ 337.477116][T12434] name failslab, interval 1, probability 0, space 0, times 0 [ 337.505159][T12430] EXT4-fs: Ignoring removed nobh option [ 337.527160][ T5184] bond1: (slave batadv0): failed to get link speed/duplex [ 337.549767][T12430] EXT4-fs: Ignoring removed bh option [ 337.615775][T12430] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 337.668836][T12434] CPU: 0 PID: 12434 Comm: syz.0.2716 Not tainted syzkaller #0 [ 337.676338][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.686399][T12434] Call Trace: [ 337.689667][T12434] [ 337.692587][T12434] dump_stack_lvl+0x188/0x24e [ 337.697257][T12434] ? show_regs_print_info+0x12/0x12 [ 337.702439][T12434] ? load_image+0x410/0x410 [ 337.706949][T12434] ? __might_sleep+0xd0/0xd0 [ 337.711527][T12434] ? __lock_acquire+0x7ea0/0x7ea0 [ 337.716542][T12434] should_fail_ex+0x390/0x4c0 [ 337.721210][T12434] should_failslab+0x5/0x20 [ 337.725697][T12434] slab_pre_alloc_hook+0x59/0x300 [ 337.730708][T12434] ? key_user_lookup+0x1b8/0x450 [ 337.735631][T12434] kmem_cache_alloc+0x56/0x2f0 [ 337.740377][T12434] ? key_alloc+0x302/0x1030 [ 337.744865][T12434] key_alloc+0x302/0x1030 [ 337.749184][T12434] ? clear_nonspinnable+0x60/0x60 [ 337.754284][T12434] keyring_alloc+0x41/0xa0 [ 337.758689][T12434] keyctl_get_persistent+0x4a0/0x780 [ 337.763992][T12434] ? futex_wait_setup+0x270/0x270 [ 337.769003][T12434] ? proc_key_users_show+0x310/0x310 [ 337.774285][T12434] __se_sys_keyctl+0x59f/0x870 [ 337.779059][T12434] ? __x64_sys_keyctl+0xc0/0xc0 [ 337.783918][T12434] ? do_futex+0x310/0x320 [ 337.788234][T12434] ? __ia32_sys_get_robust_list+0x100/0x100 [ 337.794114][T12434] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 337.800080][T12434] ? lock_chain_count+0x20/0x20 [ 337.804922][T12434] ? lockdep_hardirqs_on+0x94/0x140 [ 337.810106][T12434] ? __x64_sys_keyctl+0x1c/0xc0 [ 337.814947][T12434] do_syscall_64+0x4c/0xa0 [ 337.819361][T12434] ? clear_bhb_loop+0x60/0xb0 [ 337.824027][T12434] ? clear_bhb_loop+0x60/0xb0 [ 337.828686][T12434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.834579][T12434] RIP: 0033:0x7fe1fed9e199 [ 337.838978][T12434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.858590][T12434] RSP: 002b:00007fe1fcff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 337.867001][T12434] RAX: ffffffffffffffda RBX: 00007fe1ff025fa0 RCX: 00007fe1fed9e199 [ 337.875060][T12434] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 337.883080][T12434] RBP: 00007fe1fee35888 R08: 0000000000000000 R09: 0000000000000000 [ 337.891133][T12434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.899110][T12434] R13: 00007fe1ff026038 R14: 00007fe1ff025fa0 R15: 00007ffdeac50fc8 [ 337.907253][T12434] [ 337.914897][ T5177] bond1: (slave batadv0): failed to get link speed/duplex [ 338.207108][ T8821] EXT4-fs (loop6): unmounting filesystem. [ 338.335840][T12444] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2730'. [ 339.217326][T12471] netlink: 'syz.4.2729': attribute type 1 has an invalid length. [ 339.318074][T12474] 8021q: adding VLAN 0 to HW filter on device bond4 [ 339.367497][T12474] bond3: (slave bond4): making interface the new active one [ 339.405757][T12474] bond3: (slave bond4): Enslaving as an active interface with an up link [ 339.426245][T12478] loop6: detected capacity change from 0 to 256 [ 339.491477][T12478] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 339.517830][T12471] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 340.152299][ T5193] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 340.186666][T12494] loop0: detected capacity change from 0 to 1024 [ 340.612032][ T5179] net_ratelimit: 20 callbacks suppressed [ 340.612047][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 340.783802][ T5191] bond1: (slave batadv0): failed to get link speed/duplex [ 340.910984][T12514] hfsplus: xattr search failed [ 340.922639][ T5177] bond1: (slave batadv0): failed to get link speed/duplex [ 341.052752][ T5177] bond1: (slave batadv0): failed to get link speed/duplex [ 341.176231][ T4271] hfsplus: node 4:3 still has 1 user(s)! [ 341.182916][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 341.312731][ T5177] bond1: (slave batadv0): failed to get link speed/duplex [ 341.443170][ T5177] bond1: (slave batadv0): failed to get link speed/duplex [ 341.582704][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 341.712846][ T5177] bond1: (slave batadv0): failed to get link speed/duplex [ 341.883243][ T5179] bond1: (slave batadv0): failed to get link speed/duplex [ 342.469934][T12565] netlink: 'syz.1.2762': attribute type 10 has an invalid length. [ 342.506824][ T5171] bond0: (slave bond_slave_0): interface is now down [ 342.545877][ T5171] bond0: (slave bond_slave_1): interface is now down [ 342.619918][ T5171] bond0: now running without any active interface! [ 345.037694][T12634] FAULT_INJECTION: forcing a failure. [ 345.037694][T12634] name failslab, interval 1, probability 0, space 0, times 0 [ 345.050637][T12634] CPU: 0 PID: 12634 Comm: syz.0.2785 Not tainted syzkaller #0 [ 345.058619][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.068671][T12634] Call Trace: [ 345.071946][T12634] [ 345.074861][T12634] dump_stack_lvl+0x188/0x24e [ 345.079526][T12634] ? show_regs_print_info+0x12/0x12 [ 345.084802][T12634] ? load_image+0x410/0x410 [ 345.089292][T12634] ? __might_sleep+0xd0/0xd0 [ 345.093956][T12634] ? __lock_acquire+0x7ea0/0x7ea0 [ 345.098971][T12634] should_fail_ex+0x390/0x4c0 [ 345.103643][T12634] should_failslab+0x5/0x20 [ 345.108132][T12634] slab_pre_alloc_hook+0x59/0x300 [ 345.113170][T12634] ? io_ring_ctx_alloc+0x279/0xc85 [ 345.118283][T12634] __kmem_cache_alloc_node+0x4f/0x270 [ 345.123647][T12634] ? io_ring_ctx_alloc+0x279/0xc85 [ 345.128742][T12634] kmalloc_trace+0x26/0xe0 [ 345.133165][T12634] io_ring_ctx_alloc+0x279/0xc85 [ 345.138086][T12634] io_uring_create+0x29f/0xd6c [ 345.142831][T12634] ? __might_fault+0xc2/0x120 [ 345.147493][T12634] ? __might_fault+0xa6/0x120 [ 345.152172][T12634] __x64_sys_io_uring_setup+0x21b/0x230 [ 345.157702][T12634] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 345.163331][T12634] ? lockdep_hardirqs_on+0x94/0x140 [ 345.168525][T12634] do_syscall_64+0x4c/0xa0 [ 345.172946][T12634] ? clear_bhb_loop+0x60/0xb0 [ 345.177610][T12634] ? clear_bhb_loop+0x60/0xb0 [ 345.182276][T12634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.188191][T12634] RIP: 0033:0x7fe1fed9e199 [ 345.192862][T12634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.212506][T12634] RSP: 002b:00007fe1fcff5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 345.220935][T12634] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007fe1fed9e199 [ 345.228895][T12634] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000030 [ 345.236852][T12634] RBP: 00007fe1fee35888 R08: 0000000000000000 R09: 0000000000000000 [ 345.244809][T12634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 345.252766][T12634] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdeac50fc8 [ 345.260739][T12634] [ 345.433800][T12638] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2787'. [ 345.493164][T12638] netlink: 'syz.6.2787': attribute type 8 has an invalid length. [ 345.534568][T12638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2787'. [ 345.601151][T12638] device erspan0 entered promiscuous mode [ 345.660363][T12638] device gretap0 entered promiscuous mode [ 345.697265][T12638] device erspan0 left promiscuous mode [ 345.733691][T12638] device gretap0 left promiscuous mode [ 345.769128][T12641] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2787'. [ 345.818018][T12641] netlink: 'syz.6.2787': attribute type 8 has an invalid length. [ 345.853536][T12653] overlayfs: failed to clone upperpath [ 345.865548][T12641] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2787'. [ 345.933598][T12641] device erspan0 entered promiscuous mode [ 345.986952][T12641] device gretap0 entered promiscuous mode [ 346.007816][T12641] device erspan0 left promiscuous mode [ 346.036638][T12641] device gretap0 left promiscuous mode [ 346.132726][T12607] net_ratelimit: 28 callbacks suppressed [ 346.132742][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 346.317817][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 346.411581][T12668] device hsr0 entered promiscuous mode [ 346.468785][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 346.510091][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2799'. [ 346.799223][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2800'. [ 346.859222][T12667] device hsr0 left promiscuous mode [ 346.892759][ T5175] bond1: (slave batadv0): failed to get link speed/duplex [ 347.042681][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 347.549752][T12705] loop0: detected capacity change from 0 to 512 [ 347.684397][T12705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 347.802744][ T5191] bond1: (slave batadv0): failed to get link speed/duplex [ 347.923567][T12705] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 347.973160][ T5177] bond1: (slave batadv0): failed to get link speed/duplex [ 348.082060][ T5177] bond1: (slave batadv0): failed to get link speed/duplex [ 348.126746][T12705] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.192149][ T5191] bond1: (slave batadv0): failed to get link speed/duplex [ 348.302015][ T5177] bond1: (slave batadv0): failed to get link speed/duplex [ 348.603467][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2819'. [ 348.938502][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 349.602129][ T2188] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 349.806387][T12776] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2831'. [ 349.828243][ T2188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 349.878034][ T2188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.949141][ T2188] cdc_acm 1-1:1.0: Interface 0 is not authorized for usage [ 349.998383][ T2188] usbtest 1-1:1.0: Interface 0 is not authorized for usage [ 350.054587][ T2188] usbtest 1-1:1.1: Interface 1 is not authorized for usage [ 350.114274][T12779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2832'. [ 350.171588][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2832'. [ 351.222266][ T5189] net_ratelimit: 20 callbacks suppressed [ 351.222362][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 351.342828][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 351.381307][ T26] audit: type=1804 audit(1791445417.588:606): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2846" name="file1" dev="ramfs" ino=61129 res=1 errno=0 [ 351.666752][T12770] bond1: (slave batadv0): failed to get link speed/duplex [ 351.812603][ T4330] bond1: (slave batadv0): failed to get link speed/duplex [ 351.952637][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 352.062577][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 352.213355][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 352.244742][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2858'. [ 352.297553][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2858'. [ 352.382789][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 352.454428][ T4316] usb 1-1: USB disconnect, device number 20 [ 352.532724][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 352.637090][T12858] netlink: 'syz.4.2862': attribute type 1 has an invalid length. [ 352.730212][T12858] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.840695][T12860] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.872584][T12860] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 352.920296][T12860] bond5: (slave vti0): Error -95 calling set_mac_address [ 352.956439][ T4316] hid-generic 0005:057E:2017.0006: No inputs registered, leaving [ 353.005236][ T4316] hid-generic 0005:057E:2017.0006: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 353.092037][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 