last executing test programs: 7m41.354611274s ago: executing program 4 (id=34): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) pwrite64(r0, &(0x7f0000000080)="ed3e91a6915dc19bf7917b03dc62acd2a001b8f827c126b976f5c79b92a7e3f6aaa10cbe2cf7bac2e5a14ba9b04b35ea6d4ab528fa", 0x35, 0xc) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r1 = openat(0xffffffffffffff9c, 0x0, 0x18b341, 0x84) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev2(r2, &(0x7f0000000900)=[{&(0x7f0000000280)="e4", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x1, 0x0, 0x1}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000600)='_', 0x1, 0x4018, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000000)=""/214, 0xd6}], 0x2}, 0x40010022) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newsa={0xf8, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3506, 0x2, 0x2, 0xfe, 0x34}, [@tfcpad={0x8, 0x16, 0x80000001}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x890) unlink(&(0x7f0000000280)='./file1\x00') 7m33.879781695s ago: executing program 4 (id=41): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)="3f51095699bba535ab39d7db74fdc1444f447f917f5f434c17d26611d2c37d32164861fb7eb8ac52ee3b92e2f66d94485d6da3b49a08ad11813405804c31b498c2825f0c35e70116a2a9307b9f4caedf912a99941b2996987bb9f356b90eaf516fdf799d606185ac9747dc8400db70fd55cfd78b3877227928439f0963e0d171f615e9a218", 0x85) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001000), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = userfaultfd(0x80801) r5 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000540)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0x54) listen(r6, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100"], 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01008fc54121020000000500000008000300004000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004050}, 0x8040) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x401}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000f40)=ANY=[], 0x1, 0x5577, &(0x7f000000b000)="$eJzs3M2LG+UfAPBnsk376+tvEQ/eOlCEXWhCs31Bb1VbfMGW4svBk2aTaUibZJZNmsaeBD2KB/8TUfDkUfwTPHj2Jh4Ub0Il80ystbZUkk229fOByXfmmSfffJ8htHxnlgTgP2s9/e2XJJwIh0MIayGEY0ko9pNyK1yM4bkQwskQQuUvW1KO/zlwMIRwJIRwYpo85kzKU5+fHp86//Mbv37z/aEDR7/4+ofVrRpYtedDCP2duH+7H2PeifFGOd4cd4vYPzcuYzzRv1ke5zHezraLDLebs3nNIp7txPn5zq3hNF7vNVvT2OleL8Z3BvEDh+POLE/xhhvN3eK4nW0XsTvMi9i5E+ua3In/tt0ZjmKedpnvwyJ9GI1mMY5nkyyuZ+dmEVuDUTke8+btbDKN43Y2qU7ricOhlffaRR3bc13qfe3N7uDWJB1nu8NuPkjP1xsv1BsXao3dvJ2NsnO1Zr994Vy60elNp9VGWbN/sZPnnV5Wb+X9zXSj02rVGo1041K23W0O0kajfrZ+pnZ+s9w7nb569d201043pvHl7uDWwW5vmF7Pd9P4js10q372xc30VCN9+8q19Npbly9fufbO+5feu/rSlddfKSc9UFa6sXVma6vWOFPbamzug/VP/999zPWP5ln/J2XRj7H+u4diTOa7PPBovmAA/9oD/X/Q/wN7b/X9f+W7yhz9f5i//6+EWf8/banK/j/o/x/e/1bm7//n6n/3a///BK8f5vLo/r+6tDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFi6H6tfvlbsrMfjo+X48XLomfI4CSFUQgh3/8FaOHhfzrUyT/Uh86t/q+HbJBQZpp9xqNyOhBAultvv/9/rqwAAAABPr68+OvlZ7Nbjy/qqC2KZ4k2byrEPFpQvCSFU139aULbK9OXZBSUrvt8HwmRB2YobWP9bULJ4y+3AorI9lrVZ+Pj4vcFiQUkMlaWWAwAALMXafWG5XQgAAADL9OmqC2A1kjB7lDl7Flz85f29R5uH7zsHAAAAPIGSVRcAAAAA7Lmi//f7fwAAAPB0i7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7BzP7lpA1EcgJ8hTtJ/Kqp6oO7CMXqELrurkqvkCJyhF+AMVN30CAhXnRmBjHBViTFu0PdJtjMT+PkZ2MzYGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBMP9rVclYhZ9edp0IJAAAAwIBNu1qmPxa5/ab0vytdH0q7iYhZRJwau8/jtpc5LzntwOvboxq+R6SEP+e4K9vriPhUtu37oep/VvwkAAAA4Dqtn54f8mg97xZTF8Ql5Umb2dvPlfKaiGgXvyqlpYdSPlYKS7/vm/haKS1NYN1XCstTbjen/3db6yR9896hXMn9Y/oSU6vGI0EAAMB/pj8SGBiFAAAAcAW+TF0A02j2u/19xrt8KDcEX/VacZgmAAAAAF6KZuoCAAAAgNGl8f9F1v87emO99f8AAACAv9l2XZfX/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBMm3a1XD89Pxx6uuxbbj3+Y86uO88oFwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8Zn/eUSAEwiAM9q7vTOb+h5UGDTyBSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPzuL/8npsaZZO61sfQ8kqydGlunxt65cfSH8fVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAv+t0v/yemxplk7rSxdDySrF01tq4aew8aRw/G278BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Lmf1jjKMADgz85mtn9UjBFyiEgFD3oxyba29qgHJXjwE6gQ0k2Nbq22OdgS1Fz0JDlKL6JHEUHIsd+h5wbqod485BBB8KbMzkwzaRa7lGRm0/x+8M77zGSY93lnl5An8+4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUtt/64PcybmebyTxOimN3d9aWsn7roT5ze+PeTNayuPWogb5988BzH3MvVnfOTFd2vqo/GQAAAI6HdlnfR8T9dHMh65PJrP6PtDwnq/l/fCaPy3r+4bp/a2ftZPGjmbz+//79PQNN5uNkF11e6ffm96cycQjTOxKefeQZE4M7P/jfS3vwgiTvrj+/nQ7uZ+u7O3fe7gzCE3VkCwA8jtmyL4Ly76Gs7zaZGADHxkSl8C7r//ZkszkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1GF7PZ4q41ZEzEzsxpmtnbWlYf3tjXszZbtw69ZG9ZrZJdKIWF7p99Ia5zLurt+4+cliv9+7Vn9wJiKaG70IPhzhnIj/P6d4e0Zzsxga/JMFrcbTaD5IitdnXPI5yKB87x38lRv6hQQAwBNhtrP/WFq0rK6/n24uZMdaUxH//rS3/n+lEseI9f+fH124Wx2rWv93D2+aR87c6pXP5q7fuPnaypXFy73LvU9fP9t9o3vu4vnzF+eyezU/txxJb77pNAEAADjCOkWr1v/J1P7n/6crcYxY/3/+Q/fL6lht9f9Quw/9ms4EAADgONp9WP7cS3//1RpyRqvTiS8WV1evdfPtg/2z+bbWdB/TibwsHyjr//ZUoykBAAAANdleb+15/n+pEseIz/+f/vmFX6vXbEfEqYirEdGbXbrav1TfdMbaIX8+ufV1ubJgyOc/AAAAOB5OFa26/j8drP9PHix5SCLi1ZfzuPyuq1Hq//Y73/xSHau6/v9cfVMcS8l0fj8G/XTExHTTGQEAAPAkO1m0rNj/I91c+Pi30+91rP8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNt/AQAA//8crjyv") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xbe562c8f84d38897, 0x49) 7m28.276572899s ago: executing program 4 (id=51): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) timer_create(0x7, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r3, 0x0, 0x0) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0x4004e502, &(0x7f0000001200)=0x3) r4 = memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x27, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000040000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b0000008500000006000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000905308001000000085100000fbffffff30a9b7feffffffffdf3a00010100000085100000feffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c0000002f67000000000000bf91000000000000b7020000000000008500000084000000b700d4f7ffff000095000000000000ae"], &(0x7f00000011c0)='GPL\x00', 0x6, 0x0, &(0x7f0000001200), 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001280)=[r5, 0xffffffffffffffff, 0x1, r3, r4, r3, r3, r3, r3, r3], &(0x7f00000012c0)=[{0x2, 0x4, 0xe, 0xbd3a71b7755b6016}, {0x2, 0x3, 0x6}, {0x5, 0x80, 0x1, 0x1}, {0x4, 0x4, 0x4, 0xb}, {0x1, 0x5, 0x1, 0x8}, {0x5, 0x1, 0xb, 0x4}], 0x10, 0xaa}, 0x94) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=0x1, 0x20, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r7, 0xffffffffffffffff, 0x36, 0x10, 0x0, @void, @value, @void, @void, r8}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001400)={@fallback=r4, r6, 0x21, 0x0, r3, @void, @value=r3, @void, @void, r8}, 0x20) 7m24.225535866s ago: executing program 4 (id=59): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x4b) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x3, 0x7, 0x6f, @time={0x6, 0xce}, {0xc, 0x1}, {0xd, 0x9}, @connect={{0x7, 0x6a}, {0x6, 0x40}}}], 