last executing test programs: 17m17.023978525s ago: executing program 32 (id=1093): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_io_uring_setup(0xdf3, &(0x7f0000000040)={0x0, 0x5066, 0x10000, 0x3, 0x333}, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xc, 0x0, r2, 0x400, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) syz_mount_image$vfat(&(0x7f0000008140), &(0x7f0000008180)='./file0\x00', 0x0, &(0x7f00000081c0), 0x1, 0x8130, &(0x7f0000008200)="$eJzs3D+LY1UcBuCfbnTjyG6mEEFBPGijzWUzhZVNkFmQDSi7G2FHEO44NxpyTYbcMBARZzoLG7HxO4ilnSB+gWnEj2A3jeUUYmQSnX/EQpS5LPM8TV44eeGc5nLh3HOO3vzqk2G/yvr5NJ5sNqNxEBHHKVI04kaceCIO4vWvv/zlpQePtu51ut3N+ynd7Txsv5FSuv3yj+9/9t0rP02ffe/72z/cjMP1D45+2/j18PnDF47+ePjxoEqDKo3G05Sn7fF4mm+XRdoZVMMspXfLIq+KNBhVxeTCeL8c7+7OUj7aubW2OymqKuWjWRoWszQdp+lklvKP8sEoZVmWbq0F/0Xv27pnAAAAwNU4ns/nEfOFm9FcpLrnBAAAAAAAAAAAAAAAAAAAANeN8/8AAAAAAAAAAAAAAAAAAABQP+f/AQAAAAAAAAAAAAAAAAAAoH7O/wMAAAAAAAAAAAAAAAAAAED9Hjzautfpdjfvp9SMKL/Y6+31lr/L8U4/BlFGEXeiFb//fVPA/PTWgLtvdzfvpIX1+Kbc/6u/v9e7cbHfjlasr+63l/10sf9UrJ3vb0Qrnlvd31jZfzpee/VcP4tW/PxhjKOMnTjpnvU/b6f01jvdS/1nFv8DAAAAAAAAgMdBlk6t3L/Psn8aX/b/xfcBl/bXG/Fio961AwAAwHVRzT4d5mVZTARBEE5D3U8mAADg/3b20l/3TAAAAAAAAAAAAAAAAAAAAOD6uorrxOpeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAACC/K1XGKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKgAA///5cu/6") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mlockall(0x5) 11m30.795790854s ago: executing program 2 (id=2827): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x11, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4b2aac3ff15cd61, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 11m29.560354166s ago: executing program 2 (id=2831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0xa0000681) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r5, 0x2007ffc) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x14000080) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file2\x00', 0x800, &(0x7f0000000440)=ANY=[], 0x1, 0x1c7, &(0x7f0000001ec0)="$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") ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000300)={{r0}, 0x0, 0x0, 0x5, 0x2}) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x3, 0x5003) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') read$FUSE(r6, &(0x7f0000003c80)={0x2020}, 0xfffffceb) 11m28.063885814s ago: executing program 2 (id=2836): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aa0100aa"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000000300)}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x121602, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00000000000000f8ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000600), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1a, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000) 11m25.803162909s ago: executing program 2 (id=2841): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000a00)=""/194, 0xc2}], 0x1, 0xab, 0x0) 11m23.740885405s ago: executing program 2 (id=2845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xb, 0xffe1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 11m22.107327437s ago: executing program 2 (id=2850): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r2, r2, 0x0, 0xe3aa6ea) 11m7.050252235s ago: executing program 33 (id=2850): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r2, r2, 0x0, 0xe3aa6ea) 7m38.893635366s ago: executing program 4 (id=3502): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4c801}, 0x4040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff020000000000000000000000000001000000000000000000000000000000000400"], 0xc0}}, 0x0) 7m36.180178358s ago: executing program 4 (id=3510): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x11, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4b2aac3ff15cd61, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m34.559605469s ago: executing program 4 (id=3514): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010001000000", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x20000000) 7m34.360275882s ago: executing program 4 (id=3516): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='l', 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x11a) ioctl(0xffffffffffffffff, 0xc138fd06, &(0x7f0000000680)="04000000000000") 7m32.413782764s ago: executing program 4 (id=3522): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x2}, @window={0x3, 0x7, 0x7}, @mss={0x2, 0x7}, @timestamp, @timestamp, @sack_perm, @sack_perm], 0x7) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000400)="b4", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 7m32.047749538s ago: executing program 4 (id=3526): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xffffffff}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x811) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f00000001c0), 0x2000000}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="3485b3009e2fde3a05f7b4f7d8245d10cbd43732a6460ea87ec82951b76109606039fa3b6b03852fe535c44e68faf2677370cb634d000ececb292df968b3a9efa3512bb0a8c9ddb4223819965a5cfadb729405fd4e729c7b94748440e8a02f81a9db0b05dff11792", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf25010000000800010000000000080002000200000008000200020000000800010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) 7m16.844809387s ago: executing program 34 (id=3526): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xffffffff}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x811) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f00000001c0), 0x2000000}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="3485b3009e2fde3a05f7b4f7d8245d10cbd43732a6460ea87ec82951b76109606039fa3b6b03852fe535c44e68faf2677370cb634d000ececb292df968b3a9efa3512bb0a8c9ddb4223819965a5cfadb729405fd4e729c7b94748440e8a02f81a9db0b05dff11792", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf25010000000800010000000000080002000200000008000200020000000800010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) 6m7.110215776s ago: executing program 7 (id=3722): faccessat2(0xffffffffffffff9c, 0x0, 0x7, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x100000f, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 6m2.150971471s ago: executing program 7 (id=3734): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0xb1, 0x4, 0x40, @empty, @empty}}}}}}}, 0x0) 6m2.012538064s ago: executing program 7 (id=3736): ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0x1, 0xfffffffa}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000020000000b70400000000000085000000c3000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x7ffffffffffffffd, 0x34b}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x1010080, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66649a3621dd5fc90d94552c727f646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',debug=0x0000000000000081,dfltuid=', @ANYRESHEX, @ANYBLOB=',obj_role=&%&,obj_type=nfs\x00,fscontext=root,subj_role=,k']) r9 = syz_open_procfs(r6, &(0x7f0000000340)='mounts\x00') lseek(r9, 0x10001, 0x0) 6m0.583782488s ago: executing program 5 (id=3739): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x2}, @window={0x3, 0x7, 0x7}, @mss={0x2, 0x8}, @mss={0x2, 0x7}, @timestamp, @timestamp, @sack_perm, @sack_perm], 0x8) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000400)="b4", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 6m0.057392769s ago: executing program 5 (id=3741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 5m58.92864746s ago: executing program 7 (id=3742): getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000153d3bbbc17960e3fd9062ee5d6b49", @ANYRESHEX, @ANYBLOB="000129bd7000fedbdf253100000008000100130000000800db", @ANYRES32, @ANYRES32, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="080001006b0000000c009900ffffff7f7800", @ANYRES32=r0, @ANYBLOB="080003", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0xc0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000001000001140004000000"], 0xb8}}, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 5m58.529399996s ago: executing program 5 (id=3744): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fc0200000000000000000000850000002c00000085000000a000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000280), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5m56.96576543s ago: executing program 7 (id=3747): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x48, 0x83, 0x0, 0x7ffffffd}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000340)=0x10) 5m56.860627887s ago: executing program 5 (id=3749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/83, 0x53}, {0x0}, {&(0x7f0000001580)=""/175, 0xaf}, {&(0x7f0000001740)=""/191, 0xbf}], 0x5}, 0x1}], 0x4, 0x0, 0x0) 5m56.201605916s ago: executing program 7 (id=3750): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xffffffff}, 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="3485b3009e2fde3a05f7b4f7d8245d10cbd43732a6460ea87ec82951b76109606039fa3b6b03852fe535c44e68faf2677370cb634d000ececb292df968b3a9efa3512bb0a8c9ddb4223819965a5cfadb729405fd4e729c7b94748440e8a02f81a9db0b05dff11792", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf25010000000800010000000000080002000200000008000200020000000800010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) 5m55.992979806s ago: executing program 5 (id=3751): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000073, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) r1 = socket$kcm(0x10, 0x2, 0x0) mount$bpf(0x0, 0x0, 0x0, 0xc, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 5m53.080327919s ago: executing program 5 (id=3757): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xffffffff}, 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="3485b3009e2fde3a05f7b4f7d8245d10cbd43732a6460ea87ec82951b76109606039fa3b6b03852fe535c44e68faf2677370cb634d000ececb292df968b3a9efa3512bb0a8c9ddb4223819965a5cfadb729405fd4e729c7b94748440e8a02f81a9db0b05dff11792", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf25010000000800010000000000080002000200000008000200020000000800010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) 5m40.875837908s ago: executing program 35 (id=3750): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xffffffff}, 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="3485b3009e2fde3a05f7b4f7d8245d10cbd43732a6460ea87ec82951b76109606039fa3b6b03852fe535c44e68faf2677370cb634d000ececb292df968b3a9efa3512bb0a8c9ddb4223819965a5cfadb729405fd4e729c7b94748440e8a02f81a9db0b05dff11792", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf25010000000800010000000000080002000200000008000200020000000800010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) 5m37.870775935s ago: executing program 36 (id=3757): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xffffffff}, 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="3485b3009e2fde3a05f7b4f7d8245d10cbd43732a6460ea87ec82951b76109606039fa3b6b03852fe535c44e68faf2677370cb634d000ececb292df968b3a9efa3512bb0a8c9ddb4223819965a5cfadb729405fd4e729c7b94748440e8a02f81a9db0b05dff11792", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf25010000000800010000000000080002000200000008000200020000000800010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) 9.234191034s ago: executing program 0 (id=4804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) 8.798398576s ago: executing program 0 (id=4808): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_pidfd_open(r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000002c0), 0x200, 0x8001) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f93000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000239000/0x1000)=nil, &(0x7f0000a46000/0x1000)=nil, &(0x7f0000444000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24050095) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20) io_uring_enter(r2, 0x2219, 0xcf74, 0x52, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80004}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 7.428231052s ago: executing program 8 (id=4816): r0 = fsopen(&(0x7f0000000400)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0x8000, &(0x7f0000000980)={0xf}, 0x20) 7.103834655s ago: executing program 8 (id=4819): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x72) 6.701076392s ago: executing program 6 (id=4822): bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0xc, 0x7, 0x0, &(0x7f0000001a00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.5380842s ago: executing program 1 (id=4823): io_setup(0x8, &(0x7f0000000540)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000004c0)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a00", 0x20) 6.438903692s ago: executing program 6 (id=4824): ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x20003a, 0x801, 0xf84, 0x3}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x1, 0x100) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002b40)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000002bc0)=0x10, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r3 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r3, 0x6, 0x1, 0x0, r3, 0x1) 6.381569218s ago: executing program 8 (id=4825): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000480)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 6.381214686s ago: executing program 3 (id=4826): ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x20003a, 0x801, 0xf84, 0x3}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x1, 0x100) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002b40)=0x10, 0x4) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x8040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002c00)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r3 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r3, 0x6, 0x1, 0x0, r3, 0x1) 6.322192007s ago: executing program 9 (id=4827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0xffff0001, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f00000002c0)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000440)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f00000007c0)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000b00)="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", 0x7cd}], 0x5}, 0x0) 5.990370293s ago: executing program 1 (id=4828): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x20000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1d}, 0x12, r2}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24058045) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') getdents(r3, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000921) read(r4, 0x0, 0x0) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 5.803454262s ago: executing program 9 (id=4829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x34}}, 0x0) 5.368959378s ago: executing program 9 (id=4830): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x28}}, 0x0) 5.298329373s ago: executing program 1 (id=4831): r0 = fsopen(&(0x7f0000000400)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0x8000, &(0x7f0000000980)={0xf}, 0x20) 4.790903805s ago: executing program 8 (id=4832): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000004c0)={0x11, 0x300, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a00", 0x20) 4.641784252s ago: executing program 1 (id=4834): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000480)=0x79, 0x4) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="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", 0x17e}, {0x0}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000008c0)=0xdf8, 0x4) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000940)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb9df7231e2e643ecb223f032a1ae299327d7156236f0edc44c4c268168596acd7c225338921f9e7b97e55fd594eaa95067216139cad3915f76f9cf17d61", 0xb2}, {&(0x7f0000000a00)="135c15194fad5248c52ac1fc08d8399a", 0x10}], 0x2) write(r0, &(0x7f0000000a40)="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", 0x37d) 4.624174258s ago: executing program 3 (id=4835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x40000000, 0x0, &(0x7f0000000800)={0x0, 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r2, &(0x7f00000008c0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000900)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x4, 0x28c, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r2, &(0x7f0000000a00), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) 4.565562329s ago: executing program 9 (id=4836): io_setup(0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a00", 0x20) 4.38371373s ago: executing program 8 (id=4837): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x72) 4.382161962s ago: executing program 1 (id=4838): bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0xc, 0x7, 0x0, &(0x7f0000001a00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.181949482s ago: executing program 6 (id=4839): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000280)={&(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@zcopy_cookie={0x18}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x2}}], 0x48, 0x20040844}, 0x4000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000480)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 4.162470539s ago: executing program 3 (id=4840): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x40000000, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r2, &(0x7f00000008c0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000900)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x4, 0x28c, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r2, &(0x7f0000000a00), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) 4.111378322s ago: executing program 1 (id=4841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0xffff0001, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f00000002c0)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000440)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f00000007c0)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000b00)="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", 