353.158528][T12874] unsupported nlmsg_type 40 [ 353.176765][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2865'. [ 353.208714][T12869] fido_id[12869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 354.705003][T12915] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2879'. [ 354.813248][T12919] CIFS: Attempting to mount \\127.0.0.1\share [ 355.149986][T12937] netlink: 'syz.1.2887': attribute type 5 has an invalid length. [ 355.660483][T12919] CIFS: VFS: Error connecting to socket. Aborting operation. [ 355.746849][T12919] CIFS: VFS: cifs_mount failed w/return code = -4 [ 356.116840][T12953] loop0: detected capacity change from 0 to 164 [ 356.322794][T12770] net_ratelimit: 26 callbacks suppressed [ 356.322806][T12770] bond1: (slave batadv0): failed to get link speed/duplex [ 356.503655][T12770] bond1: (slave batadv0): failed to get link speed/duplex [ 356.632243][T12770] bond1: (slave batadv0): failed to get link speed/duplex [ 356.772039][T12770] bond1: (slave batadv0): failed to get link speed/duplex [ 356.902780][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 357.032754][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 357.152701][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 357.273576][ T5169] bond1: (slave batadv0): failed to get link speed/duplex [ 357.402718][ T4330] bond1: (slave batadv0): failed to get link speed/duplex [ 357.542642][ T5169] bond1: (slave batadv0): failed to get link speed/duplex [ 358.074259][T12607] rpcbind: server 127.0.0.1 not responding, timed out [ 358.115600][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2914'. [ 358.174434][ T14] libceph: connect (1)[c::]:6789 error -101 [ 358.189290][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 358.240931][T13007] ceph: No mds server is up or the cluster is laggy [ 358.832388][T13028] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2921'. [ 359.302337][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.317772][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.327572][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.336850][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.346772][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 359.355282][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.382015][ T4316] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 359.603510][ T4316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 359.663159][ T4316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 359.745656][ T4316] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.819433][ T4316] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.850392][T13041] chnl_net:caif_netlink_parms(): no params data found [ 359.882240][ T4316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.951205][ T4316] usb 7-1: config 0 descriptor?? [ 359.991643][T13034] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 360.065551][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2933'. [ 360.146492][T13071] bridge1: port 1(vlan4) entered blocking state [ 360.190796][T13071] bridge1: port 1(vlan4) entered disabled state [ 360.310159][T13041] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.326704][T13041] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.360321][T13041] device bridge_slave_0 entered promiscuous mode [ 360.395696][T13041] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.444419][T13041] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.462929][ T4316] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 360.503128][T13041] device bridge_slave_1 entered promiscuous mode [ 360.515595][ T4316] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 360.583437][ T4316] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 360.620214][T13041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.709333][T13041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.794843][ T4316] usb 7-1: USB disconnect, device number 8 [ 360.919929][T13041] team0: Port device team_slave_0 added [ 360.966853][T13081] fido_id[13081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 360.996664][T13041] team0: Port device team_slave_1 added [ 361.026316][T13083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2936'. [ 361.049942][T13085] overlayfs: failed to clone upperpath [ 361.125522][T13041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.183187][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.314668][T13041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.403390][T13041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.432337][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 361.456934][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.573393][T13097] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 361.629364][T13041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.665583][T13097] caller generic_access_phys+0x1eb/0x370 mapping multiple BARs [ 361.794885][T13041] device hsr_slave_0 entered promiscuous mode [ 361.852738][T13041] device hsr_slave_1 entered promiscuous mode [ 361.892479][T13041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.952539][T13041] Cannot create hsr debugfs directory [ 361.962274][T12607] net_ratelimit: 17 callbacks suppressed [ 361.962285][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 362.312097][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 362.492684][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 362.602708][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 362.852691][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 363.004454][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 363.194070][T13133] FAULT_INJECTION: forcing a failure. [ 363.194070][T13133] name failslab, interval 1, probability 0, space 0, times 0 [ 363.269329][T13133] CPU: 0 PID: 13133 Comm: syz.6.2953 Not tainted syzkaller #0 [ 363.276870][T13133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.286917][T13133] Call Trace: [ 363.290262][T13133] [ 363.293610][T13133] dump_stack_lvl+0x188/0x24e [ 363.298419][T13133] ? show_regs_print_info+0x12/0x12 [ 363.303628][T13133] ? load_image+0x410/0x410 [ 363.308124][T13133] ? __might_sleep+0xd0/0xd0 [ 363.312745][T13133] ? __lock_acquire+0x7ea0/0x7ea0 [ 363.317763][T13133] should_fail_ex+0x390/0x4c0 [ 363.322488][T13133] should_failslab+0x5/0x20 [ 363.327011][T13133] slab_pre_alloc_hook+0x59/0x300 [ 363.332056][T13133] kmem_cache_alloc+0x56/0x2f0 [ 363.336824][T13133] ? fcntl_setlk+0xa5/0x10e0 [ 363.341452][T13133] fcntl_setlk+0xa5/0x10e0 [ 363.345860][T13133] ? __might_fault+0xa6/0x120 [ 363.350525][T13133] ? __lock_acquire+0x7ea0/0x7ea0 [ 363.355533][T13133] ? vfs_lock_file+0xd0/0xd0 [ 363.360108][T13133] ? __might_fault+0xa6/0x120 [ 363.364767][T13133] ? __might_fault+0xc2/0x120 [ 363.369423][T13133] ? __might_fault+0xa6/0x120 [ 363.374092][T13133] do_fcntl+0x543/0x1280 [ 363.378431][T13133] ? __ia32_sys_get_robust_list+0x100/0x100 [ 363.384363][T13133] ? kill_fasync+0x4b0/0x4b0 [ 363.388944][T13133] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 363.394912][T13133] ? tomoyo_file_fcntl+0x74/0x210 [ 363.399981][T13133] ? lock_chain_count+0x20/0x20 [ 363.404816][T13133] ? bpf_lsm_file_fcntl+0x5/0x10 [ 363.409811][T13133] ? security_file_fcntl+0x7c/0xa0 [ 363.414940][T13133] __se_sys_fcntl+0xc9/0x190 [ 363.419524][T13133] do_syscall_64+0x4c/0xa0 [ 363.423930][T13133] ? clear_bhb_loop+0x60/0xb0 [ 363.428671][T13133] ? clear_bhb_loop+0x60/0xb0 [ 363.433332][T13133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.439222][T13133] RIP: 0033:0x7f1befd9e199 [ 363.443676][T13133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.463315][T13133] RSP: 002b:00007f1bf0c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 363.471771][T13133] RAX: ffffffffffffffda RBX: 00007f1bf0025fa0 RCX: 00007f1befd9e199 [ 363.479741][T13133] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 363.487702][T13133] RBP: 00007f1befe35888 R08: 0000000000000000 R09: 0000000000000000 [ 363.495677][T13133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.503628][T13133] R13: 00007f1bf0026038 R14: 00007f1bf0025fa0 R15: 00007ffcfd915988 [ 363.511610][T13133] [ 363.524535][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 363.567590][T13041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.626948][T13041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.686906][T13041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.746904][T13041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 363.922989][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 363.971838][T13041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.057718][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 364.104967][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.147706][T13041] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.206104][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.231483][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.285367][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.292520][ T4647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.362859][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 364.385158][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.415453][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.474547][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.514108][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.521231][ T4647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.587229][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 364.643140][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 364.665278][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 364.690667][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 364.727489][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 364.749852][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 364.774769][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 364.798952][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 364.827551][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 364.879700][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 364.915340][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 364.948168][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.987241][T13041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 365.032964][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 365.281488][T13163] device bridge_slave_1 left promiscuous mode [ 365.308651][T13163] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.592450][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 365.767320][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.806256][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.851616][T13041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.933337][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 365.976361][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.012130][ T4316] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 366.050328][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.078762][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.117328][T13041] device veth0_vlan entered promiscuous mode [ 366.155814][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.189765][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.234563][ T4316] usb 7-1: Using ep0 maxpacket: 8 [ 366.246175][T13041] device veth1_vlan entered promiscuous mode [ 366.261465][ T4316] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 366.308719][ T4316] usb 7-1: config 179 has no interface number 0 [ 366.339671][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 366.351084][ T4316] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 366.376151][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 366.396981][ T4316] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 366.414391][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.449454][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.465521][ T4316] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 366.491598][T13041] device veth0_macvtap entered promiscuous mode [ 366.501281][ T4316] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 366.518932][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 366.548102][T13041] device veth1_macvtap entered promiscuous mode [ 366.583113][ T4316] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 366.622673][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.658769][ T4316] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 366.670531][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.698110][ T4316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.716736][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.770697][T13180] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 366.815475][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.927171][T13041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.006868][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.063986][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.152982][T13041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.233612][T13041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.310627][T13041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.344864][T12609] net_ratelimit: 7 callbacks suppressed [ 367.344877][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 367.416816][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.473312][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.500997][ T4316] usb 7-1: USB disconnect, device number 9 [ 367.506957][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 367.506985][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 367.561542][T13041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.606670][T13041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.669152][T13041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.678800][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 367.723546][T13041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.833996][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 367.972071][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 368.019426][T12607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.085363][T12607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.108030][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 368.115739][ T5189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.156446][ T5189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.180050][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 368.225272][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.274135][T13236] ip_tables: iptables: counters copy to user failed while replacing table [ 368.293287][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 368.361551][T13236] tipc: Started in network mode [ 368.380782][T13236] tipc: Node identity ac1414aa, cluster identity 4711 [ 368.432418][T13236] tipc: New replicast peer: 172.20.20.187 [ 368.481653][T13236] tipc: Enabled bearer , priority 10 [ 368.522796][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 368.672673][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 368.832594][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 368.969536][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 369.562110][ T4317] tipc: Node number set to 2886997162 [ 369.748647][T13289] overlayfs: failed to clone upperpath [ 369.925266][T13296] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 370.000139][T13296] 8021q: adding VLAN 0 to HW filter on device bond6 [ 370.085659][T13298] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 370.154515][T13299] device bond6 entered promiscuous mode [ 370.851117][T13324] lo speed is unknown, defaulting to 1000 [ 370.989565][T13324] lo speed is unknown, defaulting to 1000 [ 371.062561][T13324] lo speed is unknown, defaulting to 1000 [ 371.864308][T13324] infiniband syz0: set active [ 371.869876][ T14] lo speed is unknown, defaulting to 1000 [ 371.964390][T13324] infiniband syz0: added lo [ 372.024363][T13324] rdma_rxe: unable to create cq [ 372.068796][T13324] infiniband syz0: Couldn't create ib_mad CQ [ 372.135189][T13324] infiniband syz0: Couldn't open port 1 [ 372.310260][T13324] RDS/IB: syz0: added [ 372.351738][T13324] smc: adding ib device syz0 with port count 1 [ 372.392364][T12609] net_ratelimit: 26 callbacks suppressed [ 372.392377][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 372.428866][T13324] smc: ib device syz0 port 1 has pnetid [ 372.441555][T13363] lo speed is unknown, defaulting to 1000 [ 372.462859][ T14] lo speed is unknown, defaulting to 1000 [ 372.562670][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 372.691489][T13324] lo speed is unknown, defaulting to 1000 [ 372.852726][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 372.992553][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 373.118521][ T26] audit: type=1800 audit(1791445439.328:607): pid=13367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3030" name="file1" dev="fuse" ino=68719476738 res=0 errno=0 [ 373.139785][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 373.312083][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 373.532136][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 373.558383][T13324] lo speed is unknown, defaulting to 1000 [ 373.593927][T13381] FAULT_INJECTION: forcing a failure. [ 373.593927][T13381] name failslab, interval 1, probability 0, space 0, times 0 [ 373.662602][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 373.671648][T13381] CPU: 0 PID: 13381 Comm: syz.6.3038 Not tainted syzkaller #0 [ 373.679103][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.689143][T13381] Call Trace: [ 373.692409][T13381] [ 373.695328][T13381] dump_stack_lvl+0x188/0x24e [ 373.699998][T13381] ? show_regs_print_info+0x12/0x12 [ 373.705182][T13381] ? load_image+0x410/0x410 [ 373.709685][T13381] ? __might_sleep+0xd0/0xd0 [ 373.714278][T13381] ? __lock_acquire+0x7ea0/0x7ea0 [ 373.719312][T13381] should_fail_ex+0x390/0x4c0 [ 373.723995][T13381] should_failslab+0x5/0x20 [ 373.728498][T13381] slab_pre_alloc_hook+0x59/0x300 [ 373.733522][T13381] ? kobject_get_path+0xac/0x220 [ 373.738566][T13381] __kmem_cache_alloc_node+0x4f/0x270 [ 373.743932][T13381] ? kobject_get_path+0xac/0x220 [ 373.748859][T13381] __kmalloc+0xa3/0x240 [ 373.752998][T13381] kobject_get_path+0xac/0x220 [ 373.757750][T13381] kobject_uevent_env+0x28d/0x890 [ 373.762799][T13381] device_del+0x8dd/0xa80 [ 373.767209][T13381] ? kill_device+0x160/0x160 [ 373.772251][T13381] ? _raw_spin_unlock+0x40/0x40 [ 373.777094][T13381] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 373.782730][T13381] device_unregister+0x1c/0xc0 [ 373.787492][T13381] wakeup_source_unregister+0x170/0x190 [ 373.793110][T13381] ep_remove_epi+0x29e/0x3d0 [ 373.797744][T13381] ep_remove+0x1cc/0x350 [ 373.801975][T13381] ep_clear_and_put+0x149/0x2f0 [ 373.806856][T13381] ? ep_eventpoll_poll+0x20/0x20 [ 373.811781][T13381] ep_eventpoll_release+0x44/0x50 [ 373.816789][T13381] __fput+0x20a/0x8b0 [ 373.820812][T13381] task_work_run+0x1d0/0x260 [ 373.825422][T13381] ? task_work_cancel+0x220/0x220 [ 373.830436][T13381] ? exit_to_user_mode_loop+0x3b/0x110 [ 373.835947][T13381] exit_to_user_mode_loop+0xe6/0x110 [ 373.841218][T13381] exit_to_user_mode_prepare+0xee/0x180 [ 373.846753][T13381] syscall_exit_to_user_mode+0x16/0x40 [ 373.852225][T13381] do_syscall_64+0x58/0xa0 [ 373.856643][T13381] ? clear_bhb_loop+0x60/0xb0 [ 373.861308][T13381] ? clear_bhb_loop+0x60/0xb0 [ 373.865974][T13381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.871849][T13381] RIP: 0033:0x7f1befd9e199 [ 373.876250][T13381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.895841][T13381] RSP: 002b:00007f1bf0c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 373.904242][T13381] RAX: 0000000000000000 RBX: 00007f1bf0025fa0 RCX: 00007f1befd9e199 [ 373.912197][T13381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 373.920150][T13381] RBP: 00007f1befe35888 R08: 0000000000000000 R09: 0000000000000000 [ 373.928104][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.936059][T13381] R13: 00007f1bf0026038 R14: 00007f1bf0025fa0 R15: 00007ffcfd915988 [ 373.944023][T13381] [ 373.956368][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 374.092005][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 374.340663][T13324] lo speed is unknown, defaulting to 1000 [ 374.620891][ T26] audit: type=1326 audit(1791445440.828:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.1.3045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5599e199 code=0x7ffc0000 [ 374.719145][ T26] audit: type=1326 audit(1791445440.858:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.1.3045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5599e199 code=0x7ffc0000 [ 374.814621][T13324] lo speed is unknown, defaulting to 1000 [ 374.850655][ T26] audit: type=1326 audit(1791445440.858:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.1.3045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5599e199 code=0x7ffc0000 [ 374.987242][ T26] audit: type=1326 audit(1791445440.858:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.1.3045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5599e199 code=0x7ffc0000 [ 375.116154][ T26] audit: type=1326 audit(1791445440.858:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.1.3045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3d5599e199 code=0x7ffc0000 [ 375.291854][ T26] audit: type=1326 audit(1791445440.888:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.1.3045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5599e199 code=0x7ffc0000 [ 375.469882][ T26] audit: type=1326 audit(1791445440.908:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.1.3045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5599e199 code=0x7ffc0000 [ 375.653807][ T26] audit: type=1326 audit(1791445440.978:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.1.3045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5599e199 code=0x7ffc0000 [ 375.784383][T13324] lo speed is unknown, defaulting to 1000 [ 375.835891][ T26] audit: type=1326 audit(1791445440.978:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.1.3045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d5599e199 code=0x7ffc0000 [ 376.169333][T13421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3055'. [ 376.218435][T13424] loop6: detected capacity change from 0 to 512 [ 376.279803][T13424] FAT-fs (loop6): bogus logical sector size 0 [ 376.326163][T13424] FAT-fs (loop6): Can't find a valid FAT filesystem [ 376.757296][T13324] lo speed is unknown, defaulting to 1000 [ 376.911054][T13439] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3062'. [ 377.492074][ T4647] net_ratelimit: 24 callbacks suppressed [ 377.492088][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 377.578284][T13324] lo speed is unknown, defaulting to 1000 [ 377.652121][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 377.792053][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 377.922693][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 378.034697][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3071'. [ 378.102615][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 378.239979][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 378.383482][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 378.492842][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 378.562464][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.568936][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.677366][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 378.843268][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 379.122151][ T2188] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 379.339249][ T2188] usb 7-1: unable to get BOS descriptor or descriptor too