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) renameat2(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./bus\x00') 7m19.819176302s ago: executing program 4 (id=67): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x8000000232b) r5 = socket$inet6(0xa, 0x6, 0x0) listen(r5, 0x5) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@fat=@check_strict}, {@fat=@check_normal}, {@numtail}, {@numtail}, {}, {@uni_xlateno}, {@numtail}, {@fat=@errors_remount}, {@numtail}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8, 0x1) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='omfs\x00', 0x0, &(0x7f0000000340)) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f0000000080)={0x80, 0x14, 0x0, 0x0, 0x7995}, 0x9add, 0x0, 0x0, 0x48000000, 0xffff0001, 0x3, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2d, 0x25dfdbfd, 0x7, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x4000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x77ba) 7m15.348001599s ago: executing program 4 (id=72): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 6m59.06129464s ago: executing program 32 (id=72): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 5m51.98901744s ago: executing program 1 (id=192): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)="3f51095699bba535ab39d7db74fdc1444f447f917f5f434c17d26611d2c37d32164861fb7eb8ac52ee3b92e2f66d94485d6da3b49a08ad11813405804c31b498c2825f0c35e70116a2a9307b9f4caedf912a99941b2996987bb9f356b90eaf516fdf799d606185ac9747dc8400db70fd55cfd78b3877227928439f0963e0d171f615e9a218", 0x85) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001000), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000540)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0x54) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100"], 0x16) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01008fc54121020000000500000008000300004000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004050}, 0x8040) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x401}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000f40)=ANY=[], 0x1, 0x5577, &(0x7f000000b000)="$eJzs3M2LG+UfAPBnsk376+tvEQ/eOlCEXWhCs31Bb1VbfMGW4svBk2aTaUibZJZNmsaeBD2KB/8TUfDkUfwTPHj2Jh4Ub0Il80ystbZUkk229fOByXfmmSfffJ8htHxnlgTgP2s9/e2XJJwIh0MIayGEY0ko9pNyK1yM4bkQwskQQuUvW1KO/zlwMIRwJIRwYpo85kzKU5+fHp86//Mbv37z/aEDR7/4+ofVrRpYtedDCP2duH+7H2PeifFGOd4cd4vYPzcuYzzRv1ke5zHezraLDLebs3nNIp7txPn5zq3hNF7vNVvT2OleL8Z3BvEDh+POLE/xhhvN3eK4nW0XsTvMi9i5E+ua3In/tt0ZjmKedpnvwyJ9GI1mMY5nkyyuZ+dmEVuDUTke8+btbDKN43Y2qU7ricOhlffaRR3bc13qfe3N7uDWJB1nu8NuPkjP1xsv1BsXao3dvJ2NsnO1Zr994Vy60elNp9VGWbN/sZPnnV5Wb+X9zXSj02rVGo1041K23W0O0kajfrZ+pnZ+s9w7nb569d201043pvHl7uDWwW5vmF7Pd9P4js10q372xc30VCN9+8q19Npbly9fufbO+5feu/rSlddfKSc9UFa6sXVma6vWOFPbamzug/VP/999zPWP5ln/J2XRj7H+u4diTOa7PPBovmAA/9oD/X/Q/wN7b/X9f+W7yhz9f5i//6+EWf8/banK/j/o/x/e/1bm7//n6n/3a///BK8f5vLo/r+6tDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFi6H6tfvlbsrMfjo+X48XLomfI4CSFUQgh3/8FaOHhfzrUyT/Uh86t/q+HbJBQZpp9xqNyOhBAultvv/9/rqwAAAABPr68+OvlZ7Nbjy/qqC2KZ4k2byrEPFpQvCSFU139aULbK9OXZBSUrvt8HwmRB2YobWP9bULJ4y+3AorI9lrVZ+Pj4vcFiQUkMlaWWAwAALMXafWG5XQgAAADL9OmqC2A1kjB7lDl7Flz85f29R5uH7zsHAAAAPIGSVRcAAAAA7Lmi//f7fwAAAPB0i7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7BzP7lpA1EcgJ8hTtJ/Kqp6oO7CMXqELrurkqvkCJyhF+AMVN30CAhXnRmBjHBViTFu0PdJtjMT+PkZ2MzYGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBMP9rVclYhZ9edp0IJAAAAwIBNu1qmPxa5/ab0vytdH0q7iYhZRJwau8/jtpc5LzntwOvboxq+R6SEP+e4K9vriPhUtu37oep/VvwkAAAA4Dqtn54f8mg97xZTF8Ql5Umb2dvPlfKaiGgXvyqlpYdSPlYKS7/vm/haKS1NYN1XCstTbjen/3db6yR9896hXMn9Y/oSU6vGI0EAAMB/pj8SGBiFAAAAcAW+TF0A02j2u/19xrt8KDcEX/VacZgmAAAAAF6KZuoCAAAAgNGl8f9F1v87emO99f8AAACAv9l2XZfX/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBMm3a1XD89Pxx6uuxbbj3+Y86uO88oFwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8Zn/eUSAEwiAM9q7vTOb+h5UGDTyBSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPzuL/8npsaZZO61sfQ8kqydGlunxt65cfSH8fVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAv+t0v/yemxplk7rSxdDySrF01tq4aew8aRw/G278BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Lmf1jjKMADgz85mtn9UjBFyiEgFD3oxyba29qgHJXjwE6gQ0k2Nbq22OdgS1Fz0JDlKL6JHEUHIsd+h5wbqod485BBB8KbMzkwzaRa7lGRm0/x+8M77zGSY93lnl5An8+4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUtt/64PcybmebyTxOimN3d9aWsn7roT5ze+PeTNayuPWogb5988BzH3MvVnfOTFd2vqo/GQAAAI6HdlnfR8T9dHMh65PJrP6PtDwnq/l/fCaPy3r+4bp/a2ftZPGjmbz+//79PQNN5uNkF11e6ffm96cycQjTOxKefeQZE4M7P/jfS3vwgiTvrj+/nQ7uZ+u7O3fe7gzCE3VkCwA8jtmyL4Ly76Gs7zaZGADHxkSl8C7r//ZkszkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1GF7PZ4q41ZEzEzsxpmtnbWlYf3tjXszZbtw69ZG9ZrZJdKIWF7p99Ia5zLurt+4+cliv9+7Vn9wJiKaG70IPhzhnIj/P6d4e0Zzsxga/JMFrcbTaD5IitdnXPI5yKB87x38lRv6hQQAwBNhtrP/WFq0rK6/n24uZMdaUxH//rS3/n+lEseI9f+fH124Wx2rWv93D2+aR87c6pXP5q7fuPnaypXFy73LvU9fP9t9o3vu4vnzF+eyezU/txxJb77pNAEAADjCOkWr1v/J1P7n/6crcYxY/3/+Q/fL6lht9f9Quw/9ms4EAADgONp9WP7cS3//1RpyRqvTiS8WV1evdfPtg/2z+bbWdB/TibwsHyjr//ZUoykBAAAANdleb+15/n+pEseIz/+f/vmFX6vXbEfEqYirEdGbXbrav1TfdMbaIX8+ufV1ubJgyOc/AAAAOB5OFa26/j8drP9PHix5SCLi1ZfzuPyuq1Hq//Y73/xSHau6/v9cfVMcS8l0fj8G/XTExHTTGQEAAPAkO1m0rNj/I91c+Pi30+91rP8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNt/AQAA//8crjyv") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xbe562c8f84d38897, 0x49) 5m47.145152737s ago: executing program 1 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth1_vlan\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x2280) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20100) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) r9 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x828000, &(0x7f00000001c0)=ANY=[@ANYBLOB="667fa8", @ANYRESHEX, @ANYBLOB=',rootmodm=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r0, @ANYBLOB=',default_permissions,blksize=0x0000000000001a00,allow_other,max_read=0x0000000000000006,max_read=0x0000000000010001,blksize=0x0000000000000200,default_permissions,uid>', @ANYRESDEC=0xee00, @ANYRES16=r8, @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0xee00, @ANYBLOB=',hash,fsname=/dev/input/event#\x00,euid<', @ANYRESDEC=r3, @ANYBLOB="bbf4"], 0x0, 0x0, &(0x7f0000000380)="a084fa6b8a76cdb46521557921f3f37397db14a086579eb6071fa05c117408fad3e953c50be3aa14c2388a569558541e9b61f3b4f79321eef45acf69a39797c6f92dce28fcad00588ef3d43dc3c60dd1a82fa05091765f1c3371b68455dbfe2783e76ba5afb9926c6e307ebf9109992010906d5a8062023d4f04d069b71db05210fe8e8f878a4aa3eee2675ac630fb697b6e0e00fcfc7b9cacdaa0054cf2965510c3f8c5695b653959299039a88681691d5f82be7515f6e5d7e2cf08ecb97dc595cd6b00a99ebccc24abff0ef27b8994747fe8ffe6dc725ec7b526edcb2d46") ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000480)={r9, 0xffffffff, 0x783c86a3, 0x1}) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000080)=""/196) 5m45.863243568s ago: executing program 1 (id=204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2ec, r1, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xd2, 