0x7cd}], 0x5}, 0x0) 4.099349667s ago: executing program 9 (id=4842): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000900), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000940)=ANY=[@ANYBLOB='permprofile :+%%:'], 0x12) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0xff) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e2}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x6, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8000, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) 3.942766554s ago: executing program 0 (id=4843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x34}}, 0x0) 2.864321721s ago: executing program 6 (id=4844): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x1, 0x100) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002b40)=0x10, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r3 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r3, 0x6, 0x1, 0x0, r3, 0x1) 2.681522411s ago: executing program 8 (id=4846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a00", 0x20) 2.474496975s ago: executing program 3 (id=4847): r0 = fsopen(&(0x7f0000000400)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0x8000, &(0x7f0000000980)={0xf}, 0x20) 2.199086006s ago: executing program 6 (id=4848): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x28}}, 0x0) 2.042397066s ago: executing program 3 (id=4849): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000280)={@broadcast, @remote}, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x28642, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) ioctl$TIOCMGET(r2, 0x5415, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000900)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002200), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000300)=ANY=[], 0x8) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000) 1.298039037s ago: executing program 3 (id=4850): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc8c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newqdisc={0x98, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x1ff, 0x4, 0x0, 0x1, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x1, 0x200, 0x400003}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x1, 0x39de}}]}]}}}]}, 0x98}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 1.291459575s ago: executing program 0 (id=4851): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@block_validity}, {@nodiscard}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}], [{@dont_measure}, {@audit}]}, 0x3, 0x509, &(0x7f0000001840)="$eJzs3E1sVNUeAPD/nWlp+Xr08Xi8B6JW0dhIbKGgsDBRjCYuNDFioi6bthCkUENLIgR12ODSkLg3Lt26cKtuiGFl4haXJoaEGDaACXHMnbm3nU5nph9MZ4D+fsl0zrl37j3n3HPPnXPP6Z0A1q3B9E9SDV+PiG0RUaj/wGD17c6ti+N3b10cj1K5fOzPpLLZ7TSeyXYTm7PIUCHi1TSQLE535vyFU2NTU5Nns/jI7OmPR2bOX3jhZH+25MiRQwcPHH5p9MWVF6pBemm5bu/+bHrPrjc/vPL2eE++PE+tthztMhiDjbJS8Wy7E+uyrTXhpKeLGWFF0vM/ra7eSvvfFsVoVXmlDuYMWGvlcrnc13x1qVzv0qIlwEMr+rudA6A78i/69P43fzXqCGxYm+5H1908Wr0BSst9J3tFPFlZmI+D9Nbd37bTYER8UPrr6/QVzcYhimuUOACwLv14NO8J1vX/BqozI/fOXX0lff9XNocyEBH/jojtEfGfiNgREf+NiJ0R8b+I+H/d/tOuS7lF+oN18bn05yahCjfaVNSG0v7fy9nc1nz/b0EGBopZbGtE3mGe3J8dk6Ho7Tt+cmryQIs0fnr91y+brav0/9KdZ33ANP28L5jl40ZP3QDdxNjs2KoLXOfmpYjdPfXlT3oikrmZgCQidkXE7hXsd6AmfPL5b/fMRXoXfq62/9u4/BXlhvNobZhnKn8T8Vwk9+7culiKBfU/n2KyYH7y9NiJyROTZ0bn5idH+mNqcv9Iehbsb5jGtV8uv9Ms/SXL//3v9Zu8cfiHY227KUjrf1PN+R/5/O18+QeSiGRuvnamZuMjy0vj8m9fNJ1bXbr+G5//G5L3KuH8vvSTsdnZswciNiRvLV4+Or9tHk/foxTFtPxDexu3/+3ZNumReCwi0pP48Yh4Iqp3iGnen4qIpyNib4vy//zaMx+tuPyFFjtso7T8E3XXv2rNL6j/+fn6ZoEkmxtssKp4qvf63SYXj+XV/6FKaChbMn/9q52PTBZcIprlNP+2S5f83ZYjCAAAAA++QkRsqRlL2hKFwvBwdQxoR2wqTE3PzO47Pn3uzES6LmIgegv5SFd1PLg3ycc/B2rio3Xxg9m48VfFjZX48Pj01ERXSw5srrT5pDAc8X6xpv2n/vB/J/Do87wWrF+t2n/aid95pYOZATpq+d//Vz9d04wAHVfT/ps94V+a6VRmgI5y/w/MW/qHflwz4OFX1pZhXVtR+9/nRwDhUdIT786FO/TcIfCAWG3///M25wPoqCWe6+9r+iD9sgLlvsar+mPxh6O/9Q6LsbpsbGyQVlcCac+qK6lvXM1W+a8pNP1MFFa2w75oT50ev8+jUTo7c2Lnsk7+lQTK2f/Kt7sGv2veTq/1taid+w905XIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQdv8EAAD///Pm3lQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000240)=0x8, 0x4) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@nested={0x4, 0xd8}]}, 0x18}}, 0x800) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x2, 0x8010, r4, 0x62fb3000) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000001640)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0, @ANYRES16, @ANYRESOCT=r2, @ANYBLOB="621df7484119a8e68750f898534ead59a145fc2bc19cd14161f180c7b396b4f054cadc9d2bd2b29be1aaf704ed9a097bf210caa841e3cbe8070c7d0f5f9334e8d8f65079347fbc6584df22ac0d2aef0799facbe7f756499a6f18919e7bae05110f220ff27da11be12487372fae18d309cb104f347edb5c5ce96c644823c609581f70a06ae465aa4b924087d6ddc708fc9ec06e7687f96f018f6acaa5019a18f80db5e9ea409dfa08c1f1a1eee5197423b3b878d8c00dcc484ae3b190690b47ce4a8503d6f1488d17a28fe6", @ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYRESDEC], 0x2, 0x576, &(0x7f00000006c0)="$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") r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000000)={0x0, 0x4, 0xfffffff7, 0x9, 0x101, 0xff, 0x8001, 0x0, 0x7, 0x8, 0x45a, 0x1}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x1) ioctl$RTC_PLL_GET(r5, 0x80207011, &(0x7f0000000480)) rename(0x0, &(0x7f0000000180)='./file1\x00') 307.244849ms ago: executing program 9 (id=4852): io_setup(0x8, &(0x7f0000000540)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a00", 0x20) 0s ago: executing program 0 (id=4853): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000900), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000940)=ANY=[@ANYBLOB='permprofile :+%%:'], 0x12) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0xff) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e2}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8000, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) kernel console output (not intermixed with test programs): -1: new high-speed USB device number 2 using dummy_hcd [ 1081.572589][T17365] EXT4-fs error (device loop7): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 1081.692493][ T5657] usb 6-1: Using ep0 maxpacket: 32 [ 1081.843560][ T5657] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1081.851921][ T5657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.852085][ T5657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.931317][ T5657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.962790][ T5657] usb 6-1: config 0 descriptor?? [ 1082.002177][ T5657] hub 6-1:0.0: USB hub found [ 1082.450498][T15065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.637519][ T5657] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1082.646581][ T5657] usbhid 6-1:0.0: can't add hid device: -71 [ 1082.646699][ T5657] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1082.672036][ T5657] usb 6-1: USB disconnect, device number 2 [ 1082.941184][T17374] syzkaller0: entered promiscuous mode [ 1082.941219][T17374] syzkaller0: entered allmulticast mode [ 1083.397523][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3452'. [ 1083.548900][T17381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 1085.724845][ T5658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1085.729442][ T5658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1085.730250][ T5658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1085.731841][ T5658] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1085.778552][ T5658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1086.057170][T17410] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3459'. [ 1087.852402][ T5658] Bluetooth: hci0: command tx timeout [ 1088.063666][T17445] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1089.291612][T17400] wg0 speed is unknown, defaulting to 1000 [ 1089.937698][ T5658] Bluetooth: hci0: command tx timeout [ 1092.012376][ T5658] Bluetooth: hci0: command tx timeout [ 1094.486036][ T5658] Bluetooth: hci0: command tx timeout [ 1095.151773][T17513] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1096.460022][T17400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.461964][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.462153][T17400] bridge_slave_0: entered allmulticast mode [ 1097.017717][T17400] bridge_slave_0: entered promiscuous mode [ 1097.054363][T17400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.054569][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.054752][T17400] bridge_slave_1: entered allmulticast mode [ 1097.081336][T17400] bridge_slave_1: entered promiscuous mode [ 1098.306926][T17400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.414278][T17400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.539942][T17400] team0: Port device team_slave_0 added [ 1098.551232][T17400] team0: Port device team_slave_1 added [ 1101.132059][T17400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.132085][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.132133][T17400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.135909][T17400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.135930][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.135975][T17400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.258005][T17568] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1103.384078][T17400] hsr_slave_0: entered promiscuous mode [ 1103.385326][T17400] hsr_slave_1: entered promiscuous mode [ 1103.388113][T17400] debugfs: 'hsr0' already exists in 'hsr' [ 1103.388141][T17400] Cannot create hsr debugfs directory [ 1105.153148][T17605] loop5: detected capacity change from 0 to 512 [ 1105.337065][T17605] EXT4-fs (loop5): 1 truncate cleaned up [ 1105.356440][T17605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1105.519539][T17611] EXT4-fs error (device loop5): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 1106.807983][T16168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.290487][T17639] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1109.124900][T17653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 1109.332426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 1110.507931][T17672] loop7: detected capacity change from 0 to 2048 [ 1110.522557][T17672] udf: Unknown parameter 'ÿÿÿÿÿÿ' [ 1112.067650][T17400] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1112.681739][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1112.776448][T17400] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1113.469634][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1113.473151][T17400] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1113.505785][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1113.509489][T17400] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1113.546243][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1114.004572][T17400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.037432][T17400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.080568][T14374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.080697][T14374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.120951][ T5679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.121078][ T5679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.215100][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.215178][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.511164][T17709] loop7: detected capacity change from 0 to 512 [ 1115.588595][T17709] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1115.589358][T17709] EXT4-fs error (device loop7) in ext4_process_orphan:346: Out of memory [ 1115.589392][T17709] loop7: lost filesystem error report for type 5 error -12 [ 1115.590285][T17709] EXT4-fs (loop7): 1 truncate cleaned up [ 1115.635132][T17709] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.222492][T17716] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1116.223870][T17716] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1116.949841][T15065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.012377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1117.457580][T17735] loop7: detected capacity change from 0 to 8 [ 1117.486340][T17734] fuse: fd is not a fuse device [ 1117.519089][T17735] squashfs image failed sanity check [ 1117.709625][T17400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.847239][T17400] veth0_vlan: entered promiscuous mode [ 1117.909161][T17400] veth1_vlan: entered promiscuous mode [ 1117.965072][T17400] veth0_macvtap: entered promiscuous mode [ 1117.970676][T17400] veth1_macvtap: entered promiscuous mode [ 1118.078058][T17400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.113844][T17400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1118.144437][ T5684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.239364][T14374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.239796][T14374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.240184][T14374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.430784][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.430834][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.553062][T14374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.554608][T14374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.703873][T17743] loop0: detected capacity change from 0 to 512 [ 1120.887607][T17776] loop7: detected capacity change from 0 to 512 [ 1121.648033][T17776] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1121.648570][T17776] EXT4-fs error (device loop7) in ext4_process_orphan:346: Out of memory [ 1121.648622][T17776] loop7: lost filesystem error report for type 5 error -12 [ 1121.650129][T17776] EXT4-fs (loop7): 1 truncate cleaned up [ 1121.667807][T17776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.867222][T15065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.561218][T17804] loop7: detected capacity change from 0 to 512 [ 1125.806751][ T5658] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1125.823159][ T5658] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1125.824681][ T5658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1125.850137][ T5658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1125.880817][ T5658] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1126.089014][T17809] syzkaller0: entered promiscuous mode [ 1126.089048][T17809] syzkaller0: entered allmulticast mode [ 1127.957481][ T5663] Bluetooth: hci5: command tx timeout [ 1127.975506][T17851] loop0: detected capacity change from 0 to 512 [ 1128.030750][T17851] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1128.031419][T17851] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 1128.031453][T17851] loop0: lost filesystem error report for type 5 error -12 [ 1128.032291][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1128.032321][ C1] EXT4-fs (loop0): initial error at time 1791651099: ext4_process_orphan:346 [ 1128.032396][ C1] EXT4-fs (loop0): last error at time 1791651099: ext4_process_orphan:346 [ 1128.041125][T17851] EXT4-fs (loop0): 1 truncate cleaned up [ 1128.049239][T17851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1129.311069][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.442040][T17862] loop7: detected capacity change from 0 to 512 [ 1129.546038][T17862] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1129.547372][T17862] EXT4-fs error (device loop7) in ext4_process_orphan:346: Out of memory [ 1129.547406][T17862] loop7: lost filesystem error report for type 5 error -12 [ 1129.548311][T17862] EXT4-fs (loop7): 1 truncate cleaned up [ 1129.589340][T17862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.012548][ T5663] Bluetooth: hci5: command tx timeout [ 1130.698150][T15065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.096911][ T5663] Bluetooth: hci5: command tx timeout [ 1132.415626][T17894] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3581'. [ 1132.638657][T17897] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3582'. [ 1133.554068][T17908] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1133.768845][T17915] loop5: detected capacity change from 0 to 8 [ 1133.813937][T17915] squashfs image failed sanity check [ 1134.841051][ T5663] Bluetooth: hci5: command tx timeout [ 1135.475628][T17930] loop7: detected capacity change from 0 to 512 [ 1136.989901][T17827] wg0 speed is unknown, defaulting to 1000 [ 1137.048214][T17942] syzkaller0: entered promiscuous mode [ 1137.048249][T17942] syzkaller0: entered allmulticast mode [ 1138.305627][T17952] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3598'. [ 1138.901936][T17971] syzkaller1: entered promiscuous mode [ 1138.901969][T17971] syzkaller1: entered allmulticast mode [ 1139.245255][T15957] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1139.392376][T15957] usb 8-1: Using ep0 maxpacket: 32 [ 1139.393261][T15957] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1139.394963][T15957] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.395011][T15957] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.395067][T15957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.454385][T15957] usb 8-1: config 0 descriptor?? [ 1139.478855][T15957] hub 8-1:0.0: USB hub found [ 1140.269675][T15957] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1140.767655][T15957] usbhid 8-1:0.0: can't add hid device: -71 [ 1140.767789][T15957] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1140.804366][T15957] usb 8-1: USB disconnect, device number 2 [ 1142.665168][T18013] loop5: detected capacity change from 0 to 8 [ 1142.681031][T18013] squashfs image failed sanity check [ 1143.621118][T17827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.622528][T17827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.622714][T17827] bridge_slave_0: entered allmulticast mode [ 1143.624854][T17827] bridge_slave_0: entered promiscuous mode [ 1143.662315][T17827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.666652][T17827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.666828][T17827] bridge_slave_1: entered allmulticast mode [ 1143.669845][T17827] bridge_slave_1: entered promiscuous mode [ 1143.947645][T18027] loop7: detected capacity change from 0 to 8 [ 1143.948103][T17827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.977216][T17827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.977332][T18027] squashfs image failed sanity check [ 1144.337952][T17827] team0: Port device team_slave_0 added [ 1144.547115][T17827] team0: Port device team_slave_1 added [ 1146.046736][T17827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.046763][T17827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.046811][T17827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.049025][T17827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.049048][T17827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.049096][T17827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.224586][T17827] hsr_slave_0: entered promiscuous mode [ 1146.225727][T17827] hsr_slave_1: entered promiscuous mode [ 1146.226532][T17827] debugfs: 'hsr0' already exists in 'hsr' [ 1146.226569][T17827] Cannot create hsr debugfs directory [ 1147.210915][T18055] loop7: detected capacity change from 0 to 512 [ 1148.252940][T17827] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1148.423631][T17827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1148.425959][T17827] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1148.466585][T17827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1148.469708][T17827] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1148.511314][T17827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1148.524322][T17827] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1148.545605][T17827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1148.793618][T17827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.866930][T17827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.905568][ T5679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.905697][ T5679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.946394][ T5679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.946521][ T5679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.668953][T18082] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 1149.949574][T18095] loop0: detected capacity change from 0 to 8 [ 1149.971282][T18095] squashfs image failed sanity check [ 1151.129858][T18104] loop5: detected capacity change from 0 to 512 [ 1151.312058][T18104] EXT4-fs error (device loop5): ext4_xattr_inode_iget:470: comm syz.5.3631: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 1151.312133][T18104] loop5: lost filesystem error report for type 5 error -117 [ 1151.312312][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1151.312342][ C1] EXT4-fs (loop5): initial error at time 1791651123: ext4_xattr_inode_iget:470 [ 1151.312380][ C1] EXT4-fs (loop5): last error at time 1791651123: ext4_xattr_inode_iget:470 [ 1151.382558][T18104] EXT4-fs (loop5): Remounting filesystem read-only [ 1151.382676][T18104] EXT4-fs (loop5): 1 orphan inode deleted [ 1151.392989][T18104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1151.929088][T16168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.389143][T18118] loop5: detected capacity change from 0 to 512 [ 1152.455344][T18118] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1152.462033][T18118] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 1152.462067][T18118] loop5: lost filesystem error report for type 5 error -12 [ 1152.462280][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1152.462309][ C0] EXT4-fs (loop5): initial error at time 1791651124: ext4_process_orphan:346 [ 1152.462348][ C0] EXT4-fs (loop5): last error at time 1791651124: ext4_process_orphan:346 [ 1152.476361][T18118] EXT4-fs (loop5): 1 truncate cleaned up [ 1152.485388][T18118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.864395][T18128] loop0: detected capacity change from 0 to 512 [ 1153.575220][T16168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.384646][T17827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.562943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1158.633539][T18178] syzkaller0: entered promiscuous mode [ 1158.633573][T18178] syzkaller0: entered allmulticast mode [ 1159.084275][T18185] syzkaller0: entered promiscuous mode [ 1159.084310][T18185] syzkaller0: entered allmulticast mode [ 1164.295464][T17827] veth0_vlan: entered promiscuous mode [ 1164.360017][T17827] veth1_vlan: entered promiscuous mode [ 1164.425076][T18232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.425717][T18232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.808440][T18235] syzkaller0: entered promiscuous mode [ 1164.808607][T18235] syzkaller0: entered allmulticast mode [ 1164.824651][T17827] veth0_macvtap: entered promiscuous mode [ 1165.112568][T17827] veth1_macvtap: entered promiscuous mode [ 1165.180981][T17827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.189001][T17827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.303521][ T5938] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.568539][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.574436][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.578712][ T5679] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.639542][T18247] loop0: detected capacity change from 0 to 8 [ 1165.687058][T18247] squashfs image failed sanity check [ 1166.922011][T18255] loop5: detected capacity change from 0 to 512 [ 1167.373012][T18261] loop0: detected capacity change from 0 to 512 [ 1167.952853][T18261] EXT4-fs error (device loop0): ext4_xattr_inode_iget:470: comm syz.0.3669: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 1167.952910][T18261] loop0: lost filesystem error report for type 5 error -117 [ 1167.962316][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1167.962348][ C1] EXT4-fs (loop0): initial error at time 1791651139: ext4_xattr_inode_iget:470 [ 1167.962386][ C1] EXT4-fs (loop0): last error at time 1791651139: ext4_xattr_inode_iget:470 [ 1168.098642][T18261] EXT4-fs (loop0): Remounting filesystem read-only [ 1168.099201][T18261] EXT4-fs (loop0): 1 orphan inode deleted [ 1168.163685][T18261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1168.224558][ T5679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.224588][ T5679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.467054][ T5679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.467087][ T5679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.504435][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.005602][T18282] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3674'. [ 1169.205905][T18274] syzkaller0: entered promiscuous mode [ 1169.205962][T18274] syzkaller0: entered allmulticast mode [ 1169.742035][T18288] loop8: detected capacity change from 0 to 512 [ 1169.772179][T18288] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1169.775196][T18288] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1169.797795][T18288] EXT4-fs (loop8): 1 truncate cleaned up [ 1169.806993][T18288] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.134274][T17827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.943495][T18299] loop8: detected capacity change from 0 to 8 [ 1171.055067][T18299] squashfs image failed sanity check [ 1174.030796][T18327] loop5: detected capacity change from 0 to 512 [ 1175.259186][T18335] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1175.329723][ T5658] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1175.346662][ T5658] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1175.347599][ T5658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1175.349429][ T5658] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1175.350173][ T5658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1176.224196][T18348] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 1176.665176][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.665250][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.492472][ T5658] Bluetooth: hci4: command tx timeout [ 1179.316299][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.799538][ T5658] Bluetooth: hci4: command tx timeout [ 1180.450302][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.880376][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.047895][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.197692][T18336] wg0 speed is unknown, defaulting to 1000 [ 1181.854101][ T5658] Bluetooth: hci4: command tx timeout [ 1182.579102][ T12] bridge_slave_1: left allmulticast mode [ 1182.579141][ T12] bridge_slave_1: left promiscuous mode [ 1182.579395][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.673463][ T12] bridge_slave_0: left allmulticast mode [ 1182.673501][ T12] bridge_slave_0: left promiscuous mode [ 1182.673756][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.952347][ T5658] Bluetooth: hci4: command tx timeout [ 1184.512914][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.521079][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.530010][ T12] bond0 (unregistering): Released all slaves [ 1184.548766][ T12] bond1 (unregistering): Released all slaves [ 1184.588007][ T12] bond2 (unregistering): Released all slaves [ 1184.689277][T15957] wg0 speed is unknown, defaulting to 1000 [ 1184.689309][T15957] syz1: Port: 1 Link DOWN [ 1184.690568][T15957] wg0 speed is unknown, defaulting to 1000 [ 1185.562027][T18429] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3704'. [ 1186.986014][T18443] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 1187.772938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1188.525612][T18464] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1189.320741][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1192.650397][T18336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.652168][T18336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.660260][T18336] bridge_slave_0: entered allmulticast mode [ 1192.679835][T18336] bridge_slave_0: entered promiscuous mode [ 1192.758868][ T12] hsr_slave_0: left promiscuous mode [ 1192.775970][ T12] hsr_slave_1: left promiscuous mode [ 1192.776969][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1192.776998][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.798534][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1192.798561][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.886306][ T12] veth1_macvtap: left promiscuous mode [ 1192.888317][ T12] veth0_macvtap: left promiscuous mode [ 1192.888446][ T12] veth1_vlan: left promiscuous mode [ 1192.888533][ T12] veth0_vlan: left promiscuous mode [ 1196.899893][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1196.929039][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1197.715522][ T5684] smc: removing ib device syz1 [ 1198.077530][T18336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.077655][T18336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.077811][T18336] bridge_slave_1: entered allmulticast mode [ 1198.080618][T18336] bridge_slave_1: entered promiscuous mode [ 1198.196869][T18336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.200503][T18336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.220131][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1198.834892][ T5684] smbdirect: ib_dev[syz1] removed [ 1198.899848][T18336] team0: Port device team_slave_0 added [ 1198.936591][T18336] team0: Port device team_slave_1 added [ 1200.055113][T18336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.055141][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.055190][T18336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.765007][T18336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.765035][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.765085][T18336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.223834][T18336] hsr_slave_0: entered promiscuous mode [ 1202.228658][T18336] hsr_slave_1: entered promiscuous mode [ 1202.229486][T18336] debugfs: 'hsr0' already exists in 'hsr' [ 1202.229514][T18336] Cannot create hsr debugfs directory [ 1203.079845][T18604] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3743'. [ 1203.610644][T18609] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3742'. [ 1207.408960][T18649] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 1207.763155][T18641] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3751'. [ 1208.162052][T18668] loop8: detected capacity change from 0 to 512 [ 1209.586226][T18661] Bluetooth: hci2: command 0x0406 tx timeout [ 1213.930249][T18729] loop0: detected capacity change from 0 to 512 [ 1214.284223][T18729] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1214.641393][T18729] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 1214.641435][T18729] loop0: lost filesystem error report for type 5 error -12 [ 1214.642308][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1214.642340][ C0] EXT4-fs (loop0): initial error at time 1791651186: ext4_process_orphan:346 [ 1214.642380][ C0] EXT4-fs (loop0): last error at time 1791651186: ext4_process_orphan:346 [ 1214.688851][T18729] EXT4-fs (loop0): 1 truncate cleaned up [ 1214.751772][T18336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1214.801042][T18729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.874013][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1214.880116][T18336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1215.193653][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1215.210522][T18336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1215.244028][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1215.262025][T18336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1215.536828][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.558473][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1217.379520][T18766] loop8: detected capacity change from 0 to 512 [ 1217.401797][T18336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.437836][T18336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.484710][T18336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1217.484774][T18336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1217.678874][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.678999][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.681357][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.681473][ T5936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.482501][T18799] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 1220.078894][ T12] IPVS: stop unused estimator thread 0... [ 1220.201822][T18336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.385764][T18336] veth0_vlan: entered promiscuous mode [ 1220.427880][T18336] veth1_vlan: entered promiscuous mode [ 1220.506912][T18336] veth0_macvtap: entered promiscuous mode [ 1220.524074][T18336] veth1_macvtap: entered promiscuous mode [ 1220.580035][T18336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.710097][T18336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.013382][ T3395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.108849][ T3395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.108915][ T3395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.108969][ T3395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.244482][T18661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1221.262822][T18661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1221.270590][T18661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1221.280755][T18661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1221.281510][T18661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1221.441951][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.441983][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.628778][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.628811][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.017196][ T5684] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.036709][T18838] loop3: detected capacity change from 0 to 8 [ 1222.056853][T18838] squashfs image failed sanity check [ 1223.072643][ T5684] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.373041][ T5658] Bluetooth: hci1: command tx timeout [ 1223.485007][ T5684] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.578802][T18661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1224.590557][T18661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1224.600709][T18661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1224.612308][T18661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1224.615313][T18661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1224.688172][ T5684] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.825421][T18859] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3787'. [ 1225.007712][T18870] loop0: detected capacity change from 0 to 512 [ 1225.039322][T18870] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1225.039346][T18870] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1225.152363][T18870] EXT4-fs (loop0): 1 truncate cleaned up [ 1225.168216][T18870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1225.208759][T18877] loop3: detected capacity change from 0 to 512 [ 1225.466903][T18661] Bluetooth: hci1: command tx timeout [ 1225.730730][ T5684] bridge_slave_1: left allmulticast mode [ 1225.730768][ T5684] bridge_slave_1: left promiscuous mode [ 1225.731001][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.444092][ T5684] bridge_slave_0: left allmulticast mode [ 1226.444130][ T5684] bridge_slave_0: left promiscuous mode [ 1226.446503][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.750525][T18661] Bluetooth: hci2: command tx timeout [ 1227.549424][ T5658] Bluetooth: hci1: command tx timeout [ 1228.812887][ T5658] Bluetooth: hci2: command tx timeout [ 1228.952000][ T5684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.972051][ T5684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.986601][ T5684] bond0 (unregistering): Released all slaves [ 1229.572846][T18881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.650483][ T5658] Bluetooth: hci1: command tx timeout [ 1230.892511][ T5658] Bluetooth: hci2: command tx timeout [ 1232.631982][T18975] loop3: detected capacity change from 0 to 512 [ 1232.696986][T18975] EXT4-fs (loop3): 1 truncate cleaned up [ 1232.703374][T18975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.871131][T18822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.871336][T18822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.871491][T18822] bridge_slave_0: entered allmulticast mode [ 1232.947146][T18822] bridge_slave_0: entered promiscuous mode [ 1232.970861][T18822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.989464][T18661] Bluetooth: hci2: command tx timeout [ 1233.011604][T18822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.011774][T18822] bridge_slave_1: entered allmulticast mode [ 1233.179093][T18822] bridge_slave_1: entered promiscuous mode [ 1233.332356][T18978] EXT4-fs error (device loop3): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 1233.371768][T18822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.438173][T18822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.459216][T18336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.887280][ T5684] hsr_slave_0: left promiscuous mode [ 1234.904780][ T5684] hsr_slave_1: left promiscuous mode [ 1234.905760][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.905788][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.915378][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.915405][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.963462][ T5684] veth1_macvtap: left promiscuous mode [ 1234.963512][ T5684] veth0_macvtap: left promiscuous mode [ 1234.963635][ T5684] veth1_vlan: left promiscuous mode [ 1234.963719][ T5684] veth0_vlan: left promiscuous mode [ 1235.124105][T19003] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1235.165304][ T5663] Bluetooth: hci0: command 0x0406 tx timeout [ 1235.987665][T19009] loop8: detected capacity change from 0 to 512 [ 1237.500313][T19021] loop3: detected capacity change from 0 to 512 [ 1237.543427][T19021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1237.543574][T19021] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1237.665208][T19021] Bluetooth: MGMT ver 1.23 [ 1237.847323][T18336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.956838][ T5684] team0 (unregistering): Port device team_slave_1 removed [ 1238.006878][ T5684] team0 (unregistering): Port device team_slave_0 removed [ 1238.096581][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.096647][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.714866][T18822] team0: Port device team_slave_0 added [ 1239.739627][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1239.754152][T18822] team0: Port device team_slave_1 added [ 1240.126276][T19057] loop8: detected capacity change from 0 to 512 [ 1240.142237][T19059] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14 [ 1240.264433][T19057] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1240.264460][T19057] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1240.311145][T19057] EXT4-fs (loop8): 1 truncate cleaned up [ 1240.854352][T19057] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1240.857040][T18822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.857061][T18822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.857107][T18822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.938065][T18822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.938090][T18822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.938138][T18822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.172731][T19070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3825'. [ 1241.820936][T18822] hsr_slave_0: entered promiscuous mode [ 1241.857688][T18822] hsr_slave_1: entered promiscuous mode [ 1243.134859][T19090] loop0: detected capacity change from 0 to 512 [ 1244.818211][T18864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.818659][T18864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.819999][T18864] bridge_slave_0: entered allmulticast mode [ 1244.841254][T18864] bridge_slave_0: entered promiscuous mode [ 1244.876264][T19075] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.930714][T18864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.930839][T18864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.930990][T18864] bridge_slave_1: entered allmulticast mode [ 1244.967133][T18864] bridge_slave_1: entered promiscuous mode [ 1245.190355][T18864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.170544][T18864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.621700][ T5684] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.842502][T18864] team0: Port device team_slave_0 added [ 1247.206105][T19140] loop3: detected capacity change from 0 to 512 [ 1248.243114][ T5684] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.371309][T18864] team0: Port device team_slave_1 added [ 1248.379559][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1248.380757][T19135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3839'. [ 1248.544010][T19147] loop3: detected capacity change from 0 to 8 [ 1248.601183][T19147] squashfs image failed sanity check [ 1248.878314][T19153] loop0: detected capacity change from 0 to 512 [ 1250.071614][T18864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.071639][T18864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.071681][T18864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.558869][T18864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.558896][T18864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.558976][T18864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.220221][ T5684] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.885962][ T5684] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.411568][T18822] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1252.636884][T18822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1252.698129][T18822] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1253.094330][T19198] loop3: detected capacity change from 0 to 512 [ 1253.303271][T18822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1253.400482][T18864] hsr_slave_0: entered promiscuous mode [ 1253.401759][T18864] hsr_slave_1: entered promiscuous mode [ 1253.402742][T18864] debugfs: 'hsr0' already exists in 'hsr' [ 1253.402770][T18864] Cannot create hsr debugfs directory [ 1254.242428][T18822] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1254.294736][T18822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1254.300457][T18822] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1254.558043][T18822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1255.444267][T19221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.444930][T19221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.380958][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1258.829062][ T5684] bridge_slave_1: left allmulticast mode [ 1258.829100][ T5684] bridge_slave_1: left promiscuous mode [ 1258.829339][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.870645][ T5684] bridge_slave_0: left allmulticast mode [ 1258.870682][ T5684] bridge_slave_0: left promiscuous mode [ 1258.870944][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.842797][ T5684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.911269][ T5684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.930435][ T5684] bond0 (unregistering): Released all slaves [ 1262.391516][T19295] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3877'. [ 1262.615752][T19298] loop3: detected capacity change from 0 to 512 [ 1263.730020][T18822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.731542][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1263.930558][T19314] loop0: detected capacity change from 0 to 512 [ 1264.804957][T19289] bond1: entered allmulticast mode [ 1264.925929][T19307] wireguard0: entered promiscuous mode [ 1264.925962][T19307] wireguard0: entered allmulticast mode [ 1264.931704][T19307] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1264.962829][T19307] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 1265.320674][T19333] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3886'. [ 1265.376896][T18822] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.943661][ T5684] hsr_slave_0: left promiscuous mode [ 1265.945836][ T5684] hsr_slave_1: left promiscuous mode [ 1265.946807][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.946849][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.948978][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.949004][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1266.575660][ T5684] veth1_macvtap: left promiscuous mode [ 1266.575708][ T5684] veth0_macvtap: left promiscuous mode [ 1266.575840][ T5684] veth1_vlan: left promiscuous mode [ 1266.575924][ T5684] veth0_vlan: left promiscuous mode [ 1268.293053][ T5684] team0 (unregistering): Port device team_slave_1 removed [ 1268.301600][T19359] loop3: detected capacity change from 0 to 512 [ 1268.437760][T19361] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1268.500910][T19357] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3895'. [ 1269.129932][ T5684] team0 (unregistering): Port device team_slave_0 removed [ 1270.868585][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.868715][ T5681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.018667][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.018794][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.107227][T19400] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15 [ 1272.419513][T18864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1272.585380][T18864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1272.610408][T18864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1272.667396][T18864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1272.733500][T18864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1272.774439][T18864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1273.732299][T18864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1273.805116][T18864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1275.041746][ T5684] bridge_slave_1: left allmulticast mode [ 1275.041782][ T5684] bridge_slave_1: left promiscuous mode [ 1275.042025][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.078951][ T5684] bridge_slave_0: left allmulticast mode [ 1275.078985][ T5684] bridge_slave_0: left promiscuous mode [ 1275.085855][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.555757][T19445] loop0: detected capacity change from 0 to 512 [ 1276.245547][ T5663] Bluetooth: hci5: command 0x0406 tx timeout [ 1276.759903][ T5684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.796521][ T5684] bond0 (unregistering): Released all slaves [ 1277.515710][ T5276] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1277.565066][ T5684] tipc: Disabling bearer [ 1277.667363][ T5684] tipc: Left network mode [ 1277.720371][T18864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1277.844684][T18864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1277.891977][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.892091][ T6019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.010692][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.010826][ T6019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.220000][T18822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.538049][T19473] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3917'. [ 1278.747145][ T5684] hsr_slave_0: left promiscuous mode [ 1278.770458][ T5684] hsr_slave_1: left promiscuous mode [ 1278.771562][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.773185][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.687739][T19507] loop0: detected capacity change from 0 to 512 [ 1281.730926][T19507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1281.731059][T19507] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1282.068832][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.194548][ T5684] team0 (unregistering): Port device team_slave_1 removed [ 1282.231645][ T5663] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1282.240840][ T5663] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1282.241948][ T5663] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1282.269905][ T5663] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1282.279578][ T5663] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1282.384289][ T5684] team0 (unregistering): Port device team_slave_0 removed [ 1282.458911][T19522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3924'. [ 1283.096748][ T5276] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1283.217006][T19528] syzkaller0: entered promiscuous mode [ 1283.217041][T19528] syzkaller0: entered allmulticast mode [ 1283.834955][ T5684] IPVS: stop unused estimator thread 0... [ 1283.947347][T19539] loop0: detected capacity change from 0 to 512 [ 1284.015539][T19539] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1284.016050][T19539] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 1284.016101][T19539] loop0: lost filesystem error report for type 5 error -12 [ 1284.022218][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1284.022250][ C1] EXT4-fs (loop0): initial error at time 1791651255: ext4_process_orphan:346 [ 1284.022290][ C1] EXT4-fs (loop0): last error at time 1791651255: ext4_process_orphan:346 [ 1284.088658][T19539] EXT4-fs (loop0): 1 truncate cleaned up [ 1284.104642][T19539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.332499][ T5663] Bluetooth: hci3: command tx timeout [ 1284.380429][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.501494][T19548] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3929'. [ 1285.443461][T19552] loop0: detected capacity change from 0 to 128 [ 1285.699324][ T5658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1285.710735][ T5658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1285.712092][ T5658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1285.739583][ T5658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1285.754114][ T5658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1286.445933][ T5658] Bluetooth: hci3: command tx timeout [ 1287.251662][T19585] loop0: detected capacity change from 0 to 512 [ 1287.728505][T19585] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1287.729042][T19585] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 1287.729075][T19585] loop0: lost filesystem error report for type 5 error -12 [ 1287.731547][T19585] EXT4-fs (loop0): 1 truncate cleaned up [ 1287.783931][T19585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1287.854698][ T5658] Bluetooth: hci1: command tx timeout [ 1288.533215][ T5658] Bluetooth: hci3: command tx timeout [ 1288.654549][T19593] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1288.701818][T19593] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1288.891724][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.054355][ T5276] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1289.935865][ T5658] Bluetooth: hci1: command tx timeout [ 1290.584050][ T5658] Bluetooth: hci3: command tx timeout [ 1292.012720][ T5658] Bluetooth: hci1: command tx timeout [ 1293.197515][T19673] loop3: detected capacity change from 0 to 8 [ 1293.211941][T19673] squashfs image failed sanity check [ 1294.202340][ T5658] Bluetooth: hci1: command tx timeout [ 1295.913943][T14218] bridge_slave_1: left allmulticast mode [ 1295.913982][T14218] bridge_slave_1: left promiscuous mode [ 1295.914220][T14218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.943224][T14218] bridge_slave_0: left allmulticast mode [ 1295.943260][T14218] bridge_slave_0: left promiscuous mode [ 1295.943501][T14218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.875927][T14218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1298.910762][T14218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1298.920578][T14218] bond0 (unregistering): Released all slaves [ 1299.003609][ T5276] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1299.207106][T14218] hsr_slave_0: left promiscuous mode [ 1299.232264][T14218] hsr_slave_1: left promiscuous mode [ 1299.233312][T14218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.268490][T14218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.366862][T19733] loop3: detected capacity change from 0 to 512 [ 1299.408880][T19733] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1299.409406][T19733] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 1299.409441][T19733] loop3: lost filesystem error report for type 5 error -12 [ 1299.412209][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1299.412240][ C1] EXT4-fs (loop3): initial error at time 1791651271: ext4_process_orphan:346 [ 1299.412278][ C1] EXT4-fs (loop3): last error at time 1791651271: ext4_process_orphan:346 [ 1299.414792][T19733] EXT4-fs (loop3): 1 truncate cleaned up [ 1299.516213][T19733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1299.677698][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.677785][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.711123][T18336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.288470][T19764] loop3: detected capacity change from 0 to 512 [ 1301.499415][T14218] team0 (unregistering): Port device team_slave_1 removed [ 1301.566579][T14218] team0 (unregistering): Port device team_slave_0 removed [ 1302.924390][T19781] loop3: detected capacity change from 0 to 512 [ 1303.410460][T19781] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1303.424528][T19518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.424714][T19518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.424894][T19518] bridge_slave_0: entered allmulticast mode [ 1303.427287][T19781] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 1303.427320][T19781] loop3: lost filesystem error report for type 5 error -12 [ 1303.431164][T19781] EXT4-fs (loop3): 1 truncate cleaned up [ 1303.453161][T19518] bridge_slave_0: entered promiscuous mode [ 1303.457866][T19518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.458006][T19518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.458152][T19518] bridge_slave_1: entered allmulticast mode [ 1303.462744][T19518] bridge_slave_1: entered promiscuous mode [ 1303.622428][T19781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1303.954740][T19785] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1304.842963][T19785] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1304.904887][T18336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.956570][T19518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.000920][T19518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.104655][T19518] team0: Port device team_slave_0 added [ 1306.514079][T19518] team0: Port device team_slave_1 added [ 1306.828390][T19556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.828514][T19556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.828663][T19556] bridge_slave_0: entered allmulticast mode [ 1306.854559][T19556] bridge_slave_0: entered promiscuous mode [ 1306.871498][T19556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.871650][T19556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.886942][T19556] bridge_slave_1: entered allmulticast mode [ 1306.889108][T19556] bridge_slave_1: entered promiscuous mode [ 1306.903755][T19518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.903778][T19518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.903826][T19518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.974085][T19518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.974111][T19518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.974160][T19518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.121309][T19556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1307.209016][T19556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1307.289486][T19556] team0: Port device team_slave_0 added [ 1307.327719][T19556] team0: Port device team_slave_1 added [ 1307.343556][T19518] hsr_slave_0: entered promiscuous mode [ 1307.344947][T19518] hsr_slave_1: entered promiscuous mode [ 1307.748076][T19556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.748103][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.748151][T19556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.863282][T19556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.863309][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.863359][T19556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.056996][T19844] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1309.175663][T19863] loop0: detected capacity change from 0 to 512 [ 1309.212825][T19863] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1309.214857][T19863] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 1309.214891][T19863] loop0: lost filesystem error report for type 5 error -12 [ 1309.219192][T19863] EXT4-fs (loop0): 1 truncate cleaned up [ 1309.225128][T19863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.467513][ T5827] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.410840][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.157633][T19865] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3995'. [ 1311.266018][T19556] hsr_slave_0: entered promiscuous mode [ 1311.267240][T19556] hsr_slave_1: entered promiscuous mode [ 1311.268578][T19556] debugfs: 'hsr0' already exists in 'hsr' [ 1311.268604][T19556] Cannot create hsr debugfs directory [ 1313.168769][ T5827] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.890225][T19901] loop0: detected capacity change from 0 to 512 [ 1313.922753][T19901] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1313.955316][T19901] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 1313.955354][T19901] loop0: lost filesystem error report for type 5 error -12 [ 1313.962210][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1313.962240][ C0] EXT4-fs (loop0): initial error at time 1791651285: ext4_process_orphan:346 [ 1313.962274][ C0] EXT4-fs (loop0): last error at time 1791651285: ext4_process_orphan:346 [ 1313.969143][T19901] EXT4-fs (loop0): 1 truncate cleaned up [ 1313.987881][T19901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.137537][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.370298][T19917] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1316.375606][ T5827] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.979074][ T5827] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.123735][T19968] loop3: detected capacity change from 0 to 512 [ 1320.160719][T19968] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1320.161495][T19968] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 1320.161530][T19968] loop3: lost filesystem error report for type 5 error -12 [ 1320.162199][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1320.162230][ C1] EXT4-fs (loop3): initial error at time 1791651291: ext4_process_orphan:346 [ 1320.162270][ C1] EXT4-fs (loop3): last error at time 1791651291: ext4_process_orphan:346 [ 1320.226904][T19968] EXT4-fs (loop3): 1 truncate cleaned up [ 1320.240933][T19968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1321.406936][T19972] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1321.617090][T19972] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1322.220095][T18336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.579902][T19995] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4026'. [ 1324.743531][T20027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4033'. [ 1325.899573][T20043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4036'. [ 1326.366707][T20052] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4037'. [ 1326.437659][T19518] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1326.759545][T20056] loop0: detected capacity change from 0 to 512 [ 1326.910089][T20056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1326.910225][T20056] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1327.029773][T19518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1327.049699][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1327.051960][T19518] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1327.099346][T19518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1327.100405][T19518] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1327.144976][T19518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1327.151630][T19518] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1327.237605][T19518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1327.449139][T20072] loop0: detected capacity change from 0 to 512 [ 1328.748506][ T5827] bridge_slave_1: left allmulticast mode [ 1328.748544][ T5827] bridge_slave_1: left promiscuous mode [ 1328.748790][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.780877][ T5827] bridge_slave_0: left allmulticast mode [ 1328.780914][ T5827] bridge_slave_0: left promiscuous mode [ 1328.781829][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.074123][ T5827] pim6reg: left allmulticast mode [ 1330.083238][ T5827] bridge_slave_1: left allmulticast mode [ 1330.083277][ T5827] bridge_slave_1: left promiscuous mode [ 1330.083521][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.121449][ T5827] bridge_slave_0: left allmulticast mode [ 1330.121485][ T5827] bridge_slave_0: left promiscuous mode [ 1330.580955][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.631468][T20110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4050'. [ 1332.504068][T20129] loop3: detected capacity change from 0 to 512 [ 1332.532393][T20129] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1332.536151][T20129] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 1332.536185][T20129] loop3: lost filesystem error report for type 5 error -12 [ 1332.539633][T20129] EXT4-fs (loop3): 1 truncate cleaned up [ 1332.587702][T20129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.895720][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.266993][ T5827] bond0 (unregistering): Released all slaves [ 1333.434511][ T5827] bond1 (unregistering): Released all slaves [ 1333.513532][ T5827] bond2 (unregistering): Released all slaves [ 1335.182713][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.188100][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.189924][ T5827] bond0 (unregistering): Released all slaves [ 1336.161571][T19518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.526757][T20131] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1336.559578][T20131] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1336.912067][T19518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.929309][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.929440][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1336.938135][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.938257][ T5936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.337652][T20177] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1337.811763][ T5827] hsr_slave_0: left promiscuous mode [ 1337.841004][ T5827] hsr_slave_1: left promiscuous mode [ 1337.842125][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.842296][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.863847][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.863879][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.035823][ T5827] hsr_slave_0: left promiscuous mode [ 1338.038999][ T5827] hsr_slave_1: left promiscuous mode [ 1338.040194][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.041767][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.835175][T18336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.026798][ T5827] veth1_macvtap: left promiscuous mode [ 1339.026857][ T5827] veth0_macvtap: left promiscuous mode [ 1339.026987][ T5827] veth1_vlan: left promiscuous mode [ 1339.027084][ T5827] veth0_vlan: left promiscuous mode [ 1339.728183][T20199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4072'. [ 1341.786152][T20226] loop0: detected capacity change from 0 to 512 [ 1341.978036][T20228] loop3: detected capacity change from 0 to 512 [ 1342.034809][T20228] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1342.055677][T20228] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 1342.055715][T20228] loop3: lost filesystem error report for type 5 error -12 [ 1342.062196][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1342.062232][ C1] EXT4-fs (loop3): initial error at time 1791651313: ext4_process_orphan:346 [ 1342.062272][ C1] EXT4-fs (loop3): last error at time 1791651313: ext4_process_orphan:346 [ 1342.118978][T20228] EXT4-fs (loop3): 1 truncate cleaned up [ 1342.139176][T20228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1342.999932][ T5663] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1343.019930][ T5663] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1343.029743][ T5663] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1343.039994][ T5663] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1343.057165][ T5663] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1343.268125][ T5827] team0 (unregistering): Port device team_slave_1 removed [ 1343.305210][ T5827] team0 (unregistering): Port device team_slave_0 removed [ 1344.727393][T20265] loop0: detected capacity change from 0 to 512 [ 1344.767060][T20265] EXT4-fs (loop0): 1 truncate cleaned up [ 1344.813077][T20265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1344.979813][ T5663] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1344.984386][ T5663] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1344.988006][ T5663] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1344.990774][ T5663] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1345.016534][ T5663] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1345.133971][ T5663] Bluetooth: hci2: command tx timeout [ 1345.901587][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.966285][ T5827] team0 (unregistering): Port device team_slave_1 removed [ 1345.983021][T18336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.071874][ T5827] team0 (unregistering): Port device team_slave_0 removed [ 1347.007844][T20305] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4091'. [ 1347.134996][ T5663] Bluetooth: hci7: command tx timeout [ 1347.189157][T20307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.189858][T20307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.215960][ T5663] Bluetooth: hci2: command tx timeout [ 1347.700667][ T5663] Bluetooth: hci4: command 0x0406 tx timeout [ 1348.119068][T20320] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1348.241404][T20325] loop0: detected capacity change from 0 to 512 [ 1348.349464][T20325] EXT4-fs (loop0): 1 truncate cleaned up [ 1348.380427][T20325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1349.212364][ T5658] Bluetooth: hci7: command tx timeout [ 1349.292235][ T5658] Bluetooth: hci2: command tx timeout [ 1349.555569][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.928225][ T5827] IPVS: stop unused estimator thread 0... [ 1351.292952][ T5658] Bluetooth: hci7: command tx timeout [ 1351.372760][ T5658] Bluetooth: hci2: command tx timeout [ 1351.635785][T20403] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1353.372522][ T5663] Bluetooth: hci7: command tx timeout [ 1355.273547][T20268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.273825][T20268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.274191][T20268] bridge_slave_0: entered allmulticast mode [ 1355.283770][T20268] bridge_slave_0: entered promiscuous mode [ 1355.291017][T20268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.291135][T20268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.291281][T20268] bridge_slave_1: entered allmulticast mode [ 1355.293398][T20268] bridge_slave_1: entered promiscuous mode [ 1355.386561][T20268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.581967][T20268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.811940][T20243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.813711][T20243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.813864][T20243] bridge_slave_0: entered allmulticast mode [ 1357.820741][T20243] bridge_slave_0: entered promiscuous mode [ 1357.837535][T20243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.837651][T20243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.837829][T20243] bridge_slave_1: entered allmulticast mode [ 1357.845086][T20243] bridge_slave_1: entered promiscuous mode [ 1358.066373][T20268] team0: Port device team_slave_0 added [ 1358.129790][T20268] team0: Port device team_slave_1 added [ 1358.271842][T20243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.288856][T20243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.512937][T20268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.512957][T20268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.512993][T20268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.516330][T20268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.516348][T20268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.516391][T20268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.638811][T20548] loop0: detected capacity change from 0 to 512 [ 1359.651501][T20546] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1361.017462][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.017543][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.188036][T20243] team0: Port device team_slave_0 added [ 1361.284730][T20243] team0: Port device team_slave_1 added [ 1361.446089][T20268] hsr_slave_0: entered promiscuous mode [ 1361.450371][T20268] hsr_slave_1: entered promiscuous mode [ 1361.452750][T20268] debugfs: 'hsr0' already exists in 'hsr' [ 1361.452780][T20268] Cannot create hsr debugfs directory [ 1361.571588][T20243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.571616][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.571665][T20243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.637932][T20243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.637958][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.638010][T20243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.417049][T20570] bond2: entered allmulticast mode [ 1362.637379][ T31] audit: type=1400 audit(1791651334.419:162): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=20581 comm="syz.0.4144" [ 1362.786906][T20591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.794024][T20591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.208071][T20243] hsr_slave_0: entered promiscuous mode [ 1363.209220][T20243] hsr_slave_1: entered promiscuous mode [ 1363.215000][T20243] debugfs: 'hsr0' already exists in 'hsr' [ 1363.215029][T20243] Cannot create hsr debugfs directory [ 1363.988933][T20617] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1364.009284][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1365.335943][ T5684] bridge_slave_1: left allmulticast mode [ 1365.335981][ T5684] bridge_slave_1: left promiscuous mode [ 1365.336217][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.368510][ T5684] bridge_slave_0: left allmulticast mode [ 1365.368546][ T5684] bridge_slave_0: left promiscuous mode [ 1365.369735][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.406728][ T5684] bridge_slave_1: left allmulticast mode [ 1365.406765][ T5684] bridge_slave_1: left promiscuous mode [ 1365.406991][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.410924][ T5684] bridge_slave_0: left allmulticast