short [ 379.377918][ T2188] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 379.441858][ T2188] usb 7-1: New USB device found, idVendor=fe9e, idProduct=cde4, bcdDevice= f.b6 [ 379.502217][ T2188] usb 7-1: New USB device strings: Mfr=5, Product=65, SerialNumber=3 [ 379.550608][ T2188] usb 7-1: Product: syz [ 379.578106][ T2188] usb 7-1: Manufacturer: syz [ 379.610387][ T2188] usb 7-1: SerialNumber: syz [ 379.647276][T13480] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 379.939343][T13502] tipc: Failed to remove unknown binding: 66,1,1/2886997162:571619002/571619004 [ 379.956102][ T2188] usb 7-1: MIDIStreaming interface descriptor not found [ 380.001753][T13502] tipc: Failed to remove unknown binding: 66,1,1/2886997162:571619002/571619004 [ 380.163242][ T2188] usb 7-1: USB disconnect, device number 10 [ 380.596205][T13511] udevd[13511]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.299223][T13575] loop5: detected capacity change from 0 to 7 [ 382.348340][T13578] fuse: Bad value for 'fd' [ 382.364137][T13509] loop5: [ 382.374634][T13509] loop5: partition table partially beyond EOD, truncated [ 382.435298][T13575] loop5: [ 382.457791][T13575] loop5: partition table partially beyond EOD, truncated [ 382.522711][ T5165] net_ratelimit: 32 callbacks suppressed [ 382.522723][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 382.702672][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 382.842531][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 382.972695][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 383.112667][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 383.235764][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 383.372766][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 383.479427][T13611] FAULT_INJECTION: forcing a failure. [ 383.479427][T13611] name failslab, interval 1, probability 0, space 0, times 0 [ 383.512591][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 383.552411][T13611] CPU: 0 PID: 13611 Comm: syz.6.3127 Not tainted syzkaller #0 [ 383.559911][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.569956][T13611] Call Trace: [ 383.573238][T13611] [ 383.576155][T13611] dump_stack_lvl+0x188/0x24e [ 383.580827][T13611] ? show_regs_print_info+0x12/0x12 [ 383.586006][T13611] ? load_image+0x410/0x410 [ 383.590493][T13611] ? __might_sleep+0xd0/0xd0 [ 383.595063][T13611] ? __lock_acquire+0x7ea0/0x7ea0 [ 383.600070][T13611] should_fail_ex+0x390/0x4c0 [ 383.604732][T13611] should_failslab+0x5/0x20 [ 383.609215][T13611] slab_pre_alloc_hook+0x59/0x300 [ 383.614228][T13611] kmem_cache_alloc+0x56/0x2f0 [ 383.618973][T13611] ? posix_lock_inode+0x365/0x32f0 [ 383.624176][T13611] posix_lock_inode+0x365/0x32f0 [ 383.629098][T13611] ? aa_path_link+0x8a0/0x8a0 [ 383.633864][T13611] ? lockdep_softirqs_off+0x430/0x430 [ 383.639225][T13611] ? __kasan_slab_alloc+0x6b/0x80 [ 383.644299][T13611] ? slab_pre_alloc_hook+0x59/0x300 [ 383.649504][T13611] ? posix_lock_file+0x50/0x50 [ 383.654254][T13611] ? bpf_lsm_file_lock+0x5/0x10 [ 383.659100][T13611] fcntl_setlk+0xaa7/0x10e0 [ 383.663619][T13611] ? vfs_lock_file+0xd0/0xd0 [ 383.668193][T13611] ? __might_fault+0xa6/0x120 [ 383.672853][T13611] ? __might_fault+0xc2/0x120 [ 383.677527][T13611] ? __might_fault+0xa6/0x120 [ 383.682191][T13611] do_fcntl+0x543/0x1280 [ 383.686438][T13611] ? __ia32_sys_get_robust_list+0x100/0x100 [ 383.692316][T13611] ? kill_fasync+0x4b0/0x4b0 [ 383.696976][T13611] ? __fget_files+0x28/0x460 [ 383.701551][T13611] ? __fget_files+0x3fc/0x460 [ 383.706235][T13611] ? tomoyo_file_fcntl+0x74/0x210 [ 383.711279][T13611] ? bpf_lsm_file_fcntl+0x5/0x10 [ 383.716200][T13611] ? security_file_fcntl+0x7c/0xa0 [ 383.721392][T13611] __se_sys_fcntl+0xc9/0x190 [ 383.725968][T13611] do_syscall_64+0x4c/0xa0 [ 383.730372][T13611] ? clear_bhb_loop+0x60/0xb0 [ 383.735123][T13611] ? clear_bhb_loop+0x60/0xb0 [ 383.739887][T13611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.745778][T13611] RIP: 0033:0x7f1befd9e199 [ 383.750175][T13611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.769784][T13611] RSP: 002b:00007f1bf0c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 383.778180][T13611] RAX: ffffffffffffffda RBX: 00007f1bf0025fa0 RCX: 00007f1befd9e199 [ 383.786165][T13611] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000003 [ 383.794121][T13611] RBP: 00007f1befe35888 R08: 0000000000000000 R09: 0000000000000000 [ 383.802082][T13611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.810042][T13611] R13: 00007f1bf0026038 R14: 00007f1bf0025fa0 R15: 00007ffcfd915988 [ 383.818006][T13611] [ 383.826820][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 383.875203][T13613] netlink: 'syz.4.3129': attribute type 4 has an invalid length. [ 383.959282][T13614] netlink: 'syz.4.3129': attribute type 4 has an invalid length. [ 384.032056][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 385.345963][T13649] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3141'. [ 385.421277][T13649] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3141'. [ 385.486736][T13649] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3141'. [ 385.535224][T13647] loop0: detected capacity change from 0 to 4096 [ 385.554065][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3141'. [ 385.591240][T13650] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3141'. [ 385.652628][T13647] EXT4-fs (loop0): Test dummy encryption mode enabled [ 385.672221][T13659] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.3144'. [ 385.726093][T13659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3144'. [ 385.806178][T13647] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 386.480383][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 386.677382][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 386.677421][ T26] audit: type=1326 audit(1791445452.888:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13683 comm="syz.4.3151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0faf39e199 code=0x0 [ 386.758773][T13647] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 387.187576][T13041] EXT4-fs (loop0): unmounting filesystem. [ 387.552672][ T5165] net_ratelimit: 27 callbacks suppressed [ 387.552684][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 387.712080][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 387.842188][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 387.962080][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 388.082118][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 388.192133][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 388.437322][T10097] bond0: (slave syz_tun): Releasing backup interface [ 388.492729][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 388.602035][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 388.742005][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 388.769285][T13731] smc: net device team0 applied user defined pnetid SYZ2 [ 388.883259][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 389.743574][T13731] smc: removing net device team0 with user defined pnetid SYZ2 [ 390.105868][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 390.119375][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 390.128536][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 390.138343][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 390.148104][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 390.158053][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.324421][T13731] team0 (unregistering): Port device team_slave_0 removed [ 390.408278][T13731] team0 (unregistering): Port device team_slave_1 removed [ 390.650151][T13754] lo speed is unknown, defaulting to 1000 [ 391.027895][T12607] netdevsim netdevsim6 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.160890][T12607] netdevsim netdevsim6 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.304499][T12607] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.423546][T12607] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.448006][T13778] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3189'. [ 391.646642][T12607] tipc: Disabling bearer [ 391.684996][T12607] tipc: Left network mode [ 391.727660][T13754] chnl_net:caif_netlink_parms(): no params data found [ 392.232527][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 392.546725][T13754] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.589361][T13754] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.633426][T13754] device bridge_slave_0 entered promiscuous mode [ 392.691730][T13754] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.752358][T13754] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.787831][T13754] device bridge_slave_1 entered promiscuous mode [ 392.971212][T13754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.225623][T13754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.532332][T12605] net_ratelimit: 5 callbacks suppressed [ 393.532343][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 393.750353][T13754] team0: Port device team_slave_0 added [ 393.873280][T13754] team0: Port device team_slave_1 added [ 394.301612][T13754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.312349][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 394.349369][T13754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.531146][T13754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.765825][T13754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.817159][T13754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.978967][T13754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.480601][T13754] device hsr_slave_0 entered promiscuous mode [ 395.527066][T13754] device hsr_slave_1 entered promiscuous mode [ 395.563822][T13754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.604377][T13754] Cannot create hsr debugfs directory [ 395.692221][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 395.971869][T12607] device hsr_slave_0 left promiscuous mode [ 396.004565][T12607] device hsr_slave_1 left promiscuous mode [ 396.038924][T12607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.076784][T12607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.117111][T12607] device bridge_slave_0 left promiscuous mode [ 396.150325][T12607] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.392568][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 396.648078][T12607] bond1 (unregistering): (slave geneve2): Releasing active interface [ 397.387743][T13909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.483372][T12607] bond1 (unregistering): Released all slaves [ 398.476414][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 398.584612][T12607] team0 (unregistering): Port device team_slave_1 removed [ 398.654724][T12607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.726283][T12607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.128150][T12607] bond0 (unregistering): Released all slaves [ 399.636448][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3234'. [ 399.721788][T13948] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 399.990993][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 400.253007][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 400.319197][T13967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3244'. [ 400.449920][T13754] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 400.564046][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 400.571817][T13754] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 400.653334][T13754] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 400.716435][T13754] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 401.012698][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 401.070725][T13754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.204254][T13039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 401.245013][T13039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 