0xfa, "ad42f8c2a15d4a28fa533c7c2b725f67a2bdbff2ab27ce39d8d7ecfb6ac0e1dd69c0a5881a7edb943788d37a49021cef896446cc74238a9d3db97b2aabbb4985496813090eac262afb072dfcab9a80b0d4ceeb5cbb44bb62b3154a2dcfaade22053fdc967ec8545c7b9c295e3387aad6b1305cf62972eef48c428a12d37ef8ec25eec1834d39341420070a97c9f9b8ac8f5a8ffe8dbbc22899a79e3903c49f589122d0643b043a5e5563f1224b47209749b2f39d1811d9da2ce7179bbab77ab97544dc8674f3749ab3e282e6c4bf"}, @NL80211_ATTR_FILS_ERP_REALM={0x5a, 0xfa, "da3f0aecb90bed4bac38544eac15a3c29ee26756ccbb112ed07f47dd8d4e0c07a55eeab60d17012737251636a15d296e8a7c072a854abc8032c178185fc3302e6d953d1d72ea484321151dfded77d22482ea4a820b74"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}], @NL80211_ATTR_IE={0x8c, 0x2a, [@random={0x9, 0x4b, "1a60161233d83725e29685b09fde56e4fb0ec4194e5626e36798ac91a2a3c14397891a0716b20b6c7ca1542f8c7c52b96677d8d4ad28e5b17ea7d14c573fe87b612a8c3834804f3fd5223b"}, @mesh_chsw={0x76, 0x6, {0x12, 0x4, 0x31, 0x400}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x6, 0x7, @device_b, 0xa13, 0x3, 0x7be3}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @cf={0x4, 0x6, {0x5, 0xc1, 0x9da3, 0x3}}]}, @NL80211_ATTR_IE={0x100, 0x2a, [@ht={0x2d, 0x1a, {0xc, 0x1, 0x7, 0x0, {0x3, 0xbf7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x1, 0x6}}, @channel_switch={0x25, 0x3, {0x0, 0xc, 0x2}}, @dsss={0x3, 0x1, 0x95}, @channel_switch={0x25, 0x3, {0x1, 0xb0, 0xc3}}, @random={0x2, 0xa0, "ddd324923e0687baaca04fdebad529bc140328e655480cb23e804545548e4f994d5d2f22271d61ef2c037ae8077b4c95595cd804c57158ac580bec7c8f9d65e8100622ff9097e02b977955d42c41760f43cf79c0dd817e31ff1159e2a24d3942789b27075a54866a8bc7c23a894b5b6eb93f172232bf13a1b550215eb97ac7bd41780246bc56eccd865294ec12c0c3e1ce0d0d7a968793de191a63ddac3086fc"}, @gcr_ga={0xbd, 0x6, @device_b}, @tim={0x5, 0x27, {0xf7, 0x94, 0xf, "dc6103ca4e02d4a1ce1e80a43c20e8df1e9e72627b9fed8a9034dc808bf4783e91d374a2"}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x24044894}, 0x4004000) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='ocfs2\x00', 0x10c01, &(0x7f0000000500)='*-f&+}@\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x65}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfd3}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffd}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x574}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x47}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc801}, 0x4004001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r4, 0x5, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x48010) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x146}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}]}, 0x5c}}, 0x4811) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x78, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x13}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xf}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x113f}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) io_uring_enter(r3, 0x44f2, 0x1d7e, 0xf2, &(0x7f0000000b80)={[0x5]}, 0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000bc0)={@none, 0x439}) ioctl(r0, 0x3, &(0x7f0000000c00)="b9d3021cc1d061967912d6ba9258f2c8eea085400e6de20d36b243213fbacab7695a60aeb18e98716abdeef1001b6e38dcfa68693dba25e9621992ca4e9f860437f697d8cbd34199f1d17f1233417a7eb106f9cb979c535842f32298507290fe365c805dcfe50640950cfaae36ff5ddcc61450a106713e7793fdfe616ab2e786b5ebbaff0983a0b7895b8fcb7c33d722b04ccf734fcd447356be1ca5") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r4, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x1d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc084}, 0x890) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e40)={0x26c, r4, 0xf01, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c8299d3ebf2f7c62"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f511a25fd0d6db5228f133616deb2ab6acf2b2d2cdc9a1f4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2c434737d542b1c0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "247d70204c7e185c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7c6284e2da8c0c39"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ce457ef8cf8e16ea"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="652aa9d4e1159e493987068907ef3418"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="69321789845f988ee9b5511fc81c128a23ba70f80c969bf4"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="47b9c629282b56d3a2c2ab540e466c3dae73219f870d127b8b13fb4c5095f170"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0842464c6e7b9373"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02ebe4a7969a55a0cbc78e6fcfcb2c42ef44ddc440ab2dce"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7e000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d3f0bc04e303a37a"}]}, @NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3fbd017154ced9ea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fdc25a6b16bd3072"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7192b89df0a85b6c460350b560b5bdf890dc88c20c97b31a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f6ceef809d287c3b80b75682ffb55a33ba2531a6ddab04c5ea19add7d4cd7b45"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="65795ed375da0de58a5f6f2ad6377f1a5acd9b2032a56075"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9569fdc215dff9e85130f8ec0d9eb7450b29fa1f07b561badfe4e95dd78dad01"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1183a87450c512d5d9c265bb9c3558481325eabb4d098d10"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84e6a06ca07be670"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="542a53dedfdc8423503e8407e37aa0ce"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="570b268bd6ac853bf6ba8f9286241d83"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d2c5cc9b22fa277e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "16e4d3a0ba4281a5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b209333b5998e8e9dc0c57c0418305c36904a8a0bd4a3e1dd8dd63464c1313e1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "648cfba44f7665f9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4041055}, 0x4010) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) setsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000001140)=0x6, 0x4) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x3c, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0xc4) setsockopt$ax25_int(r3, 0x101, 0x7, &(0x7f0000001380)=0x8, 0x4) io_uring_enter(r3, 0x4ba4, 0x2af8, 0x0, &(0x7f00000013c0)={[0x1]}, 0x8) writev(r0, &(0x7f0000002a00)=[{&(0x7f0000001400)="061c3dc5d52db4236c6bbf476ce0ab38783e7a5cbb29846a06fc539ccd3cc6191cbbac4cd700e1114fc06e2104414688bea1d7c20f1947034110869f7378a08cf6bb7156b4b765ee311d5e64e890aab90fee17a2d3e9d2a6ca510fdcdbbad40b732ff0e9167c66caa98a59fcf60d063321aa8a7966290ea6c5a70ba55f7688361e08c4da65b5430d7f42c155728f788e54b17fdece8a63503c9935359b", 0x9d}, {&(0x7f00000014c0)="5bd79628eca42c70800b5707", 