mode [ 1365.410955][ T5684] bridge_slave_0: left promiscuous mode [ 1365.411399][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.778269][ T5684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.781697][ T5684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.809417][ T5684] bond0 (unregistering): Released all slaves [ 1366.828541][ T5684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1366.855876][ T5684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.877189][ T5684] bond0 (unregistering): Released all slaves [ 1367.182895][ T5684] hsr_slave_0: left promiscuous mode [ 1367.203849][ T5684] hsr_slave_1: left promiscuous mode [ 1367.204872][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.228886][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.246488][T20662] loop0: detected capacity change from 0 to 512 [ 1367.278026][T20662] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1367.295866][ T5684] hsr_slave_0: left promiscuous mode [ 1367.296783][ T5684] hsr_slave_1: left promiscuous mode [ 1367.297578][T20662] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 1367.297613][T20662] loop0: lost filesystem error report for type 5 error -12 [ 1367.297749][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.301813][T20662] EXT4-fs (loop0): 1 truncate cleaned up [ 1367.319251][T20662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.355981][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.466496][T20669] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4160'. [ 1367.668051][T20675] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1367.919227][ T5684] team0 (unregistering): Port device team_slave_1 removed [ 1367.936743][ T5684] team0 (unregistering): Port device team_slave_0 removed [ 1369.121184][ T5684] team0 (unregistering): Port device team_slave_1 removed [ 1369.168060][ T5684] team0 (unregistering): Port device team_slave_0 removed [ 1369.513423][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.665057][T20702] loop0: detected capacity change from 0 to 128 [ 1371.230230][T20707] netlink: 'syz.0.4171': attribute type 4 has an invalid length. [ 1371.230263][T20707] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4171'. [ 1371.910758][T20268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1371.954729][T20268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1371.956623][T20268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1372.020216][T20268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1372.026427][T20268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1372.094748][T20268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1372.098576][T20268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1372.136820][T20268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1374.685339][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1374.925686][T20268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.817297][T20268] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.853596][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.853723][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.606710][T14374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.606840][T14374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.662053][T20243] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1376.689388][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1376.735979][T20243] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1376.750807][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1376.791814][T20243] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1376.816674][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1376.837131][T20243] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1377.120531][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1378.876984][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1379.370196][T20843] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4194'. [ 1379.858291][T20243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.950892][T20243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.982209][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.982332][ T5681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.056122][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.056247][ T5681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.488814][T20268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.724037][T20268] veth0_vlan: entered promiscuous mode [ 1382.828557][T20268] veth1_vlan: entered promiscuous mode [ 1382.909203][T20918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4211'. [ 1383.369047][T20268] veth0_macvtap: entered promiscuous mode [ 1383.390008][T20268] veth1_macvtap: entered promiscuous mode [ 1383.468037][T20268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1383.522098][T20268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1383.610023][T14374] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.612106][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.629971][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.630041][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.062021][ T5681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.062055][ T5681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.401934][ T5681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.401967][ T5681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.497949][T20243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1384.622802][T20955] syzkaller1: entered promiscuous mode [ 1384.622837][T20955] syzkaller1: entered allmulticast mode [ 1391.206221][T20243] veth0_vlan: entered promiscuous mode [ 1391.243301][T20243] veth1_vlan: entered promiscuous mode [ 1391.348854][T20243] veth0_macvtap: entered promiscuous mode [ 1391.376901][T20243] veth1_macvtap: entered promiscuous mode [ 1391.483874][T20243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1391.517951][T20243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.585319][ T5827] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.585648][ T5827] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.585712][ T5827] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.585773][ T5827] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.683651][T21044] syzkaller1: entered promiscuous mode [ 1391.683687][T21044] syzkaller1: entered allmulticast mode [ 1392.777570][T21057] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1393.094100][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.094129][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.807556][T13630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.807588][T13630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.245104][T21070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4240'. [ 1394.303173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1401.060568][T21138] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1401.261145][T21123] syzkaller1: entered promiscuous mode [ 1401.261184][T21123] syzkaller1: entered allmulticast mode [ 1401.306800][T21141] loop9: detected capacity change from 0 to 128 [ 1403.182273][T21157] netlink: 'syz.9.4255': attribute type 4 has an invalid length. [ 1403.182384][T21157] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.4255'. [ 1405.241167][T21197] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1408.374230][T21223] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4275'. [ 1409.254899][ T31] audit: type=1400 audit(1791651381.039:163): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=21243 comm="syz.3.4280" [ 1409.652207][ T5780] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1409.814006][ T5780] usb 4-1: Using ep0 maxpacket: 16 [ 1409.826240][ T5780] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1409.831283][ T5780] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.831335][ T5780] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1409.831382][ T5780] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1409.831429][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.890471][ T5780] usb 4-1: config 0 descriptor?? [ 1410.138337][ T31] audit: type=1400 audit(1791651381.919:164): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=21268 comm="syz.0.4285" [ 1410.293780][T21273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.294339][T21273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.376818][T21275] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1410.460469][T21277] loop9: detected capacity change from 0 to 512 [ 1412.622817][ T5276] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1413.772141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1413.892140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1413.942134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1414.652292][ T5780] usbhid 4-1:0.0: can't add hid device: -71 [ 1414.652419][ T5780] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1414.702036][ T5780] usb 4-1: USB disconnect, device number 5 [ 1414.887967][T21317] loop1: detected capacity change from 0 to 512 [ 1414.967216][T21317] EXT4-fs (loop1): 1 truncate cleaned up [ 1414.980121][T21317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1416.050933][T20268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.288284][T21323] syzkaller0: entered promiscuous mode [ 1416.288320][T21323] syzkaller0: entered allmulticast mode [ 1417.390894][T21338] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1418.058365][T21355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4304'. [ 1422.414644][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.414723][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.197149][T21410] loop9: detected capacity change from 0 to 512 [ 1423.472926][T21410] EXT4-fs (loop9): 1 truncate cleaned up [ 1423.475317][T21410] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1424.212146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1425.132592][T21418] EXT4-fs error (device loop9): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 1425.505345][T21420] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4320'. [ 1425.661831][T20243] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.106845][T21438] syzkaller0: entered promiscuous mode [ 1426.106870][T21438] syzkaller0: entered allmulticast mode [ 1426.438045][T21444] syzkaller1: entered promiscuous mode [ 1426.438079][T21444] syzkaller1: entered allmulticast mode [ 1426.627153][T21458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4328'. [ 1428.279550][T21481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4334'. [ 1430.647059][T21513] syzkaller0: entered promiscuous mode [ 1430.647087][T21513] syzkaller0: entered allmulticast mode [ 1433.758031][T21548] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4349'. [ 1435.701218][ T31] audit: type=1400 audit(1791651407.449:165): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=21562 comm="syz.3.4353" [ 1436.132220][ T5796] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1436.311157][ T5796] usb 4-1: Using ep0 maxpacket: 16 [ 1436.323922][ T5796] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1436.336804][ T5796] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.336856][ T5796] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1436.336906][ T5796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1436.336954][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.490820][ T5796] usb 4-1: config 0 descriptor?? [ 1438.338760][T21592] loop0: detected capacity change from 0 to 512 [ 1438.352310][T21592] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1438.355142][T21592] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 1438.355177][T21592] loop0: lost filesystem error report for type 5 error -12 [ 1438.365594][T21592] EXT4-fs (loop0): 1 truncate cleaned up [ 1438.438885][T21592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1438.572906][T21594] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1438.722465][T21594] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1439.354765][ T5796] usbhid 4-1:0.0: can't add hid device: -71 [ 1439.354899][ T5796] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1439.360802][ T5796] usb 4-1: USB disconnect, device number 6 [ 1439.505895][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.084066][T21619] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1441.411456][T21627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4372'. [ 1441.589180][ T31] audit: type=1400 audit(1791651413.359:166): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=21629 comm="syz.3.4373" [ 1441.922213][ T5796] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1442.073654][ T5796] usb 4-1: Using ep0 maxpacket: 16 [ 1442.077357][ T5796] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1442.111535][ T5796] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.111592][ T5796] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1442.111642][ T5796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1442.111692][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.161442][ T5796] usb 4-1: config 0 descriptor?? [ 1443.334153][T21648] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4380'. [ 1443.334194][T21648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4380'. [ 1444.044444][T21677] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4386'. [ 1444.276726][T21685] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4388'. [ 1445.027733][ T5796] usbhid 4-1:0.0: can't add hid device: -71 [ 1445.027873][ T5796] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1445.062894][ T5796] usb 4-1: USB disconnect, device number 7 [ 1445.359015][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4390'. [ 1447.151600][T21748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4402'. [ 1447.299062][T21754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1447.581346][T21759] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4403'. [ 1447.915452][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4418'. [ 1448.875224][T21793] loop9: detected capacity change from 0 to 128 [ 1450.859212][T21810] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4419'. [ 1450.914785][T21812] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4416'. [ 1451.440919][T21835] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4423'. [ 1454.830695][T21880] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4435'. [ 1454.913437][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4433'. [ 1456.313210][ T31] audit: type=1400 audit(1791651428.099:167): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=21909 comm="syz.9.4444" [ 1456.541219][ T5276] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1457.322264][T18106] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1457.474015][T18106] usb 10-1: Using ep0 maxpacket: 16 [ 1457.474776][T18106] usb 10-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1457.477485][T18106] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.477539][T18106] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1457.477590][T18106] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1457.477640][T18106] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.543123][T18106] usb 10-1: config 0 descriptor?? [ 1458.811301][T21937] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4450'. [ 1459.195417][T18106] usbhid 10-1:0.0: can't add hid device: -71 [ 1459.195547][T18106] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1459.245115][T18106] usb 10-1: USB disconnect, device number 2 [ 1459.579463][T21964] loop1: detected capacity change from 0 to 512 [ 1459.621955][T21964] EXT4-fs (loop1): 1 truncate cleaned up [ 1459.646751][T21964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1461.787659][T20268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.229865][T21998] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4466'. [ 1463.658360][ T31] audit: type=1400 audit(1791651435.439:168): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=22008 comm="syz.3.4469" [ 1464.323570][T20695] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1464.812677][T20695] usb 4-1: Using ep0 maxpacket: 16 [ 1464.858539][T20695] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1464.887397][T20695] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.887456][T20695] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1464.887507][T20695] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1464.887557][T20695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.975066][T20695] usb 4-1: config 0 descriptor?? [ 1465.307401][T22033] loop0: detected capacity change from 0 to 512 [ 1465.363003][T22033] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1465.363545][T22033] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 1465.363579][T22033] loop0: lost filesystem error report for type 5 error -12 [ 1465.367277][T22033] EXT4-fs (loop0): 1 truncate cleaned up [ 1465.381899][T22033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1465.455573][ T5658] Bluetooth: hci2: command 0x0406 tx timeout [ 1466.092340][T22038] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1466.098467][T22038] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1469.013015][T20695] usbhid 4-1:0.0: can't add hid device: -71 [ 1469.013147][T20695] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1469.086131][T22077] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4484'. [ 1469.101882][T20695] usb 4-1: USB disconnect, device number 8 [ 1470.572695][ T5663] Bluetooth: hci7: command 0x0406 tx timeout [ 1471.989434][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.296615][T22127] loop0: detected capacity change from 0 to 512 [ 1472.474863][T22127] EXT4-fs (loop0): 1 truncate cleaned up [ 1472.498612][T22127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1473.993661][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.921106][T22161] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4502'. [ 