401.307336][T13754] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.362408][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 401.407423][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.456633][T12605] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.463787][T12605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.577219][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 401.614723][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 401.686471][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.726398][T12605] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.733574][T12605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.832234][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 401.906221][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 401.967072][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 402.046180][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.122985][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 402.139345][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.181314][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 402.240975][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.297893][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.345378][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.393885][T13754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.446050][T13754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.501072][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.534688][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.602498][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 402.717291][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 402.862097][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 403.002540][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 403.152706][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 403.484797][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.543759][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.597483][T13754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.006996][T14074] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 404.237283][T14079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.288999][T14079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.354920][T14079] bond0 (unregistering): (slave team0): Releasing backup interface [ 404.404664][T14079] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 404.447164][T14079] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 404.496004][T14079] bond0 (unregistering): Released all slaves [ 404.977720][T14100] device bridge0 left promiscuous mode [ 405.030862][T14100] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.116481][T14100] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.367471][T13039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 405.419371][T13039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.519949][T13039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 405.569305][T13039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.640626][T13754] device veth0_vlan entered promiscuous mode [ 405.676936][T13039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 405.728089][T13039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.796634][T13754] device veth1_vlan entered promiscuous mode [ 405.862101][T12605] net_ratelimit: 10 callbacks suppressed [ 405.862113][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 405.982959][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.025705][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.078033][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3285'. [ 406.128901][T14136] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.137894][T14136] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.146780][T14136] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.155591][T14136] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.234999][T14146] overlayfs: failed to clone upperpath [ 406.290445][T13754] device veth0_macvtap entered promiscuous mode [ 406.329537][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3285'. [ 406.376349][T13754] device veth1_macvtap entered promiscuous mode [ 406.442744][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 406.491783][T13754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.565759][T13754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.634645][T13754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.706449][T13754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.759416][T13754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.826358][T13754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.904483][T13754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.955201][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.993781][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 407.015484][T14169] ip_tables: iptables: counters copy to user failed while replacing table [ 407.056754][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 407.107048][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.164427][T13754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.226267][T13754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.270507][T13754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.316221][T13754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.370419][T13754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.393994][T14180] overlayfs: failed to clone upperpath [ 407.409064][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.433734][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.489331][T13754] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.528463][T13754] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.567876][T13754] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.608590][T13754] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.687230][ T5169] bond1: (slave batadv0): failed to get link speed/duplex [ 407.872617][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 407.952414][ T5169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.031015][ T5169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.089116][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 408.142255][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 408.189801][T13039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.254361][T13039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.294600][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 408.324802][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 408.402250][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 408.524491][ T5169] bond1: (slave batadv0): failed to get link speed/duplex [ 408.693174][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 409.367125][T14233] ÿÿÿÿÿÿ: renamed from bridge_slave_0 [ 410.535291][T14265] lo speed is unknown, defaulting to 1000 [ 410.873571][ T4647] net_ratelimit: 17 callbacks suppressed [ 410.873585][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 411.091014][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 411.242627][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 411.513050][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 411.663180][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 411.812108][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 411.949111][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 412.092452][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 412.202142][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 412.316883][T14315] FAULT_INJECTION: forcing a failure. [ 412.316883][T14315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 412.365320][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 412.716450][T14315] CPU: 0 PID: 14315 Comm: syz.0.3335 Not tainted syzkaller #0 [ 412.723939][T14315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.733991][T14315] Call Trace: [ 412.737269][T14315] [ 412.740187][T14315] dump_stack_lvl+0x188/0x24e [ 412.744856][T14315] ? show_regs_print_info+0x12/0x12 [ 412.750057][T14315] ? load_image+0x410/0x410 [ 412.754570][T14315] ? __lock_acquire+0x7ea0/0x7ea0 [ 412.759593][T14315] should_fail_ex+0x390/0x4c0 [ 412.764278][T14315] prepare_alloc_pages+0x1e1/0x5b0 [ 412.769417][T14315] __alloc_pages+0x130/0x4f0 [ 412.773993][T14315] ? zone_statistics+0x170/0x170 [ 412.778921][T14315] __get_free_pages+0x8/0x30 [ 412.783494][T14315] __genradix_ptr_alloc+0xda/0x350 [ 412.788675][T14315] proc_map_files_readdir+0x4f1/0x970 [ 412.794050][T14315] ? map_files_d_revalidate+0x700/0x700 [ 412.799581][T14315] ? aa_path_link+0x8a0/0x8a0 [ 412.804253][T14315] ? mutex_lock_nested+0x10/0x10 [ 412.809231][T14315] ? end_current_label_crit_section+0x14b/0x170 [ 412.815461][T14315] ? iterate_dir+0x10d/0x550 [ 412.820056][T14315] ? down_read_killable+0x1cc/0x340 [ 412.825238][T14315] ? fsnotify_perm+0x248/0x550 [ 412.829995][T14315] iterate_dir+0x213/0x550 [ 412.834396][T14315] ? map_files_d_revalidate+0x700/0x700 [ 412.839924][T14315] __se_sys_getdents64+0xf2/0x270 [ 412.844961][T14315] ? __x64_sys_getdents64+0x80/0x80 [ 412.850147][T14315] ? filldir+0x6f0/0x6f0 [ 412.854376][T14315] ? lockdep_hardirqs_on+0x94/0x140 [ 412.859559][T14315] do_syscall_64+0x4c/0xa0 [ 412.863964][T14315] ? clear_bhb_loop+0x60/0xb0 [ 412.868622][T14315] ? clear_bhb_loop+0x60/0xb0 [ 412.873282][T14315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.879618][T14315] RIP: 0033:0x7f21bb99e199 [ 412.884017][T14315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.903611][T14315] RSP: 002b:00007f21bc7b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 412.912148][T14315] RAX: ffffffffffffffda RBX: 00007f21bbc25fa0 RCX: 00007f21bb99e199 [ 412.920196][T14315] RDX: 000000000000004b RSI: 0000200000000040 RDI: 0000000000000003 [ 412.928156][T14315] RBP: 00007f21bba35888 R08: 0000000000000000 R09: 0000000000000000 [ 412.936109][T14315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.944165][T14315] R13: 00007f21bbc26038 R14: 00007f21bbc25fa0 R15: 00007ffcf3424798 [ 412.952135][T14315] [ 413.787458][T14356] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3348'. [ 413.861240][T14335] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.962264][T14339] device vlan3 left promiscuous mode [ 413.968098][T14339] device geneve0 left promiscuous mode [ 414.042479][T14339] bridge0: port 3(vlan3) entered disabled state [ 414.080988][T14339] device bridge_slave_0 left promiscuous mode [ 414.109167][T14339] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.257217][T14364] loop7: detected capacity change from 0 to 2048 [ 414.272262][T14358] netlink: 'syz.1.3349': attribute type 1 has an invalid length. [ 414.298728][T14358] netlink: 64399 bytes leftover after parsing attributes in process `syz.1.3349'. [ 414.388542][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3351'. [ 414.403209][T14369] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 414.648307][ T26] audit: type=1800 audit(2000000006.630:648): pid=14364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3352" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 414.825601][ T26] audit: type=1804 audit(2000000006.670:649): pid=14364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3352" name="/newroot/7/file2/file1" dev="loop7" ino=15 res=1 errno=0 [ 415.104704][T14364] syz.7.3352 (14364) used greatest stack depth: 19840 bytes left [ 415.780139][T14409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3361'. [ 415.885282][ T5165] net_ratelimit: 15 callbacks suppressed [ 415.885295][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 416.117153][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 416.137602][T14421] overlayfs: failed to clone upperpath [ 416.204785][T14425] netlink: 'syz.1.3367': attribute type 4 has an invalid length. [ 416.308047][T14430] netlink: 'syz.1.3367': attribute