0xc}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="0116f2fc40f7302cef1387c3a6e692d34026ebfb62d9cb2e364dfd2ce7ba9bc30da6a20adba2039c111485dcc54c5382a5d3d1021eaf5b6535f0590b6d3f4d9cd0f0a3dbe68dc0d6a86b4e97d1f8e5f89dfb8f76c0d3f0b598a008b6be56075e453a06ea920c5d0a69cd4f067465ab8072a7c49e605439179172fa9fb6f10bb2b578c25b976619450fc2d4aa7fcceb44c6ec34", 0x93}, {&(0x7f00000025c0)="f38bab0b467dc03c41", 0x9}, {&(0x7f0000002600)="9b02599118363bc3376ef498ec8abafd9ae0ab095ed7893f0dc061107a3c4f1ca7cc02e3f6d3f96bdcd02e9295dfbcf9dcd34e04cc1661ffc029fa63ba781290b391f296713ed6e016f07a47db6293112db01e906cce18447dbf9db37ef642821c845a4c62c4739ea7caafc2a95bc94bf2f4a1eefe905c2d2df02f9f773d52bacb71db0693fc08c350173197403e8d254573ff29ddaaa5746104e8ca5f3a99c4b93d8ad99b99f694", 0xa8}, {&(0x7f00000026c0)="fe99cd8e5595f59176daa389fe9bd181cba687636b43fd8a2cace3ceb27e9d6683b3133734a4ed6da502ba237ca314164a79c6db80a065b03549c12bbe92eb2a9c1f41d47b942acbe6a8cfac9567e6f65e4967a7ad9177057939af9a266f43d4a3289d0a4c5f4228b4eaccaa24f9f51c1eb8bfa94a65ff94eed573e089a48e73f3320bc74de975c548a1d48ba17ddfc53e7c01d2aa7d435bf041d77fb43de27c4f2b342aa2d98c3abe43c4ce73de74f29d0cbe53494e0cdd6f8fe4853482d5b9b3e60d2e0e2ce34c3f307f986f3ecb6ceaa7ac461667a1b9f6f7f6a7c1dff797e9", 0xe1}, {&(0x7f00000027c0)="bd29c6937381da1bd7096da98c97646a13ab579b5eb48ad1c7fc3e41ad92f72bb1456d983169f685fcbd7396bd929be38051d6ecc1a3c9b711c242b7139fe7ae4e67a5d6565be230cbdf65580246c0b9da3f7f8f704114cfa95869616acd1e99", 0x60}, {&(0x7f0000002840)="150c9a7fb284c9ff2b7839f03177577ab88cbc503afb2c38dedb56e6623624514bf52fd150a3dd2d9adb026dd81037f24e86be549afa2b6d5bc79f2a666de8c553cd0667e6da295b807ea5e7848aa881dcde8db0965f4bfcacb18243ed076f054d4f7cede3c632fd1fbed675ddc5a4321e53f47f8706e1d30dde27c7bced2af9153b47192493f4e4e633f03529d6da2ec642122aea753f6c5e01ca63a522e9b6a5860c58f668eada5a5162efe4144f1c5d04b257ba31c783b484ef2b7597", 0xbe}, {&(0x7f0000002900)="082dcdcf4f869af1bfa3d47947369fb9fbf6dd952dc76d363f195be6d675f3c4eb5100f6e401f2e12f51f1a179c042ac695263a680e311fd9840d4e5ff4d3ea96c1be78831ad4033c1a567e352ea0e98b0a69114a13dabfdc545c845c76ce8f1922f454fd6ccae048463ba51a633ae7ef7d9fd84ce4043b04def3aa27cfea4975140e2d03d0f41b8d48e7aab06d399fa9c8e312579c654f79fc07a6319b5746884ad3a45fd45425bf51829f17f7e757f86ff1713520907a0485ce1c13c08cde608209ea380fbfdf2c59dd11221ecbee8ebaf27a3c92167d8193fb783134b9f7768179dcb685405", 0xe7}], 0xa) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f0000002ac0)={0xfffffffc, 0x0, '\x00', @zc_export={r3}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xf1) setsockopt$ax25_int(r6, 0x101, 0x0, &(0x7f0000002b40)=0x57a9, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002b80)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f0000002c80)=0xe8) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000201, r7, &(0x7f0000002cc0)='./file0\x00') 5m45.618091493s ago: executing program 1 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) getegid() r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000180)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x80, 0x0}, 0x20000000) 5m44.033558581s ago: executing program 1 (id=208): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) timer_create(0x7, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0x4004e502, &(0x7f0000001200)=0x3) r4 = memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x10c00, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=0x1, 0x20, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r5, r6, 0x36, 0x10, 0x0, @void, @value, @void, @void, r7}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001400)={@fallback=r4, 0xffffffffffffffff, 0x21, 0x0, r3, @void, @value=r3, @void, @void, r7}, 0x20) 5m40.134906355s ago: executing program 1 (id=215): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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") r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x6}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000005000000040000000b"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='10', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) write(r4, &(0x7f0000000280)='0', 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000004000065be110ce032dd5a2f3cdd41809e220cb64fe784c260d600f4be481725bf898ffe830df095323411d96db80f27772cb2721c4e4a08dd4055a7411c902ab6de968cf53a75ffa570fe013da3eb044b4ff1da4114afa6d93065435a88b0368901ca501207c4ca47c80eaefb1fc5c8ee72ea", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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") (async) socket$inet6(0xa, 0x3, 0xff) (async) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x6}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000005000000040000000b"], 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) (async) write(r2, &(0x7f0000000380)='10', 0x2) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) (async) write(r3, &(0x7f0000000200)='1', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async) write(r4, &(0x7f0000000280)='0', 0x1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000004000065be110ce032dd5a2f3cdd41809e220cb64fe784c260d600f4be481725bf898ffe830df095323411d96db80f27772cb2721c4e4a08dd4055a7411c902ab6de968cf53a75ffa570fe013da3eb044b4ff1da4114afa6d93065435a88b0368901ca501207c4ca47c80eaefb1fc5c8ee72ea", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) 5m23.859013175s ago: executing program 33 (id=215): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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") r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x6}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000005000000040000000b"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='10', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) write(r4, &(0x7f0000000280)='0', 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000004000065be110ce032dd5a2f3cdd41809e220cb64fe784c260d600f4be481725bf898ffe830df095323411d96db80f27772cb2721c4e4a08dd4055a7411c902ab6de968cf53a75ffa570fe013da3eb044b4ff1da4114afa6d93065435a88b0368901ca501207c4ca47c80eaefb1fc5c8ee72ea", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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") (async) socket$inet6(0xa, 0x3, 0xff) (async) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x6}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000005000000040000000b"], 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) (async) write(r2, &(0x7f0000000380)='10', 0x2) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) (async) write(r3, &(0x7f0000000200)='1', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async) write(r4, &(0x7f0000000280)='0', 0x1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000004000065be110ce032dd5a2f3cdd41809e220cb64fe784c260d600f4be481725bf898ffe830df095323411d96db80f27772cb2721c4e4a08dd4055a7411c902ab6de968cf53a75ffa570fe013da3eb044b4ff1da4114afa6d93065435a88b0368901ca501207c4ca47c80eaefb1fc5c8ee72ea", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) 1m54.191421689s ago: executing program 0 (id=653): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1000c0, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x3, 0x9, 0x4000}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x3ff) sendfile(r1, r2, 0x0, 0x10ffff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x483aa011, 0x8, 0xfffff801, 0x15, "000000000000f00a00"}) 1m52.830650992s ago: executing program 0 (id=656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x0, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m49.629702438s ago: executing program 0 (id=661): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x8000000232b) r3 = socket$inet6(0xa, 0x6, 0x0) listen(r3, 0x5) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@fat=@check_strict}, {@fat=@check_normal}, {@numtail}, {@numtail}, {}, {@uni_xlateno}, {@numtail}, {@fat=@errors_remount}, {@numtail}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8, 0x1) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='omfs\x00', 0x0, &(0x7f0000000340)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f0000000080)={0x80, 0x14, 0x0, 0x0, 0x7995}, 0x9add, 0x0, 0x0, 0x48000000, 0xffff0001, 0x3, 0x0}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x77ba) dup(r4) 1m41.608089381s ago: executing program 0 (id=669): r0 = memfd_secret(0x80000) syz_mount_image$hfsplus(&(0x7f0000000380), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@umask={'umask', 0x3d, 0x1}}, {@type={'type', 0x3d, "98acdea6"}}, {@part={'part', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'cp737'}}]}, 0x1, 0x5f1, &(0x7f000000ab40)="$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") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x50009404, &(0x7f00000004c0)={0x0, 0x10, 0x3a, 0xffffffff}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{@any, 0x200}, @local, 0x9, 0xfffffffffffffff1, 0x3, 0xfffffffffffffff9, 0x1, 0x0, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x82831, r0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000400)="fe", 0x1, 0x20004015, 0x0, 0x0) shutdown(r3, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x3) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000002c0)=0xeeee8000) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="babbbbab4eaf7befbbbbbbaaaaaaaaaabb86dd6000a07864757dcbab91cadb81350cb6a16d000000103a0000000000000000000000ffffac141400ff0200000000000000000000000000018b00907800"/91], 0x0) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(r0, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x10042, 0x0) write(r5, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./dir0\x00', 0x1ed) mount(&(0x7f0000000b00)=@filename='ubi0:testvol\x00', &(0x7f0000000a00)='./dir0\x00', &(0x7f0000000c00)='ubifs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x5, 0x0, 0x1, 0x0, 0x800, 0x0, 0xffffe, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ftruncate(r0, 0x9) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000600)={0x1000, 0x0, 0x3c00, 0x1e0, 0x3, 0x192b, 0x1, 0x2, {0x2, 0x805, 0x1}, {0x5, 0x6}, {0xa, 0x9, 0x1}, {0x200, 0x8}, 0x2, 0x10, 0x0, 0x6, 0x1, 0x566, 0x9, 0x5, 0x6, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0xb}) r7 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x7, 0x141282) writev(r7, &(0x7f0000000840)=[{&(0x7f0000000000)="948e36f0e9e78aa387ec1b90e64932dd62e8dd0483ec93ac345961f104e269345c433f0ab722cfc5cf8a35758ee816e0f5a25cb0e4f014198f34581476612f74f14514a09272cdd230417b7c31f923af978a3081d16adf8d7bd00f400fa593267f0f3ca4e97953860c1ad242deaeaf5f317f97e00286eed05f8ff521f175f93b16868ee947d99f4fbb11f3c34e5551a8a58c6dc6710a6929e97e68129c99c16020f61404a221f79cf5a3bf95e5756a77c2b24eeb29e0a4", 0xb7}, {0x0}], 0x2) 1m41.160511802s ago: executing program 0 (id=671): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) unshare(0x2000400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$packet(0x11, 0x3, 0x300) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 1m40.426371149s ago: executing program 0 (id=673): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) (fail_nth: 2) 1m39.640119158s ago: executing program 34 (id=673): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) (fail_nth: 2) 40.02139508s ago: executing program 7 (id=816): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') syz_fuse_handle_req(r0, &(0x7f0000000cc0)="f773091228a43a58c864f1e0366b07de21fe64fbd0bf85a894f8d30ff6cc5256c4d3abd726c119dbebd0ddca6ad62fdbc55f46668ec0858ba96bf6733f0be147e9108ebf89278ca74e07fed107889459c0a5e30616db71c6973818d14e3571c410aef47e6e54ba02e48ec733ebc921795a1f431faeecbc65696ffb9e08760f45650f650d24af651d9986b956d8dd66017f17012f2358b5f69dd63f9aa5fad2ab7ee6df7c99f0b5601e1dab2ed5ca6aa237c52a838d7d51293628dde608fc4ec691b6e2023ff6a6813c505fc81bd0a0de800a5bd701a401ed07139dfa917e524c7d8fd47094122e9acb0382682d0b2adc54ab61c2d9aac6b5b0d50623187e31ca089585dab35411759db09bc44178011883cd0d5ab3fc6f8be3d0e71f083fb911a229995801eeab83581aa5bde0db85ff5c77aa311fdc9f9b4b4de0a96d371b6371ace3923e5557c7e911f522e132bae799ec6d11a43ff7420d4833d306f261ab6636b1f7d250829700456e3aa69bdfa28f24acd27b4df16cf417a7bbb852fe7b50e3841708110ab82af1e1145c542afb83cd7b542c6e310a86cdb76d492955312ae6665c95f36a0683bd12a394d6a45a0f38fcde7d665c4afbb329f3486e1b21af321b3f933d585d885485e6d9448b35e0f8d825365ce26af6cb8fb7466b66491e34b5313019beb3b2934b369daaa16b73734d3f787dcbe3115a3da3804aca82335ac9b20823728a6ee0d292dbcebb103ecdec0d27ae3a3ad5e0040cb78abfddfe16f98397c5f1f910372454722a612a0cc91ea8f709544f22c4e3bd70840745638d83b74197c0b22331e3b107af26097a37c8dd2b91e5156af1a33e06846eb15aa2fe95b6df98bfa7fe28693e0ed082aacb3181b657f81790d4556506f8f2a3753bfbd2949429dc3cd1e11291e82dc3db974a13d88d9cb4242165201f3d9b130c128d057bb9167f12859fbef6de8216d70eec7d3706b9013f9b8f61d8059ab50904b66a32376840d8c3e714bd6ae87640f352ca2b4fa2c1cd83f28d5de889f1454605fdd49c7a7cf1af226895ad6ce6612063d88ae60f5b8af22ef1306f55205152f0e72f2edee901bd89136eebed01475edd572f5a4da8b34bc6db8f29944cc720cf2b03cd2f768a34a81fdd58693fe859edfb2799b3f90cae32b6d2c577dfb9e03ab2bb25a41f53a42c11c89a615bf1c44f5c61084c70882a55fb3039792e9fff127b323c0783c506b6e4b7079cf27f67fdb191256b7c908e1e30a8f72072ac4323337062da5132369135408bf74e1b1f6c1bae332f75291d7a4f4aad4b9f70be298868305486c519434652da2535ff7924324472fb23c84558a5b1578ae94c8805becdb99eba47add535fcb7a72ad9b5d631b824a35d58807ea066bbe53859c50b5adb3508ccb3ae974ee187e40dbfc09a326b06a6004aa81c6c91eadf97ccc77cf9ccf4ed92199d95c2c8d5c965594e306d4e8b78d99d2ab0d282890c9d34639d719488b8d5fd3832a01f1a5f75449f460688e63825421aecef8a43a187739d8b1e14e54c658d57e4cf607430ea530720b3308609b57a9148ad5b921d94b6bb775880d492bb515bbd30caeb4ab8fc8b0c392a6c76dc63ca136d6e76e49a0878ea9577831e7bb3b4e3915b09222d3ccbec1b3dc4b1fd1515f302ba48d15adb9fd7aeb26fe553a60dcf82ff70b6c5d7389c54194e46bf7768584acbc18c7fd7fe0fdb11dd32a322f0ae97b481da34b47d0abc16c6d12f8e9d12db2dee5a1d66d5876bc6e100e02f3a921088947fc1d0a4d8e4e878e92cee18ceb78c7d9bf0204cc515eb8185b985e967134a1400b6a5b945b3ff86f62c2da8fe6dc8628ad36910b863a4b7cc519d853e6e3c6aff4d91862dc8c1364a8559f0c58f88a90ca4bc4a9d1aa