1474.950614][T22168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4507'. [ 1475.240862][T22172] loop9: detected capacity change from 0 to 512 [ 1475.268225][T22172] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1475.269448][T22172] EXT4-fs error (device loop9) in ext4_process_orphan:346: Out of memory [ 1475.269482][T22172] loop9: lost filesystem error report for type 5 error -12 [ 1475.272142][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1475.272173][ C1] EXT4-fs (loop9): initial error at time 1791651447: ext4_process_orphan:346 [ 1475.272212][ C1] EXT4-fs (loop9): last error at time 1791651447: ext4_process_orphan:346 [ 1475.285123][T22172] EXT4-fs (loop9): 1 truncate cleaned up [ 1475.290042][T22172] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1475.376987][T22177] loop0: detected capacity change from 0 to 512 [ 1475.423183][T22177] EXT4-fs (loop0): 1 truncate cleaned up [ 1475.464822][T22177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1476.468416][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1476.894478][T22175] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1476.899437][T22175] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1478.252258][ T31] audit: type=1400 audit(1791651450.029:169): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=22219 comm="syz.1.4521" [ 1478.712441][ T5796] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1478.982735][ T5796] usb 2-1: Using ep0 maxpacket: 16 [ 1479.112753][ T5796] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1479.146812][ T5796] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.146872][ T5796] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1479.146924][ T5796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1479.146974][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.266810][ T5796] usb 2-1: config 0 descriptor?? [ 1480.455639][T22235] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4522'. [ 1480.914392][T22247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4526'. [ 1480.914426][T22247] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4526'. [ 1482.260817][T20243] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1482.724597][T22272] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4534'. [ 1482.749804][ T5796] usbhid 2-1:0.0: can't add hid device: -71 [ 1482.749904][ T5796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1482.780834][ T5796] usb 2-1: USB disconnect, device number 2 [ 1483.862813][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.862890][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.424629][T22309] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4543'. [ 1485.424662][T22309] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4543'. [ 1486.934063][T22322] loop0: detected capacity change from 0 to 512 [ 1487.014317][T22322] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1487.014839][T22322] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 1487.014873][T22322] loop0: lost filesystem error report for type 5 error -12 [ 1487.018255][T22322] EXT4-fs (loop0): 1 truncate cleaned up [ 1487.068433][T22322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1487.595606][T22347] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4553'. [ 1487.672925][T22341] ip_tables: iptables: counters copy to user failed while replacing table [ 1489.657666][T22368] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4555'. [ 1490.813919][T22324] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1490.815490][T22324] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1491.047404][ T31] audit: type=1400 audit(1791651462.829:170): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=22380 comm="syz.3.4565" [ 1491.692315][T20916] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1491.776217][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1492.081385][T20916] usb 4-1: Using ep0 maxpacket: 16 [ 1492.088972][T20916] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1492.091468][T20916] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.091517][T20916] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1492.091565][T20916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1492.091612][T20916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.149789][T20916] usb 4-1: config 0 descriptor?? [ 1493.188533][T22410] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4571'. [ 1496.510252][T20916] usbhid 4-1:0.0: can't add hid device: -71 [ 1496.510384][T20916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1496.534044][T20916] usb 4-1: USB disconnect, device number 9 [ 1498.144983][ T31] audit: type=1400 audit(1791651469.929:171): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=22494 comm="syz.3.4589" [ 1500.272253][T16361] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1500.425397][T16361] usb 4-1: Using ep0 maxpacket: 16 [ 1500.429130][T16361] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1500.433867][T16361] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.433918][T16361] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1500.433965][T16361] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1500.434013][T16361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.451650][T16361] usb 4-1: config 0 descriptor?? [ 1504.147155][T16361] usbhid 4-1:0.0: can't add hid device: -71 [ 1504.147285][T16361] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1504.174051][T16361] usb 4-1: USB disconnect, device number 10 [ 1504.701660][T22587] loop0: detected capacity change from 0 to 128 [ 1504.844134][T22594] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4614'. [ 1504.844168][T22594] netlink: 192 bytes leftover after parsing attributes in process `syz.8.4614'. [ 1506.236279][ T31] audit: type=1400 audit(1791651478.019:172): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=22625 comm="syz.3.4619" [ 1507.707636][T22651] loop1: detected capacity change from 0 to 512 [ 1507.740484][T22651] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1507.741033][T22651] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 1507.741072][T22651] loop1: lost filesystem error report for type 5 error -12 [ 1507.742114][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1507.742144][ C0] EXT4-fs (loop1): initial error at time 1791651479: ext4_process_orphan:346 [ 1507.742182][ C0] EXT4-fs (loop1): last error at time 1791651479: ext4_process_orphan:346 [ 1507.747399][T22651] EXT4-fs (loop1): 1 truncate cleaned up [ 1507.758526][T22651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1508.082188][T22655] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1508.082912][T22655] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1508.752167][T22668] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4630'. [ 1508.752200][T22668] netlink: 192 bytes leftover after parsing attributes in process `syz.9.4630'. [ 1509.754204][ T31] audit: type=1400 audit(1791651481.539:173): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=22681 comm="syz.9.4632" [ 1509.861004][T20268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.885303][T22744] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4644'. [ 1512.885343][T22744] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4644'. [ 1514.792746][T16361] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1515.182143][T16361] usb 2-1: Using ep0 maxpacket: 16 [ 1515.182898][T16361] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1515.186960][T16361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.187000][T16361] usb 2-1: Product: syz [ 1515.187028][T16361] usb 2-1: Manufacturer: syz [ 1515.187055][T16361] usb 2-1: SerialNumber: syz [ 1516.015978][T16361] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1516.307251][T16361] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1516.307934][T16361] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1516.307997][T16361] usb 2-1: media controller created [ 1516.447139][T16361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1517.136881][T16361] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1517.464433][T22811] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4658'. [ 1517.464467][T22811] netlink: 192 bytes leftover after parsing attributes in process `syz.8.4658'. [ 1517.542826][T16361] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1517.551458][T16361] usb 2-1: USB disconnect, device number 3 [ 1518.537583][T22836] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4667'. [ 1521.771022][T22892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4683'. [ 1524.282460][ T31] audit: type=1400 audit(1791651496.069:174): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=22930 comm="syz.0.4689" [ 1524.413718][T22943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.417446][T22943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.332303][T22963] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4694'. [ 1525.332337][T22963] netlink: 192 bytes leftover after parsing attributes in process `syz.8.4694'. [ 1529.385712][ T5663] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1529.403942][ T5663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1529.407578][ T5663] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1529.408778][ T5663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1529.410896][ T5663] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1530.391375][T23038] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4711'. [ 1530.391408][T23038] netlink: 192 bytes leftover after parsing attributes in process `syz.9.4711'. [ 1530.634567][T23040] loop0: detected capacity change from 0 to 512 [ 1530.666883][T23040] EXT4-fs (loop0): 1 truncate cleaned up [ 1530.696430][T23040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1531.452295][ T5658] Bluetooth: hci1: command tx timeout [ 1531.803320][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1531.847322][T16361] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1532.014101][T16361] usb 2-1: Using ep0 maxpacket: 16 [ 1532.015978][T16361] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1532.017359][T16361] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1532.017411][T16361] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1532.017468][T16361] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1532.017520][T16361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.129170][T16361] usb 2-1: config 0 descriptor?? [ 1533.532521][ T5658] Bluetooth: hci1: command tx timeout [ 1534.533811][T23009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.534091][T23009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.534288][T23009] bridge_slave_0: entered allmulticast mode [ 1534.537175][T23009] bridge_slave_0: entered promiscuous mode [ 1534.546553][T23009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.546770][T23009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.547006][T23009] bridge_slave_1: entered allmulticast mode [ 1534.551901][T23009] bridge_slave_1: entered promiscuous mode [ 1534.857832][T23009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.920197][T23009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.174829][T23119] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4728'. [ 1535.174887][T23119] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4728'. [ 1535.420513][T16361] usbhid 2-1:0.0: can't add hid device: -71 [ 1535.420676][T16361] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1535.461267][T16361] usb 2-1: USB disconnect, device number 4 [ 1535.553995][T23009] team0: Port device team_slave_0 added [ 1535.580112][T23009] team0: Port device team_slave_1 added [ 1535.626007][ T5658] Bluetooth: hci1: command tx timeout [ 1535.683357][T23125] loop0: detected capacity change from 0 to 512 [ 1535.720917][T23125] EXT4-fs (loop0): 1 truncate cleaned up [ 1535.726165][T23125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1535.939647][T23009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.939676][T23009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.939726][T23009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.012619][T23009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.012646][T23009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.012695][T23009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.937286][T23127] EXT4-fs error (device loop0): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 1537.111880][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.278021][T23009] hsr_slave_0: entered promiscuous mode [ 1537.279207][T23009] hsr_slave_1: entered promiscuous mode [ 1537.481287][ T31] audit: type=1400 audit(1791651509.259:175): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=23146 comm="syz.3.4735" [ 1537.657671][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4734'. [ 1537.701657][ T5658] Bluetooth: hci1: command tx timeout [ 1537.832206][ T5789] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1537.991125][ T5789] usb 4-1: Using ep0 maxpacket: 16 [ 1538.005904][ T5789] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1538.007340][ T5789] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.007391][ T5789] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1538.007439][ T5789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1538.007504][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.056818][ T5789] usb 4-1: config 0 descriptor?? [ 1538.090168][T23009] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.724724][T23009] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.033515][T23009] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.315140][T23009] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.537266][ T5789] usbhid 4-1:0.0: can't add hid device: -71 [ 1539.537405][ T5789] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1539.572620][ T5789] usb 4-1: USB disconnect, device number 11 [ 1539.779397][T23206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4753'. [ 1539.779431][T23206] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4753'. [ 1540.423086][T23212] syzkaller0: entered promiscuous mode [ 1540.423122][T23212] syzkaller0: entered allmulticast mode [ 1541.287445][T23009] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1541.344661][T23009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1541.669591][ T31] audit: type=1400 audit(1791651513.449:176): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=23236 comm="syz.0.4763" [ 1544.077485][T23009] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1544.081884][T23009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1544.083396][T23009] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1544.106042][T23009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1544.283851][T23009] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1544.306950][T23009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1544.718688][T23009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1544.756608][T23009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1544.775229][T21700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.775361][T21700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.801591][T21700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.801719][T21700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.306086][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.306192][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.682739][ T31] audit: type=1400 audit(1791651519.469:177): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=23339 comm="syz.3.4790" [ 1548.528080][ T31] audit: type=1400 audit(1791651520.309:178): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=23349 comm="syz.9.4791" [ 1548.562264][ T5796] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1548.713831][ T5796] usb 4-1: Using ep0 maxpacket: 16 [ 1548.715353][ T5796] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1548.745369][ T5796] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.745426][ T5796] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1548.745477][ T5796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1548.745528][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.777870][ T31] audit: type=1400 audit(1791651520.559:179): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=23352 comm="syz.0.4792" [ 1548.819544][ T5796] usb 4-1: config 0 descriptor?? [ 1549.134950][T23356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.135574][T23356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.401009][T23009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.825310][T23009] veth0_vlan: entered promiscuous mode [ 1550.855125][T23009] veth1_vlan: entered promiscuous mode [ 1551.019380][T23009] veth0_macvtap: entered promiscuous mode [ 1551.051472][T23009] veth1_macvtap: entered promiscuous mode [ 1551.088431][T23009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.150168][T23009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.296433][T21701] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.362614][T21702] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.363624][T22466] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.373332][T21701] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.592133][ T5796] usbhid 4-1:0.0: can't add hid device: -71 [ 1551.592272][ T5796] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1551.651400][ T31] audit: type=1800 audit(1791651523.429:180): pid=23387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4799" name="nullb0" dev="tmpfs" ino=1227 res=0 errno=0 [ 1551.651556][ T5796] usb 4-1: USB disconnect, device number 12 [ 1551.956358][T20790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.956390][T20790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.110408][T20788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.110441][T20788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.565123][ T31] audit: type=1400 audit(1791651524.349:181): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=23410 comm="syz.9.4809" [ 1552.859777][T23421] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4811'. [ 1552.923326][T23414] syzkaller0: entered promiscuous mode [ 1552.924759][T23414] syzkaller0: entered allmulticast mode [ 1554.146210][T23436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4818'. [ 1555.008131][T23463] syzkaller0: entered promiscuous mode [ 1555.008166][T23463] syzkaller0: entered allmulticast mode [ 1557.382151][ T31] audit: type=1400 audit(1791651529.129:182): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=23502 comm="syz.9.4842" [ 1558.423274][ T5813] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1558.582145][ T5813] usb 10-1: Using ep0 maxpacket: 16 [ 1558.596406][ T5813] usb 10-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1558.601361][ T5813] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1558.601413][ T5813] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1558.601461][ T5813] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1558.601510][ T5813] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.609194][ T5813] usb 10-1: config 0 descriptor?? [ 1558.814934][T23508] syzkaller0: entered promiscuous mode [ 1558.814998][T23508] syzkaller0: entered allmulticast mode [ 1559.252570][T23528] loop3: detected capacity change from 0 to 512 [ 1559.290839][T23528] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1559.293576][T23528] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 1559.293609][T23528] loop3: lost filesystem error report for type 5 error -12 [ 1559.311935][T23528] EXT4-fs (loop3): 1 truncate cleaned up [ 1559.339887][T23528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1559.844530][T18336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1559.969806][T23533] loop0: detected capacity change from 0 to 512 [ 1560.012022][T23533] EXT4-fs (loop0): 1 truncate cleaned up [ 1560.049564][T23533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.144409][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4850'. [ 1560.802735][ T5813] usbhid 10-1:0.0: can't add hid device: -71 [ 1560.802876][ T5813] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1560.837004][ T5813] usb 10-1: USB disconnect, device number 3 [ 1561.159822][T17400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.295760][ T31] audit: type=1400 audit(1791651533.069:183): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=23546 comm="syz.0.4853" [ 1561.377145][T23550] ------------[ cut here ]------------ [ 1561.377162][T23550] sp->magic != HWSIM_STA_MAGIC [ 1561.377172][T23550] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1f17/0x29d0, CPU#0: syz.9.4852/23550 [ 1561.402355][T23550] Modules linked in: [ 1561.406282][T23550] CPU: 0 UID: 0 PID: 23550 Comm: syz.9.4852 Not tainted syzkaller #0 PREEMPT(full) [ 1561.415749][T23550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1561.425875][T23550] RIP: 0010:mac80211_hwsim_tx+0x1f17/0x29d0 [ 1561.431864][T23550] Code: b6 58 1b 89 de e8 29 0a a6 fa 84 db 0f 85 e5 ee ff ff e8 0c 10 a6 fa c7 44 24 38 0f 00 00 00 e9 0c ff ff ff e8 fa 0f a6 fa 90 <0f> 0b 90 e9 7c e5 ff ff 48 8b 44 24 10 48 05 70 04 00 00 48 89 44 [ 1561.451585][T23550] RSP: 0018:ffffc90006456f70 EFLAGS: 00010283 [ 1561.457728][T23550] RAX: 00000000000002fe RBX: 0000000000000000 RCX: ffffc90011f63000 [ 1561.465776][T23550] RDX: 0000000000080000 RSI: ffffffff87661536 RDI: ffff88803308be80 [ 1561.473822][T23550] RBP: ffff88809801ec70 R08: 0000000000000005 R09: 000000006d537749 [ 1561.481822][T23550] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1561.489894][T23550] R13: ffffc90006457128 R14: ffff888061a93280 R15: ffff888033784b40 [ 1561.497935][T23550] FS: 00007f280f1f06c0(0000) GS:ffff888122944000(0000) knlGS:0000000000000000 [ 1561.506982][T23550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1561.513641][T23550] CR2: 0000001b35010ff8 CR3: 0000000058df6000 CR4: 0000000000350ef0 [ 1561.521646][T23550] Call Trace: [ 1561.524996][T23550] [ 1561.527947][T23550] ? lockdep_hardirqs_on+0x7d/0x110 [ 1561.533275][T23550] ? l2tp_recv_common+0x1e9d/0x2ad0 [ 1561.538519][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.544274][T23550] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 1561.549890][T23550] ieee80211_tx_frags+0x5c9/0xa70 [ 1561.555038][T23550] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 1561.560639][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.566373][T23550] ? ieee80211_xmit_fast_finish+0x5bf/0xbe0 [ 1561.572374][T23550] __ieee80211_xmit_fast+0x82b/0x2b70 [ 1561.577808][T23550] ? __siphash_unaligned+0x130/0x360 [ 1561.583192][T23550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1561.589131][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.594875][T23550] ? cfg80211_classify8021d+0x1fe/0xa30 [ 1561.600480][T23550] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 1561.606380][T23550] ? cfg80211_get_p2p_attr+0x50/0x670 [ 1561.611831][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.617586][T23550] ieee80211_mesh_xmit_fast+0xbb8/0x1260 [ 1561.623316][T23550] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 1561.629430][T23550] ? __skb_flow_dissect+0x3d5/0x6d40 [ 1561.634841][T23550] ? __skb_flow_dissect+0x3d5/0x6d40 [ 1561.640178][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.645962][T23550] __ieee80211_subif_start_xmit+0xa6b/0x1470 [ 1561.652002][T23550] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1561.658609][T23550] ? __pfx___skb_flow_dissect+0x10/0x10 [ 1561.664268][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.669943][T23550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1561.675945][T23550] ieee80211_subif_start_xmit+0xfb/0x7c0 [ 1561.681624][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.687399][T23550] ? __lock_acquire+0x5c0/0x1f40 [ 1561.692409][T23550] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1561.698690][T23550] ? __pfx_netif_skb_features+0x10/0x10 [ 1561.704361][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.710038][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.715774][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.721538][T23550] ? rcu_lockdep_current_cpu_online+0x37/0x150 [ 1561.727863][T23550] dev_hard_start_xmit+0x121/0x760 [ 1561.733086][T23550] __dev_queue_xmit+0x1c25/0x4a40 [ 1561.738183][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.743909][T23550] ? find_held_lock+0x2b/0x80 [ 1561.748631][T23550] ? __might_fault+0xc5/0x140 [ 1561.753404][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.759122][T23550] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1561.764613][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.770284][T23550] ? _copy_from_iter+0x270/0x1690 [ 1561.775401][T23550] ? __pfx__copy_from_iter+0x10/0x10 [ 1561.780715][T23550] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1561.786278][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.791954][T23550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1561.797941][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.803647][T23550] ? packet_parse_headers+0x29f/0x800 [ 1561.809067][T23550] ? __pfx_packet_parse_headers+0x10/0x10 [ 1561.814903][T23550] packet_xmit+0x243/0x310 [ 1561.819365][T23550] packet_sendmsg+0x32ee/0x5040 [ 1561.824340][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.830014][T23550] ? aa_sk_perm+0x389/0xab0 [ 1561.834622][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.840347][T23550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1561.846341][T23550] ? __pfx_aa_sk_perm+0x10/0x10 [ 1561.851228][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.856969][T23550] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 1561.863478][T23550] ? __pfx_packet_sendmsg+0x10/0x10 [ 1561.868729][T23550] ? __entry_text_end+0xfdf35/0x102039 [ 1561.874294][T23550] ? aa_sock_msg_perm+0x11e/0x200 [ 1561.879376][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.885101][T23550] ? apparmor_socket_sendmsg+0x165/0x280 [ 1561.890805][T23550] sock_write_iter+0x53a/0x5b0 [ 1561.895675][T23550] ? __pfx_packet_sendmsg+0x10/0x10 [ 1561.900923][T23550] ? __pfx_sock_write_iter+0x10/0x10 [ 1561.906330][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.912004][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.917738][T23550] ? security_file_permission+0x76/0x210 [ 1561.923479][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.929157][T23550] ? rw_verify_area+0xce/0x6d0 [ 1561.934044][T23550] vfs_write+0x6af/0x1050 [ 1561.938406][T23550] ? __pfx_sock_write_iter+0x10/0x10 [ 1561.943885][T23550] ? __pfx_vfs_write+0x10/0x10 [ 1561.948675][T23550] ? find_held_lock+0x2b/0x80 [ 1561.953502][T23550] ksys_write+0x1f8/0x250 [ 1561.957887][T23550] ? __pfx_ksys_write+0x10/0x10 [ 1561.962814][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1561.968501][T23550] do_syscall_64+0x123/0x790 [ 1561.973164][T23550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.979088][T23550] RIP: 0033:0x7f2811b9e1d9 [ 1561.983582][T23550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.003285][T23550] RSP: 002b:00007f280f1f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1562.011730][T23550] RAX: ffffffffffffffda RBX: 00007f2811e26450 RCX: 00007f2811b9e1d9 [ 1562.019788][T23550] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000005 [ 1562.027817][T23550] RBP: 00007f2811c35888 R08: 0000000000000000 R09: 0000000000000000 [ 1562.035873][T23550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.043895][T23550] R13: 00007f2811e264e8 R14: 00007f2811e26450 R15: 00007fffbe1afb78 [ 1562.051911][T23550] [ 1562.054989][T23550] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1562.062289][T23550] CPU: 0 UID: 0 PID: 23550 Comm: syz.9.4852 Not tainted syzkaller #0 PREEMPT(full) [ 1562.071686][T23550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1562.081757][T23550] Call Trace: [ 1562.085050][T23550] [ 1562.087992][T23550] dump_stack_lvl+0x100/0x190 [ 1562.092723][T23550] vpanic+0x553/0x970 [ 1562.096738][T23550] ? __pfx_vpanic+0x10/0x10 [ 1562.101293][T23550] panic+0xd1/0xe0 [ 1562.105039][T23550] ? __pfx_panic+0x10/0x10 [ 1562.109502][T23550] check_panic_on_warn.cold+0x19/0x34 [ 1562.114913][T23550] ? mac80211_hwsim_tx+0x1f17/0x29d0 [ 1562.120237][T23550] __warn.cold+0x191/0x318 [ 1562.124698][T23550] __report_bug+0x30f/0x440 [ 1562.129251][T23550] ? mac80211_hwsim_tx+0x1f17/0x29d0 [ 1562.134591][T23550] ? __pfx___report_bug+0x10/0x10 [ 1562.139687][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.145360][T23550] ? lock_acquire+0x1d1/0x380 [ 1562.150077][T23550] ? clockevents_program_event+0x23e/0x820 [ 1562.155938][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.161622][T23550] ? find_held_lock+0x2b/0x80 [ 1562.166356][T23550] ? clockevents_program_event+0x23e/0x820 [ 1562.172206][T23550] ? clockevents_program_event+0x23e/0x820 [ 1562.178076][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.183734][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.189385][T23550] ? ieee80211_encrypt_tx_skb+0x2df/0x430 [ 1562.195139][T23550] ? mac80211_hwsim_tx+0x1f17/0x29d0 [ 1562.200463][T23550] report_bug+0xb3/0x220 [ 1562.204729][T23550] ? mac80211_hwsim_tx+0x1f17/0x29d0 [ 1562.210043][T23550] handle_bug+0x16a/0x2a0 [ 1562.214397][T23550] exc_invalid_op+0x17/0x50 [ 1562.218926][T23550] asm_exc_invalid_op+0x1a/0x20 [ 1562.223794][T23550] RIP: 0010:mac80211_hwsim_tx+0x1f17/0x29d0 [ 1562.229719][T23550] Code: b6 58 1b 89 de e8 29 0a a6 fa 84 db 0f 85 e5 ee ff ff e8 0c 10 a6 fa c7 44 24 38 0f 00 00 00 e9 0c ff ff ff e8 fa 0f a6 fa 90 <0f> 0b 90 e9 7c e5 ff ff 48 8b 44 24 10 48 05 70 04 00 00 48 89 44 [ 1562.249351][T23550] RSP: 0018:ffffc90006456f70 EFLAGS: 00010283 [ 1562.255444][T23550] RAX: 00000000000002fe RBX: 0000000000000000 RCX: ffffc90011f63000 [ 1562.263426][T23550] RDX: 0000000000080000 RSI: ffffffff87661536 RDI: ffff88803308be80 [ 1562.271412][T23550] RBP: ffff88809801ec70 R08: 0000000000000005 R09: 000000006d537749 [ 1562.279399][T23550] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1562.287386][T23550] R13: ffffc90006457128 R14: ffff888061a93280 R15: ffff888033784b40 [ 1562.295391][T23550] ? mac80211_hwsim_tx+0x1f16/0x29d0 [ 1562.300731][T23550] ? lockdep_hardirqs_on+0x7d/0x110 [ 1562.305986][T23550] ? l2tp_recv_common+0x1e9d/0x2ad0 [ 1562.311214][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.316887][T23550] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 1562.322404][T23550] ieee80211_tx_frags+0x5c9/0xa70 [ 1562.327477][T23550] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 1562.333056][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.338718][T23550] ? ieee80211_xmit_fast_finish+0x5bf/0xbe0 [ 1562.344665][T23550] __ieee80211_xmit_fast+0x82b/0x2b70 [ 1562.350083][T23550] ? __siphash_unaligned+0x130/0x360 [ 1562.355390][T23550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1562.361313][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.366970][T23550] ? cfg80211_classify8021d+0x1fe/0xa30 [ 1562.372564][T23550] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 1562.378399][T23550] ? cfg80211_get_p2p_attr+0x50/0x670 [ 1562.383832][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.389505][T23550] ieee80211_mesh_xmit_fast+0xbb8/0x1260 [ 1562.395178][T23550] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 1562.401277][T23550] ? __skb_flow_dissect+0x3d5/0x6d40 [ 1562.406599][T23550] ? __skb_flow_dissect+0x3d5/0x6d40 [ 1562.411919][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.417590][T23550] __ieee80211_subif_start_xmit+0xa6b/0x1470 [ 1562.423612][T23550] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1562.430060][T23550] ? __pfx___skb_flow_dissect+0x10/0x10 [ 1562.435644][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.441301][T23550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1562.447226][T23550] ieee80211_subif_start_xmit+0xfb/0x7c0 [ 1562.452891][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.458552][T23550] ? __lock_acquire+0x5c0/0x1f40 [ 1562.463513][T23550] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1562.469787][T23550] ? __pfx_netif_skb_features+0x10/0x10 [ 1562.475377][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.481041][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.486718][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.492378][T23550] ? rcu_lockdep_current_cpu_online+0x37/0x150 [ 1562.498588][T23550] dev_hard_start_xmit+0x121/0x760 [ 1562.503769][T23550] __dev_queue_xmit+0x1c25/0x4a40 [ 1562.508868][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.514531][T23550] ? find_held_lock+0x2b/0x80 [ 1562.519245][T23550] ? __might_fault+0xc5/0x140 [ 1562.523955][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.529621][T23550] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1562.535047][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.540707][T23550] ? _copy_from_iter+0x270/0x1690 [ 1562.545768][T23550] ? __pfx__copy_from_iter+0x10/0x10 [ 1562.551081][T23550] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1562.556576][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.562241][T23550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1562.568180][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.573847][T23550] ? packet_parse_headers+0x29f/0x800 [ 1562.579258][T23550] ? __pfx_packet_parse_headers+0x10/0x10 [ 1562.585014][T23550] packet_xmit+0x243/0x310 [ 1562.589463][T23550] packet_sendmsg+0x32ee/0x5040 [ 1562.594367][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.600023][T23550] ? aa_sk_perm+0x389/0xab0 [ 1562.604551][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.610210][T23550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1562.616128][T23550] ? __pfx_aa_sk_perm+0x10/0x10 [ 1562.621000][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.626655][T23550] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 1562.633126][T23550] ? __pfx_packet_sendmsg+0x10/0x10 [ 1562.638375][T23550] ? __entry_text_end+0xfdf35/0x102039 [ 1562.643861][T23550] ? aa_sock_msg_perm+0x11e/0x200 [ 1562.648933][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.654621][T23550] ? apparmor_socket_sendmsg+0x165/0x280 [ 1562.660325][T23550] sock_write_iter+0x53a/0x5b0 [ 1562.665129][T23550] ? __pfx_packet_sendmsg+0x10/0x10 [ 1562.670355][T23550] ? __pfx_sock_write_iter+0x10/0x10 [ 1562.675684][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.681344][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.686997][T23550] ? security_file_permission+0x76/0x210 [ 1562.692661][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.698319][T23550] ? rw_verify_area+0xce/0x6d0 [ 1562.703122][T23550] vfs_write+0x6af/0x1050 [ 1562.707467][T23550] ? __pfx_sock_write_iter+0x10/0x10 [ 1562.712787][T23550] ? __pfx_vfs_write+0x10/0x10 [ 1562.717562][T23550] ? find_held_lock+0x2b/0x80 [ 1562.722302][T23550] ksys_write+0x1f8/0x250 [ 1562.726647][T23550] ? __pfx_ksys_write+0x10/0x10 [ 1562.731511][T23550] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.737176][T23550] do_syscall_64+0x123/0x790 [ 1562.741787][T23550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.747695][T23550] RIP: 0033:0x7f2811b9e1d9 [ 1562.752121][T23550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.771750][T23550] RSP: 002b:00007f280f1f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1562.780195][T23550] RAX: ffffffffffffffda RBX: 00007f2811e26450 RCX: 00007f2811b9e1d9 [ 1562.788177][T23550] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000005 [ 1562.796159][T23550] RBP: 00007f2811c35888 R08: 0000000000000000 R09: 0000000000000000 [ 1562.804140][T23550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.812122][T23550] R13: 00007f2811e264e8 R14: 00007f2811e26450 R15: 00007fffbe1afb78 [ 1562.820130][T23550] [ 1562.823377][T23550] Kernel Offset: disabled [ 1562.827735][T23550] Rebooting in 86400 seconds..