type 4 has an invalid length. [ 416.340198][T14426] process '/newroot/753/file0' started with executable stack [ 416.395187][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 416.598544][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 416.701314][T14444] loop7: detected capacity change from 0 to 256 [ 416.772847][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 416.868783][T14447] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 416.882207][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 417.022848][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 417.162310][ T5169] bond1: (slave batadv0): failed to get link speed/duplex [ 417.234101][T14460] ip_tables: iptables: counters copy to user failed while replacing table [ 417.310979][T14460] netlink: 'syz.2.3381': attribute type 4 has an invalid length. [ 417.863144][T14484] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3390'. [ 419.105525][T14494] loop7: detected capacity change from 0 to 32768 [ 419.248285][T14494] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 419.338706][T14494] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 419.425198][T14494] BTRFS info (device loop7): using free space tree [ 419.662316][T14494] BTRFS info (device loop7): enabling ssd optimizations [ 419.799250][ T26] audit: type=1800 audit(2000000011.780:650): pid=14494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3393" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 419.976550][ T26] audit: type=1804 audit(2000000011.860:651): pid=14494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3393" name="/newroot/17/file0/bus" dev="loop7" ino=263 res=1 errno=0 [ 420.265067][T13754] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 420.913945][T13039] net_ratelimit: 33 callbacks suppressed [ 420.913959][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 421.116774][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 421.200397][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3411'. [ 421.286212][T14592] overlayfs: failed to clone upperpath [ 421.462928][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 421.562446][T14601] netlink: 'syz.1.3414': attribute type 1 has an invalid length. [ 421.609385][T14594] libceph: connect (1)0.0.0.0:6789 error -22 [ 421.627270][T14594] libceph: mon0 (1)0.0.0.0:6789 connect error [ 421.699075][T14607] bond5: (slave macvlan1): Enslaving as an active interface with a down link [ 421.760540][T14611] bond5 (unregistering): (slave macvlan1): Releasing active interface [ 421.821431][T14611] bond5 (unregistering): Released all slaves [ 421.872696][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 421.949811][T14594] libceph: connect (1)0.0.0.0:6789 error -22 [ 421.975573][T14594] libceph: mon0 (1)0.0.0.0:6789 connect error [ 421.993431][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 422.152184][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 422.282144][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 422.391006][T14602] ceph: No mds server is up or the cluster is laggy [ 422.418377][ T5169] bond1: (slave batadv0): failed to get link speed/duplex [ 422.561819][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 422.692650][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 422.824241][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3424'. [ 423.576898][T14645] lo speed is unknown, defaulting to 1000 [ 424.911187][T14685] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 424.918496][T14685] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.930800][T14689] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6) [ 424.938114][T14689] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.976673][T14693] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(9) [ 424.983245][T14693] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 425.041841][T14696] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(12) [ 425.048471][T14696] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 425.090909][T14689] vhci_hcd vhci_hcd.0: Device attached [ 425.097404][T14699] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(15) [ 425.104015][T14699] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 425.116100][T14685] vhci_hcd vhci_hcd.0: Device attached [ 425.142608][T14693] vhci_hcd vhci_hcd.0: Device attached [ 425.159949][T14704] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(18) [ 425.166711][T14704] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 425.183445][T14696] vhci_hcd vhci_hcd.0: Device attached [ 425.195059][T14689] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(8) [ 425.201590][T14689] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 425.260523][T14699] vhci_hcd vhci_hcd.0: Device attached [ 425.307770][T14704] vhci_hcd vhci_hcd.0: Device attached [ 425.327985][T14689] vhci_hcd vhci_hcd.0: Device attached [ 425.342142][ T4316] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 425.362972][T14685] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(5) [ 425.369635][T14685] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 425.466359][T14712] lo speed is unknown, defaulting to 1000 [ 425.492424][T14685] vhci_hcd vhci_hcd.0: Device attached [ 425.543792][T14707] vhci_hcd: connection closed [ 425.547749][T14705] vhci_hcd: connection closed [ 425.553387][T14700] vhci_hcd: connection closed [ 425.558265][T14697] vhci_hcd: connection closed [ 425.563172][T14694] vhci_hcd: connection closed [ 425.567977][T14691] vhci_hcd: connection closed [ 425.573184][T14687] vhci_hcd: connection reset by peer [ 425.620760][T12605] vhci_hcd: stop threads [ 425.634422][T14713] vhci_hcd: connection closed [ 425.659817][T12605] vhci_hcd: release socket [ 425.750288][T12605] vhci_hcd: disconnect device [ 425.776442][T12605] vhci_hcd: stop threads [ 425.806110][T12605] vhci_hcd: release socket [ 425.842136][T12605] vhci_hcd: disconnect device [ 425.882251][T12605] vhci_hcd: stop threads [ 425.899412][T12605] vhci_hcd: release socket [ 425.918935][T12605] vhci_hcd: disconnect device [ 425.948475][T12605] vhci_hcd: stop threads [ 425.967087][T12605] vhci_hcd: release socket [ 425.985755][T12605] vhci_hcd: disconnect device [ 426.006035][T12605] vhci_hcd: stop threads [ 426.025109][T12605] vhci_hcd: release socket [ 426.045348][T12605] vhci_hcd: disconnect device [ 426.107352][T12605] vhci_hcd: stop threads [ 426.143907][T12605] vhci_hcd: release socket [ 426.185134][T12605] vhci_hcd: disconnect device [ 426.230719][T12605] vhci_hcd: stop threads [ 426.262149][T12605] vhci_hcd: release socket [ 426.318103][T12605] vhci_hcd: disconnect device [ 426.351603][T12605] vhci_hcd: stop threads [ 426.381098][T12605] vhci_hcd: release socket [ 426.425402][T12605] vhci_hcd: disconnect device [ 426.436857][ T4647] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.729280][ T4647] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.832684][ T5165] net_ratelimit: 15 callbacks suppressed [ 426.832695][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 427.056925][ T4647] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.365345][ T4647] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.492114][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 427.662075][ T5169] bond1: (slave batadv0): failed to get link speed/duplex [ 427.827776][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.842390][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.851528][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.861087][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.869807][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 427.880056][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.916013][ T4647] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.967524][T14772] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 428.009232][T14772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.065068][ T4647] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.113867][T14769] lo speed is unknown, defaulting to 1000 [ 428.166483][ T4647] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.177517][T14776] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 428.260806][T14756] ceph: No mds server is up or the cluster is laggy [ 428.293092][ T4647] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.442110][ T5169] bond1: (slave batadv0): failed to get link speed/duplex [ 428.560616][T14774] rdma_rxe: rxe_register_device failed with error -23 [ 428.600963][T14774] rdma_rxe: failed to add dummy0 [ 428.709481][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 428.902040][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 429.109535][T14810] loop7: detected capacity change from 0 to 128 [ 429.232564][T14810] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 429.312525][T14810] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 429.397798][T14810] ext2 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.447951][T14818] ip_tables: iptables: counters copy to user failed while replacing table [ 429.532612][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 429.570879][ T26] audit: type=1326 audit(2000000021.550:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.1.3464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d5599e199 code=0x0 [ 429.746142][T13754] EXT4-fs (loop7): unmounting filesystem. [ 429.774577][ T26] audit: type=1800 audit(2000000021.590:653): pid=14810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3462" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=15 res=0 errno=0 [ 429.817215][ T5169] bond1: (slave batadv0): failed to get link speed/duplex [ 429.912220][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 429.974413][T14769] chnl_net:caif_netlink_parms(): no params data found [ 430.446906][ T26] audit: type=1326 audit(2000000022.430:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.7.3467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a99e199 code=0x7ffc0000 [ 430.552135][ T4316] vhci_hcd: vhci_device speed not set [ 430.707638][ T26] audit: type=1326 audit(2000000022.460:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.7.3467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a99e199 code=0x7ffc0000 [ 430.889728][ T26] audit: type=1326 audit(2000000022.460:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.7.3467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a99e199 code=0x7ffc0000 [ 430.933572][T14850] netlink: 'syz.7.3470': attribute type 1 has an invalid length. [ 431.016394][T14769] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.049066][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.080749][ T26] audit: type=1326 audit(2000000022.460:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.7.3467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a99e199 code=0x7ffc0000 [ 431.115142][T14769] device bridge_slave_0 entered promiscuous mode [ 431.186372][T14851] bond1: (slave macvlan1): making interface the new active one [ 431.211853][T14851] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 431.230339][ T26] audit: type=1326 audit(2000000022.460:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.7.3467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f697a99e199 code=0x7ffc0000 [ 431.270750][T14852] bond1 (unregistering): (slave macvlan1): Releasing active interface [ 431.314868][T14852] bond1 (unregistering): Released all slaves [ 431.337571][ T26] audit: type=1326 audit(2000000022.460:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.7.3467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a99e199 code=0x7ffc0000 [ 431.439039][ T26] audit: type=1326 audit(2000000022.460:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.7.3467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a99e199 code=0x7ffc0000 [ 431.476206][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 431.510861][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 