2026229d46482819df72902a8d77615042340d758bb49153eb695823d43ef50e10e700a7303a4b798499464f39412a7b2cd7c460717364c595f3711d9ccb710075ae301100ce9f0c5d8b6ccf4f673112e2a7c2b29e56ab556d3e9dc0e777da840e1e304a24227bc9d1ba3c31f2bfc39b6ffe06e7dfc08ffbb799f56c5e9b4ce9120d10bc52d4d105167b30be7d4afa0007c59c3324121568fd4f48778d7b17a1ef117036520d25367253d763dd2f1369ef6562afeaa89dcbdd433ef80f92c41143cfeaf46325f2191b1b29b6a457e0a88e7a54dfede8e186ad4fd4d3eab77136d9e403dda03ddfb24708d648840427087481424d21b25a52922a359129ce109fec903fd33f03ea6176cb7cb64567d08204902acd1f1d0146c7c8ef5ca24d04209f2b55974ed7e11eb081beed06eb03ddb5ae80e3424d52741a5e7c8c89006a62f6ba37a7e39b75566b8d57cb11fd23ff73f7f251bfcfb74336760296a801488f77a8f0a830eb4ca2987be3ce42e2aad2f4a975d95eaf0834fbab05a7e97837c0d49ba31c93b2cd3ea05319ce1d223df3a08fc35d6d99bbc863602bc84d26926241ff70d7715d27d60b201315264f2ee3ed0ee2d1959228d9b388019151580a4a68449fd37cd2c894d749a0a281c4e458f5bfc76189e7c2ae21e318a99792090e7bb8bc73ead76439a4408b2ca49678ed93ececfdaedde0bea7f8df33910ab08518829435e642bad3aa9e373fdeb80c981e8f6f11602a8cb23b25dd718296c698aa602889638041b286c3234ae10d7d0c8ff1fe301735a467475db85fe88d155f4a8ac86937392129141f2784ff559c7dc79f0fc6a43c940fe735d91c74e3975415969548a9d7e996b5d6a0801e09519ab3852e8c5cc23f380be09fb7fd37e0cbc9f540a613aa289cce31fa3ee913e364a8a8fc1490087863222160b6899e32a391e090d41bfc961943d03f7b2f8e49750a04a20f2e2ca2951498e0fa8cf0d33d022d490704015c0a83ffb9f44114e37a386f2c7f940cce802edca5ff4ddeae0666167c2a466aecd919629185f491a210d407ebd09600406178ecc818a7cc4867ff14234efad41453027f6cbc62b4649fea7b227ede841e9816d98636c2a2c950680983d2375233a7dd64dc71c9733f5502ff4016724506ff026ba71df2623446f083df9e6df6e7fb701da63c640f8599e09cd7ea1b818bc34349a051430fe5791df7724eda9eae0adb53ec1e844565abe44063a465bb2ea15fa53342cd1229f0b6092c7d544dd0ffb9cadda6930115a66a5ae892f3661e32eb3ace734f4386da1ed040dfb0155ee3f079ec72a3bd8da69b943250a3d33fdc8f4666d77c680db12e0aacd2ea7adf4b00f86733ed27d3c7d677f6a7b60c3657a599a7a36c88e5c805eb7bc022613b6ed3489ac3217bc25e862973d9b3f2235049452aeeac96f3e40044df6d2dbde64b819bf1ee67c6a03566e1e5c8d123adc7eb0410be047cfecce48a5eaf41a718f5d1b78c17fbb6fbcf003f6b1dba0a00558ae60e6413c271bb0dbf733aedd68eab4f8d884bb46b5fd833dd718e6c4ea58ff44f4137372494ae1c74d2ce3cd66526518a798f095fa804088d18d2695740e930b8d57eb55ade001c1cc9c734b77da57482e024503a1ea9e2a43943a308b5285d622ab623b860603122b41fcc249f224212cfbdc8dbc15e791ea6f51c44154619c98661664b11a34d20ecec388d69f5b32fc674d0ddf2b1365c8709a529b2eb3ba0a0547bdde3adcd272e0a41de9904999fd890b75fed8e60f1f00bc8aac46d8043ff2451541f644f270d9fc65a0b772078b05a6ce60c0df8b2540d89d052fae472867edf3b03a252bfe8e9ca3d2e31c7950851d2e7e7273c0109f2ac002747d277b6c9e6a9bd51d57c59b178a6e329c81c7bf2f5c5d345b2e990093b2e47f79807a62017fcd34efc671c7c6270a1a80f60fba3fbabb48f294ee3b1425b6e8c0fe7b14c31c2b0100d8c5f50349cff1e4e0d3aaee1f4afe10f5c234c1c4ba670111ba0d29694811f3dc242a73a9b042535f3ae8ec5b94240fd091cdfa157e7d27bf26412cdbe54ef55eb5d7183ca5ef0a9f5e81aa6dbf705e3a0d542a7573ec99ae67293970aceb8ca52c9eb5786196cb61947436581745df8a5ca11706001844f581317d43e29fc6eb1d1b011278eb4d77cc6a2e1defabaf87177a162f6269abd97503cc26aa73a18a5954e88692b63e34ba673a6b302ea2a59679ef60094c3db6f3874dab8affd12a7d12c53e77efa807d3ad845b908438b59461da39c072c6ef2fb1889f9a9e39a9256bdc71179c98399e60df6b8224a30e22ffd9010488cbc101ef020ea78a90977fe35586b4140339bffbcf32d81b04f789a195a44f289f44c714e6163afada072871122aaf6f60da967554de66cc4ecbf50aef5d02af874873ae5a36a576eb5dfd749b6168e395ce5817d6275b25d6c6ecdc6d8c4a39fa98f749d6584ec0312bd781a0a14fca35c8b0ac2cdb5a4b15d03966ce40cae66ded0cf7afbc5f1a580bcc596360f9253a70f05ebf3a58ca30b05b6edf4367d988e6dde2cedf37237ebd56da02edcebd9ba841c210ab52bdd869fbf3a783b44670483a012419a50c0114863a97d9f152e63a3ffffc4c83710ef02a3a9c718450f4e8f918c2c551d477a88e91c67bf1337a52f4d680e9607a295feafe09e1a0c5e3c1a18c5390a6a84fa19dbfa2abe421021b471f1e80811a4ba036a9a457fa323b7fa65e666a08f673ca92a02c03d6eba96604f770444b96297307bc23f6a928f0da3d97f522125592c092bb32f97882a59603b268167e970bda981299524929e111e31b3301285cfd9bbbf0263d7e2e19cd42e56920565eb5f45f99455b0851dcefd6d91575ec4e273afaad0f7e831d46a8d5f95244e06febe9d9c76fe2de20e561b11d39a4884d29e68773aa85327279e667884f8d4f965e8b12815076da686c02d17a32bc97de630508b06b091a7fa705bd705a3b5e85975db69d4198f23547686cbd42dfeb495d2c0c2c4c155dd1c8c0522836b271015c8f23a5c129e49c0def56c0fd2a5d010583b4d2849b97dffa9d28dbf783be484de51b8c1facf821d8f6a295caa97f5245c8b3fbe71b47a3390f2c2ab9f6ee41ab082c6ddaed769ddbd9188c970be2843f4fdfe32d3b9242628e3a1d037746b564b4bf6cbc37824444a78605c010a00f2f8abded984e664c63a10cb24e0c1d2d53873d519475651d73e1e228fba31b3165de6572c3f4ca692b73652bb77c423a191d45e90b122e0a66b956302ff7bacccce85e7428d8c574ef3d78884495c95f1416c3f500f5be2c0a70303ee19d4e81c1360db322a0400f311caffe568d07adaf9d6bd6f136f0886db4fc6c2cb956b79064b61afe3abd2ca638c62bf89ba91cfab89aeb6fb4eee6b8a6a321076ed5efbeb369259390e780454eb1666c4fe8366b00765b5639e20827349f4df49c90bf5dd320b36510fedf5c18f59ee14e1a8e436f02506d6c6c3c8c3328eff00bcb66ea3a99f2e9cb20f0efcfb09876f7860ce4294de8c5ce007604031a8dadaa20955701736218a159845f8cc7a485412bebaf653462459380a2cb0900721d570391f8e62869546a610e8478d9536d473945a46d9a89686d1dba43690a5a4dcad2d4fbacd877e38495d4a1696bbf46ae8fc6a764faf7c67101a785d259ac8a6df1c7fbd006e9327e24d8fa4c569a5e37fc047521cf520e2bf11dff07f6c47442db2fe7a94a7b557454363043ad4fb00d2842a16a2b25fcdd5aa38d585600cf81e9d202822c4571a12668cc202ef3af5704337bd134b99c6df8538316c9e423032e4c3b73b1e26571b9890ee5a5f9885321281c1371614b57464647c8d5387dcc9878ba4f9c4f65cb3d34fcde5b5fa1610c28f50ddf5a1ccd682ddf4590adc3d3f98b8f98fcd1845dadfb142dde12116bf36d7b738d930e10c3317a0222914e059370b463611c7e8d37bab1f834ba690c98af9924540256cb073ce89d05715e50cb79948451c8c4fbb07f497e860ed293803689ba1895af65c8d97c276e2cd0e7bdbe50655293462dbe64499184a7b8a89a454e38219b5e979c98badc75513d7a6862e2db939347d9941d906432ae41b67df54c2c92568d847fbaef8773dd466bdaf52bffde53fdc2514ae006e19a9599e0fde9c5772c3b30ce30d8fd5e0f91fdd8c66a8884575adc7d2970321520722ab1ddeaa64aa21855f9263d0b51d2b2df0ab28cd32d709c0984ed7f0ef4ced427e99230553a0b0453b1f6daa0ff63cd7750cbdb5f3373ea044ead7c91acfcfdac09648c06f4520a6766d530b37ad2aea22b50419b26f3a40df01f4970a104df6893d6e0b6b3cf88eac9c3edd9e724c5357283e933173dce77bbf70c99367b68e55cb0a3e16d1696c571b483640c33b9f229d837fd1d303608ea286643ccf46dfbd26d2484c79827c6cf896e4904a1febc39932c76a17606c0a62010932fe29877c00dcf7d65fb006594d8869bbe7f78138a78a125a475da225920235b47ba8bd631815926f7a5c4ff69d61c39b26b078760dbceefaea9aa5f08c97d2e97bd478d014ee739db93824bfa7d3167f789624e5a98873422a0176c8b2a69eb5a01dfdb22ac1cb7f9294df6ac1245d50ec44fbdfaeb145c9bacad2abc7e160993afbad2abcb9c1019cfe0e358d1c44676cf002cf844d83de959c3c3f074bad5ac0326d0ca4864b2fd724beb5338e81fa81fd178e14e267c06189ac51fc6a248398986d25d6791c98d330b37a59b3d9c46f94e6170ec499fb3f27443c185e261761d9fac5fa44bc4912c41f93a642b89d51afa016c87d086a145255e808082a2036ead976bd2b78079f8410dfd8fbd15048e3264f15491204529f6b0e5dd560caa9113f9491433b9ba54dba2fcd648928717a1499582e6acba3dd28364b368a1e16b13a2cdaf13ef8b0d4046f8c2a5f280d538b0efe3297bcc226c17688be16315383fe043a7c51a8bb02497277bb1dcc9a16db9d04dabfb0bf6eb9f408d18266fa45d2fbbe3b18b89d6dc7c5b947b741925ac93991554216773ac5e0dc903d966e8fab10ae2eb22e002aebdea2d800ba75fe33082561b9222997bcfd8d246dcee7c46ba0a12a361880b6c4bbcf966a2ac0600d69d39c6c43c783859e5212dea9944a658c6fcf33df2be59da18f1385d3425bfcafda04071b83539311884d4cc8db5838dd84c3d8355292fee226e5a69c6c9a31f1b5406cebd486ffd050928f3916d748f159436fe37dbef68656842624063833cd1811151e9f05dc5ca63191587f51274b6ba07ad44e104a20dd2fc6d43e0274c35f926b56591cee7670856d5d5194df8bdbf608f77cd8701f0ef26a0e38e4cca58e4cc699065d27eb74bd6f89755779f3b2a73a3a0d0f655755dc7cb91772bbe0b89d360353335e545d8c3133260b2ade1814e2fb4e9bea7db3e30fb62c936544a91170ec2f86e3ae75319da0d873a05dc9f0e14bc709028e11da854a03d3941a51e6f3e0d363528c9d203fa5166d9aba23a49df941d5c902aaa68a3b99a709e9d9e3adc96b581494fd2c7e4605af5891261533ee403218c6901a37dec5e2d65dcfec9449cefef4eb4c4b793f34c9b0187ac1e9302c880149843a66feddfcfe47c5e33eaf1ab1eb0ed48cab980df0fe3e11c46a27d2be9972af5ecef3081f77ffb8640a8f3694085228f7400dbf177931fed7a9fada79fcb76251e5b64087e3e4d4fe0a5b86d7e6ddf47fcd131f68796de8c9e86bd6b08cf54ffdd5e10389e0d2122d72de173535a09defea837a519f96e1e795e6e767a2ea7ebcb44e96a11a2910bfc1b5221012732bca14534a2a97afb0faca2bee78f96b59930e27b7b410b53889a190ba70fd1b5fa4418f8fe6df52457a9f814eab291bd45471c20fdf973c0f75bb052417b69592e83cf8cb34b7b8189c01ade45736c77cfde6f44448b78e02ef376d75fd2f95fb0dd91f9321837777f5f514f083bab481b66639af323383a4d715a0c3a216536c52d3fb3933895e1709b25a84a8637a125a5fede40a90d84218efed8b65c021bffc279a4b30fd0cb390a95d1225862f37df93bc97f1192e725bc38e81ca4a4d59f18afc9d89793d3834e1781a8d5e4d521aa3c34b4335817f0dd88771a31d3336e14645323ad54c728cf1b0fe515602c064b41885ff14ff394d4deef3c5de136fec1a05e3662cf61f29a74e9da23f116585d85d3806d015fc8783c08916546e18c92c737f31a7d35c72b3bea01fd852e7dc6d68f24bc787ef7b7df2c4acff86981597a7dd2aadbf40e26109a10e856a78929e698c308960d999783134d7f5abf90a9ecf67e496818ee42afe66888b41707047ecf3374be56e6be6d878531057d4b16b7ca749ec672842c057868ca4c0f9e69e6d92432d6331c4c32db2a93d50a690a0659d4c9bc6fd75f7201f943c603bf7caed8d218ebcf947ea685c0710c26aa11ec886480983e06b9be0168313de87b0e068f98bd14f2066e3fc3a058c32ca0da2a1b449814755e935ab360b15bc91f5d44e54ba2a8db07d1c3854f6b38efa006263300f2113c6d3481868e08d406545a25a8dc75b01e429853e26747023913298e7b5b174c8dfd4e36a81061ba46beeaa200d6003b9f0cf50caf3d5b06632d25fe7ba91d2a97f7562555a67876e334c642e48e753ce6f12a78329c381a1349cf5d89413d04a6b93c566aa2e335f4f0732567388a9df0b3084d57f6393eaf5c20fd7c3c29981500dfd3573a16ee4bc56836b5c3e75ebdce347e46f3d1247a936df69a259fb35ff4372b774f960aa4e8d84e4ae54caaea634d37d2d4f3a276e15176e1f00a906b2fe6ceaec16cba278d0eacdfac9dbbe5af60c5f923ce670315bbc29ac72e9f848d2c168949d7fae8d19fb86ac5511c36035c6c101063cd5b8b9902f8f51b6de2e59da3e5ddb25eb6e9dcd0a64492da36f8a61c9e2b33dd731f0423fd407048346d5a19fbb84c1d23e34f5e43afb32f3c6b85c550dae394285b233ec5ae2ac8646e2804f2c59e870caf6fae5d6df810bf6bd64562b288af75a5d42478475dd72e81651453558e4f7370cea3def6439ccc1ff644e7d0e9c5c286b8aa1881b5bf641ceef24f557b68bb7532af2139b5a890cddf0b1e26328070a43fe509609fdc6de4dfcf8f2f4a79ada37a05b9a2bcac4df7774a79f6aa569b4dd4cfcd944d64982c13349f5a880baa7b5f20aa55af6077299c6d53e0c6ea063d45d8217d72104012b5d82ec46fde056dfc94e6cc9d61bbd1bf08401d1ee163f3d7f88d3481c0f395765e6653d6678dd73a71d411e0ea02608b226357ead909c8d5643527dcd1e0f0b7a785cf691b59812593bcba54624fa2ad1db9547b78bdfe0d6ba2dbc3298dd0c539260235adb385a00989685705cf3631ae545dfd8e2813d5a2ae507f357ef3ed5dd46a868e04cfca7d01edf77c19c6d4477b9a57c7629dff4afef542d19a1b559e55488a3083ad29b98019bc54cc59299e30aa5cdf96e073ae593f644ca0e7f334b1979d16b436e624747e9c86cd985d126bc7495dc27d010347f7a76266894de2ec5d2c9e460e723b0857313e17a17a6a2ad9983867cb78dc5dd3eec56056fcf4a76acf11af6e74fa9c08dc30df7590fccc00e8e972736397ba8680fd56f2fd3758d628c3c93c4222ded9de6b2341cd49325af64d48de4e1c62dea24b19e82f3ae3cf1212671774b510d2e2c18141b5b0ca54376d311443bf5bea59d9f07cb83767904e644a5cb77830f4f7f92de93dd6498ad091384d8899fea4d539ea6dd9178b07bcb47704e37ce6412ab52e24108c890848f9ae08f3c7bd72362cea73dfd0ffc8b77baab1fb43f9b2247f3c20e1a67839ddb28ba7ebef67abe121c3f55d1b63cf32698e068ed11b514f23b8762d55e6394613bb895b5f6bd256ca0732acb067f916bdce9120dffa8a9473815ccd35b3d622ee25ffb98bbdbd17955a0694cac0a64254ae997a9a15137b7f923f611a1adaea3fb6ef547d5a3be44a14be44202b1679968ded791d3a7632cdf4cd3c762d022cc3109e0b10b62b3e779836756ca3bb65a1c8a7fff871113f1975b556831aaaba1850acf0953383e223d3371ae4753a323dda2ea9298cf94c15abb084f8548672b257225544adb2b5eb8fa348a32a20f15d6873bf5dabde8fd89a76903d6f75e0c57c4d6918a3c3120ba5e5cb955cf224a17bd49bb08212d585ce979199247a40757ab81d9e1fbddbb14f015908a9aee690382cb07557beb1b157f5a3b279615d5b7c64a83d229a87cd16a6d401c06dc84ae286075c4d634e6f91dc7a284bbfc1795acedb1fd43c5c2e8ed6fa237e3d06a69b4fb83aa47a12e4ef83a5c5741d85d8342247d4d979601b66867313b1b8f19f769d13c9fbf6c1b2e272d0b0e875743c138ef0c014e1d8985642b029d35aa073d283da1367e869561913a1a0463cf3cc6c41835dcb60d69f6f71aafeede9bc6987c4a68c9e0fb3c1986433e6e45d23a5b03ec664b00cf6a207a8e7dccf7d493bee9a44331e8c1ed92d5cec7afd206d3a3cb78f213b4d2aa8c1c9b0730d818747ddf1027aeb8684944c5b9696ea935f55b5be94f69bdcecc50186cff82a73de8bd231314d9217b6089b8cd8a292793f1fdec1c5af1a2df89c1e300d2fb93516d56060e08f7e4c50b5f227325d0908677653d64dc5cf838f39e271ad79f0033b6b2a5611d5d1f9bb984e6f7d735c5bf0924d873e20e5869bd6d94d9f0994a78614dec3f36325299d189293dc5a4df8cbad29d1fd7f9b51c1c9e48e2238aaff3243cd346deb4ba8545af524776300f648c6728b0f97d17f7ec45daddd62478890a166e7db997047df69ded08cc4d9d8297259dc4100c88359c880dc855ffd5ef3b0922a5b00dae3daeb70441e15dffb415adafaaafb5f5c03b610a3c9903662c236e23baf01337a669f5e174cca1ec79ad7f3cd8635fdcea958cb67400bd01dd03a845fe820f0e7f19776867f247e9c2536ad2776de00480246ace33002c284d7a8929d1e708da9059212ae6d7da49afb9222c97983529158f69bbdbd8f502daae24aef87d0d8a4085dd0740ad1f33178b52447f43192acab0b9aa777262142ec29befefc95de9637f3cb7dff186af2020378870015feadf7b4bf66959cc81543ae33312e4ae3e9c152a65eb76df86b788d11a8534227a8d7e330ef48f5a1069ce4152bc6b311e4636d480272527fcc60c5c3aebbb513d06246ef52e33e7cca789f106ca53df689353c3a518c6dd4719a073f83ea70e1b37c312d216ef26f806f13ddb40e12e3c8b31ccab1440fcd2a2f2f7766997a610a1ad51108163ab4da30219c9a5a2545b19041bdff4e2569f3c281784ac3982de68af9405d634ea1c8d814d0f15b946a1e2130a2995e2d2330be135f21bf5abeb851c65cc3227aff2ce2d88325436409d725a5523253a722af8360a0dee622adc4690ae49f6c3445d2bc4ae75595874849b54798724a0a9f6161caeb83ad17c2d7325524d9acb94e80c7626458167e624f62e9dbf2c49ea52f8c978481f6fdce7222a4c353d8a77034d7a3e3237d253ce3402553ae63a4519298e96b534bab3aadba3dbae70c07fa06e03f89b711e1deb0e9f4dacbad30374777a2710dec408fb8531acb5d89376c07b5673cac6e361935", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00', 0x0, 0x100028, 0x20001, 0x6, 0x3, 0x4, 0x1000, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000080)={0x800100, 0x7, 0x22, 0x10000, 0x82, 0x80003}) lseek(r0, 