431.531089][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 431.549078][ T26] audit: type=1326 audit(2000000022.480:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.7.3467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a99e199 code=0x7ffc0000 [ 431.587913][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 431.609284][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 431.639297][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 431.705567][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 431.760876][T14859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.786890][T14859] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.820957][T14769] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.854652][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.907676][T14769] device bridge_slave_1 entered promiscuous mode [ 431.992336][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 432.367556][ T5189] net_ratelimit: 4 callbacks suppressed [ 432.367567][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 432.475594][T14769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.594062][T14769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.812446][T14769] team0: Port device team_slave_0 added [ 432.832985][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 432.910128][ T4647] device hsr_slave_0 left promiscuous mode [ 432.991387][ T4647] device hsr_slave_1 left promiscuous mode [ 433.025393][ T4647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.095530][ T4647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.166746][ T4647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.222887][ T4647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.287603][ T4647] device bridge_slave_1 left promiscuous mode [ 433.314208][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.385220][ T4647] device bridge_slave_0 left promiscuous mode [ 433.436751][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.662861][ T4647] device veth1_macvtap left promiscuous mode [ 433.713565][ T4647] device veth0_macvtap left promiscuous mode [ 433.756267][ T4647] device veth1_vlan left promiscuous mode [ 433.794936][ T4647] device veth0_vlan left promiscuous mode [ 434.072191][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 434.298237][ T4647] infiniband syz0: set down [ 436.098073][T14944] overlayfs: failed to clone upperpath [ 436.152514][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 438.331460][ T4647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.483510][T14980] overlayfs: failed to clone upperpath [ 438.564299][ T4647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.994314][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.000653][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.228442][ T4647] bond0 (unregistering): Released all slaves [ 440.419593][T12605] smc: removing ib device syz0 [ 440.438235][T14769] team0: Port device team_slave_1 added [ 440.535180][ T5165] bond1: (slave batadv0): failed to get link speed/duplex [ 440.542617][ T2188] infiniband syz0: ib_query_port failed (-19) [ 440.677748][T14769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.784266][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.009781][T14769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.119352][T14769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.159624][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.380959][T14769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.402108][T15030] loop7: detected capacity change from 0 to 1024 [ 441.431618][T15030] EXT4-fs: Ignoring removed orlov option [ 441.483295][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 441.629957][T15030] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 441.856362][T14769] device hsr_slave_0 entered promiscuous mode [ 442.042629][T14769] device hsr_slave_1 entered promiscuous mode [ 442.084856][T14769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.128536][T14769] Cannot create hsr debugfs directory [ 442.312725][T13754] EXT4-fs (loop7): unmounting filesystem. [ 442.366166][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 442.621969][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 443.460327][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 443.742909][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 443.942050][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 443.996035][T14769] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 444.090146][T14769] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 444.176290][T14769] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 444.244175][T14769] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 444.325657][T13039] bond1: (slave batadv0): failed to get link speed/duplex [ 444.532029][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 444.697446][T14769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.823191][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 444.875405][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.986732][T14769] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.054431][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.134920][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.215520][T13040] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.222663][T13040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.377372][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.419143][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.479970][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.545314][T13040] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.552483][T13040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.661496][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.724743][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.782332][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 445.811104][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.879397][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.966381][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.027525][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.110274][T14769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.233056][T14769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.322324][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.381445][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.399938][T15116] xt_hashlimit: size too large, truncated to 1048576 [ 446.467113][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.553041][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.657766][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.773934][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.962031][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 447.122126][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 447.407067][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 447.515191][T15137] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 447.806338][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 448.003397][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 448.098088][T14769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.201062][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.262286][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.342536][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 448.452011][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 448.650928][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 448.822198][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 449.653477][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.726771][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.861612][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.908781][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.962846][T14769] device veth0_vlan entered promiscuous mode [ 450.005762][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.043166][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.109964][T14769] device veth1_vlan entered promiscuous mode [ 450.248993][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.296682][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 450.376285][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.456510][T13040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.535381][T14769] device veth0_macvtap entered promiscuous mode [ 450.602342][T14769] device veth1_macvtap entered promiscuous mode [ 450.732872][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.740883][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.858464][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.001189][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.099769][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.185703][ T4315] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 451.200131][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.307741][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.377327][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.403188][ T4315] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.451308][T14769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.461809][ T4315] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.532046][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.540553][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.559666][ T4315] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 451.619843][ T4315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.645890][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.679814][ T4315] usb 8-1: SerialNumber: syz [ 451.714633][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.816362][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.898079][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.982798][T14769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.049909][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 452.106478][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.190281][T14769] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.203638][ T4315] usb 8-1: 0:2 : does not exist [ 452.271712][T14769] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.313983][ T4315] usb 8-1: USB disconnect, device number 2 [ 452.378723][T14769] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.434012][T15199] udevd[15199]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.484878][T14769] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.832116][ T5193] net_ratelimit: 8 callbacks suppressed [ 452.832130][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 453.172749][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 453.211662][ T4647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.261176][ T4647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.331467][T13040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.340204][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 453.378957][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 453.397406][T13040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.480747][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.532595][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 453.684481][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 453.852048][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 454.002664][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 454.114518][T15253] loop7: detected capacity change from 0 to 512 [ 454.171507][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 454.247927][T15253] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 454.352325][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 454.385434][T15253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c018, mo2=0002] [ 454.455852][T15253] System zones: 1-3, 19-19, 35-66 [ 454.513910][T15253] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 454.763339][T13754] EXT4-fs (loop7): unmounting filesystem. [ 454.812357][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 455.096230][T15281] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 456.480197][T15321] input: syz0 as /devices/virtual/input/input9 [ 457.494215][T15337] loop8: detected capacity change from 0 to 512 [ 457.922830][ T5189] net_ratelimit: 19 callbacks suppressed [ 457.922842][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 458.111984][ T5193] bond1: (slave batadv0): failed to get link speed/duplex [ 458.302730][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 458.486588][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 458.662049][T12605] bond1: (slave batadv0): failed to get link speed/duplex [ 458.812104][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 458.964131][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 459.132160][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 459.312814][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 459.502659][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 460.203467][T15406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.213572][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 462.933311][T12609] net_ratelimit: 24 callbacks suppressed [ 462.933323][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 463.153294][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 463.302095][T12609] bond1: (slave batadv0): failed to get link speed/duplex [ 463.442031][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 463.593299][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 463.741992][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 463.934046][T13040] bond1: (slave batadv0): failed to get link speed/duplex [ 464.091701][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3650'. [ 464.131965][ T5189] bond1: (slave batadv0): failed to get link speed/duplex [ 464.242609][T12607] bond1: (slave batadv0): failed to get link speed/duplex [ 464.452180][ T4647] bond1: (slave batadv0): failed to get link speed/duplex [ 464.760667][T15521] fuse: root generation should be zero [ 465.035615][T15514] ------------[ cut here ]------------ [ 465.042019][T15514] WARNING: CPU: 0 PID: 15514 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180 [ 465.053334][T15514] Modules linked in: [ 465.057223][T15514] CPU: 0 PID: 15514 Comm: syz.4.3655 Not tainted syzkaller #0 [ 465.064953][T15514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.075028][T15514] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 465.081903][T15514] Code: 7c 2d 00 00 74 08 48 89 df e8 cc 0e 18 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 55 38 81 00 e8 c0 b2 c6 f7 <0f> 0b eb c5 48 c7 c1 e4 06 01 8f 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 465.101540][T15514] RSP: 0018:ffffc900043e7188 EFLAGS: 00010246 [ 465.107623][T15514] RAX: ffffffff89bb93c0 RBX: ffff88802f92d5a8 RCX: 0000000000080000 [ 465.115596][T15514] RDX: ffffc9000df09000 RSI: 000000000007ffff RDI: 0000000000080000 [ 465.123568][T15514] RBP: 0000000000000000 R08: ffffffff8f00d22f R09: 1ffffffff1e01a45 [ 465.131530][T15514] R10: dffffc0000000000 R11: fffffbfff1e01a46 R12: ffff88802f92eab0 [ 465.139517][T15514] R13: 1ffff11005f25ab5 R14: ffff88802f92e228 R15: dffffc0000000000 [ 465.147486][T15514] FS: 00007f0fb01f66c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 465.156478][T15514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.163089][T15514] CR2: 00007fa593f39890 CR3: 000000003b561000 CR4: 00000000003506f0 [ 465.171139][T15514] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 465.179141][T15514] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 465.187130][T15514] Call Trace: [ 465.190395][T15514] [ 465.193343][T15514] ? trace_drv_return_void+0x240/0x240 [ 465.198868][T15514] unregister_netdevice_many_notify+0x13c4/0x1990 [ 465.205385][T15514] ? unregister_netdevice_many+0x20/0x20 [ 465.211008][T15514] ? kernfs_remove_by_name_ns+0x113/0x150 [ 465.216769][T15514] ? __lock_acquire+0x7ea0/0x7ea0 [ 465.221790][T15514] unregister_netdevice_queue+0x2e5/0x330 [ 465.227540][T15514] ? list_netdevice+0x640/0x640 [ 465.232417][T15514] ? kernfs_remove_by_name_ns+0x113/0x150 [ 465.238217][T15514] _cfg80211_unregister_wdev+0x179/0x590 [ 465.244021][T15514] ieee80211_if_remove+0x1ad/0x2b0 [ 465.249147][T15514] ieee80211_del_iface+0x15/0x20 [ 465.254161][T15514] cfg80211_remove_virtual_intf+0x23a/0x440 [ 465.260093][T15514] genl_family_rcv_msg_doit+0x22f/0x350 [ 465.265743][T15514] ? end_current_label_crit_section+0x170/0x170 [ 465.272001][T15514] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 465.277885][T15514] ? bpf_lsm_capable+0x5/0x10 [ 465.282598][T15514] ? security_capable+0x85/0xb0 [ 465.287438][T15514] genl_rcv_msg+0x601/0x790 [ 465.291955][T15514] ? genl_bind+0x360/0x360 [ 465.296359][T15514] ? nl80211_new_interface+0x1000/0x1000 [ 465.302075][T15514] netlink_rcv_skb+0x1ef/0x440 [ 465.306852][T15514] ? genl_bind+0x360/0x360 [ 465.311258][T15514] ? netlink_ack+0x1160/0x1160 [ 465.316040][T15514] ? down_read+0x1a8/0x2d0 [ 465.320447][T15514] genl_rcv+0x24/0x40 [ 465.324440][T15514] netlink_unicast+0x7ad/0x920 [ 465.329195][T15514] netlink_sendmsg+0x8ad/0xbd0 [ 465.333992][T15514] ? netlink_getsockopt+0x550/0x550 [ 465.339178][T15514] ? apparmor_socket_sendmsg+0x8a/0x330 [ 465.344742][T15514] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 465.350082][T15514] ? security_socket_sendmsg+0x7c/0xa0 [ 465.355564][T15514] ? netlink_getsockopt+0x550/0x550 [ 465.360750][T15514] ____sys_sendmsg+0x5ed/0x9a0 [ 465.365592][T15514] ? __sys_sendmsg_sock+0x30/0x30 [ 465.370601][T15514] ? __import_iovec+0x306/0x510 [ 465.375468][T15514] ? import_iovec+0x6f/0xa0 [ 465.379963][T15514] ___sys_sendmsg+0x2a2/0x360 [ 465.384816][T15514] ? __sys_sendmsg+0x2a0/0x2a0 [ 465.389649][T15514] __se_sys_sendmsg+0x1c3/0x2b0 [ 465.394639][T15514] ? __x64_sys_sendmsg+0x80/0x80 [ 465.399576][T15514] ? lockdep_hardirqs_on+0x94/0x140 [ 465.404810][T15514] do_syscall_64+0x4c/0xa0 [ 465.409290][T15514] ? clear_bhb_loop+0x60/0xb0 [ 465.414026][T15514] ? clear_bhb_loop+0x60/0xb0 [ 465.418792][T15514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.424703][T15514] RIP: 0033:0x7f0faf39e199 [ 465.429108][T15514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.448813][T15514] RSP: 002b:00007f0fb01f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.457298][T15514] RAX: ffffffffffffffda RBX: 00007f0faf625fa0 RCX: 00007f0faf39e199 [ 465.465321][T15514] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 465.473414][T15514] RBP: 00007f0faf435888 R08: 0000000000000000 R09: 0000000000000000 [ 465.481375][T15514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.489385][T15514] R13: 00007f0faf626038 R14: 00007f0faf625fa0 R15: 00007ffc4493e7f8 [ 465.497378][T15514] [ 465.500398][T15514] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 465.507663][T15514] CPU: 0 PID: 15514 Comm: syz.4.3655 Not tainted syzkaller #0 [ 465.515128][T15514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.525267][T15514] Call Trace: [ 465.528532][T15514] [ 465.531446][T15514] dump_stack_lvl+0x188/0x24e [ 465.536112][T15514] ? memcpy+0x3c/0x60 [ 465.540077][T15514] ? show_regs_print_info+0x12/0x12 [ 465.545264][T15514] ? load_image+0x410/0x410 [ 465.549761][T15514] panic+0x2d3/0x710 [ 465.553659][T15514] ? bpf_jit_dump+0xd0/0xd0 [ 465.558217][T15514] __warn+0x2f8/0x4f0 [ 465.562205][T15514] ? ieee80211_link_release_channel+0x150/0x180 [ 465.568434][T15514] ? ieee80211_link_release_channel+0x150/0x180 [ 465.574657][T15514] report_bug+0x2ba/0x4f0 [ 465.578970][T15514] ? ieee80211_link_release_channel+0x150/0x180 [ 465.585223][T15514] handle_bug+0x3a/0x70 [ 465.589560][T15514] exc_invalid_op+0x16/0x40 [ 465.594072][T15514] asm_exc_invalid_op+0x16/0x20 [ 465.598913][T15514] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 465.605766][T15514] Code: 7c 2d 00 00 74 08 48 89 df e8 cc 0e 18 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 55 38 81 00 e8 c0 b2 c6 f7 <0f> 0b eb c5 48 c7 c1 e4 06 01 8f 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 465.625374][T15514] RSP: 0018:ffffc900043e7188 EFLAGS: 00010246 [ 465.631431][T15514] RAX: ffffffff89bb93c0 RBX: ffff88802f92d5a8 RCX: 0000000000080000 [ 465.639381][T15514] RDX: ffffc9000df09000 RSI: 000000000007ffff RDI: 0000000000080000 [ 465.647334][T15514] RBP: 0000000000000000 R08: ffffffff8f00d22f R09: 1ffffffff1e01a45 [ 465.655288][T15514] R10: dffffc0000000000 R11: fffffbfff1e01a46 R12: ffff88802f92eab0 [ 465.663261][T15514] R13: 1ffff11005f25ab5 R14: ffff88802f92e228 R15: dffffc0000000000 [ 465.671225][T15514] ? ieee80211_link_release_channel+0x150/0x180 [ 465.677467][T15514] ? ieee80211_link_release_channel+0x150/0x180 [ 465.683691][T15514] ? trace_drv_return_void+0x240/0x240 [ 465.689155][T15514] unregister_netdevice_many_notify+0x13c4/0x1990 [ 465.695561][T15514] ? unregister_netdevice_many+0x20/0x20 [ 465.701189][T15514] ? kernfs_remove_by_name_ns+0x113/0x150 [ 465.706895][T15514] ? __lock_acquire+0x7ea0/0x7ea0 [ 465.711906][T15514] unregister_netdevice_queue+0x2e5/0x330 [ 465.717611][T15514] ? list_netdevice+0x640/0x640 [ 465.722444][T15514] ? kernfs_remove_by_name_ns+0x113/0x150 [ 465.728145][T15514] _cfg80211_unregister_wdev+0x179/0x590 [ 465.733801][T15514] ieee80211_if_remove+0x1ad/0x2b0 [ 465.739345][T15514] ieee80211_del_iface+0x15/0x20 [ 465.744264][T15514] cfg80211_remove_virtual_intf+0x23a/0x440 [ 465.750143][T15514] genl_family_rcv_msg_doit+0x22f/0x350 [ 465.755681][T15514] ? end_current_label_crit_section+0x170/0x170 [ 465.761913][T15514] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 465.767797][T15514] ? bpf_lsm_capable+0x5/0x10 [ 465.772455][T15514] ? security_capable+0x85/0xb0 [ 465.777290][T15514] genl_rcv_msg+0x601/0x790 [ 465.781789][T15514] ? genl_bind+0x360/0x360 [ 465.786206][T15514] ? nl80211_new_interface+0x1000/0x1000 [ 465.791837][T15514] netlink_rcv_skb+0x1ef/0x440 [ 465.796582][T15514] ? genl_bind+0x360/0x360 [ 465.800982][T15514] ? netlink_ack+0x1160/0x1160 [ 465.805737][T15514] ? down_read+0x1a8/0x2d0 [ 465.810147][T15514] genl_rcv+0x24/0x40 [ 465.814110][T15514] netlink_unicast+0x7ad/0x920 [ 465.818863][T15514] netlink_sendmsg+0x8ad/0xbd0 [ 465.823612][T15514] ? netlink_getsockopt+0x550/0x550 [ 465.828794][T15514] ? apparmor_socket_sendmsg+0x8a/0x330 [ 465.834342][T15514] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 465.839609][T15514] ? security_socket_sendmsg+0x7c/0xa0 [ 465.845064][T15514] ? netlink_getsockopt+0x550/0x550 [ 465.850245][T15514] ____sys_sendmsg+0x5ed/0x9a0 [ 465.855004][T15514] ? __sys_sendmsg_sock+0x30/0x30 [ 465.860028][T15514] ? __import_iovec+0x306/0x510 [ 465.864885][T15514] ? import_iovec+0x6f/0xa0 [ 465.869386][T15514] ___sys_sendmsg+0x2a2/0x360 [ 465.874047][T15514] ? __sys_sendmsg+0x2a0/0x2a0 [ 465.878819][T15514] __se_sys_sendmsg+0x1c3/0x2b0 [ 465.883650][T15514] ? __x64_sys_sendmsg+0x80/0x80 [ 465.888578][T15514] ? lockdep_hardirqs_on+0x94/0x140 [ 465.893766][T15514] do_syscall_64+0x4c/0xa0 [ 465.898163][T15514] ? clear_bhb_loop+0x60/0xb0 [ 465.902837][T15514] ? clear_bhb_loop+0x60/0xb0 [ 465.907513][T15514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.913401][T15514] RIP: 0033:0x7f0faf39e199 [ 465.917799][T15514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.937386][T15514] RSP: 002b:00007f0fb01f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.945780][T15514] RAX: ffffffffffffffda RBX: 00007f0faf625fa0 RCX: 00007f0faf39e199 [ 465.953733][T15514] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 465.961710][T15514] RBP: 00007f0faf435888 R08: 0000000000000000 R09: 0000000000000000 [ 465.969661][T15514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.977615][T15514] R13: 00007f0faf626038 R14: 00007f0faf625fa0 R15: 00007ffc4493e7f8 [ 465.985576][T15514] [ 465.988667][T15514] Kernel Offset: disabled [ 465.993112][T15514] Rebooting in 86400 seconds..