0xffffffffffffffff, 0x1) 39.670311048s ago: executing program 7 (id=818): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000003c0)={@loopback, @loopback, r2}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x2616) fchdir(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) fanotify_init(0x40, 0x80000) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 38.75933271s ago: executing program 7 (id=821): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x8000000232b) r3 = socket$inet6(0xa, 0x6, 0x0) listen(r3, 0x5) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@fat=@check_strict}, {@fat=@check_normal}, {@numtail}, {@numtail}, {}, {@uni_xlateno}, {@numtail}, {@fat=@errors_remount}, {@numtail}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8, 0x1) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='omfs\x00', 0x0, &(0x7f0000000340)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f0000000080)={0x80, 0x14, 0x0, 0x0, 0x7995}, 0x9add, 0x0, 0x0, 0x48000000, 0xffff0001, 0x3, 0x0}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x77ba) dup(r4) 34.893647283s ago: executing program 7 (id=826): r0 = syz_mount_image$jfs(&(0x7f0000000a00), &(0x7f0000000080)='./bus\x00', 0xc001, &(0x7f0000001900)=ANY=[@ANYBLOB='discard=0x0000000000000004,usrquota,iocharset=ascii,errors=remount-ro,nointegrity,noquota,nodiscard\x00noquota,nointegresize,discard=0x000000000000043a,iocharset=macromanian,nointegridiscard,dont_appraise,defcontext=sysadm_u,subj_type={[,smackfsdef=nointeerity,func=CREDS_CLECK,audit,fowne2=\x00\x00\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61f7, &(0x7f0000002240)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000580)=""/174, 0xff56) r2 = socket(0x1e, 0x4, 0x0) getpeername$unix(r2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000001c0)="669ebe8cab6937dae722bf32df5b182f0b7ea32575faff2767350ec6949b8b9b29d06ef860abdffdd6562a662d124abda22f5cf465697d1546c8a9ec2da368f0801b698c42078dd653faa2e081ec378e14b09eb4a59f1e8070bc2b6a55fc0b0944f84601bb269cd02fdda9a206dca266900f1fa4833eb47bb869ad2ae02b4bd83c2aa0b4764ab8f8650c83e6e6f51342fe4f9d2962fc4b7a08cc3d86fd4809172936e6829a34f9030fd1fc4732c55de2b6315f89321a4e294bf12845623f", 0xbe, r0}, 0x68) 31.698437419s ago: executing program 7 (id=837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth1_vlan\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x2280) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20100) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) r9 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x828000, &(0x7f00000001c0)=ANY=[@ANYBLOB="667fa8", @ANYRESHEX, @ANYBLOB=',rootmodm=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r0, @ANYBLOB=',default_permissions,blksize=0x0000000000001a00,allow_other,max_read=0x0000000000000006,max_read=0x0000000000010001,blksize=0x0000000000000200,default_permissions,uid>', @ANYRESDEC=0xee00, @ANYRES16=r8, @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0xee00, @ANYBLOB=',hash,fsname=/dev/input/event#\x00,euid<', @ANYRESDEC=r3], 0x0, 0x0, &(0x7f0000000380)="a084fa6b8a76cdb46521557921f3f37397db14a086579eb6071fa05c117408fad3e953c50be3aa14c2388a569558541e9b61f3b4f79321eef45acf69a39797c6f92dce28fcad00588ef3d43dc3c60dd1a82fa05091765f1c3371b68455dbfe2783e76ba5afb9926c6e307ebf9109992010906d5a8062023d4f04d069b71db05210fe8e8f878a4aa3eee2675ac630fb697b6e0e00fcfc7b9cacdaa0054cf2965510c3f8c5695b653959299039a88681691d5f82be7515f6e5d7e2cf08ecb97dc595cd6b00a99ebccc24abff0ef27b8994747fe8ffe6dc725ec7b526edcb2d46") ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000480)={r9, 0xffffffff, 0x783c86a3, 0x1}) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000080)=""/196) 29.950261381s ago: executing program 7 (id=841): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) (fail_nth: 3) 29.515140572s ago: executing program 35 (id=841): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) (fail_nth: 3) 12.770090254s ago: executing program 3 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xb) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) close(r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x12) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, 0x0) fcntl$lock(r3, 0x7, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000040)='./mnt\x00', 0x211) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x34, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4040004}, 0x20080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) mount(&(0x7f0000000000)=@filename='./mnt\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) 12.640379477s ago: executing program 6 (id=888): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000210557510110f3020fda9010203010902240001de0d000809041f0b02511bdcfc09058e03000203070909050e", @ANYRES64], 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x6100, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000004c0)="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", 0x1000) syz_usb_connect$uac2(0x3, 0x82, &(0x7f0000000400)={{0x12, 0x1, 0xd74982084ab6eee0, 0x0, 0x0, 0x0, 0x20, 0x154e, 0x500e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x17, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x10, 0x4}, [@multiply_unit={0x7, 0x24, 0xc, 0xff, 0x20, 0x0, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0xc, {0x8, 0x25, 0x1, 0x83, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x3, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1c40}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42b}}, {0xb4, &(0x7f0000000140)=@string={0xb4, 0x3, "257dc421e111c389e3d50debb181ca9d449702c280cdca804a7b560ec570f60b7f4697d391d4418d54bbfb2f8877625b81323cdcd89aa5d405f9fab8d5e39c4a82baf7f969efd2360aac2e4d2c3bb7f673406710e9549271c43d65616c43f60e5243e4e19ee36206d2e18a5266dcdbd3bf36f9c8f063c035503fc3021e1d824ce13e9f773ea736b6396091cb6aa1fe55dbdba994a3e682ce23e909224971b9fec5cfe66da2cf2d00bf265794e0ba4158eb68"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40b}}]}) 10.680543914s ago: executing program 6 (id=891): unshare(0x22020600) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x6, 0x4, 0xfffffffffffffffd, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pread64(r6, 0x0, 0x0, 0xcd32) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$V\x00p', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050006000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x1000}]}]}, 0x30}}, 0x0) getsockopt$bt_hci(r1, 0x119, 0x2, 0x0, 0x0) r7 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090001010101022000090501090002030b040825010000400400090402000001022000090402010101022000092402020400cc1c051024010201000400000008b8000000030905820908"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="2012bf000000f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r8, 0x1, 0x2e, &(0x7f0000000100)=""/71, &(0x7f0000000180)=0x47) socket$inet_smc(0x2b, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 9.878367233s ago: executing program 3 (id=893): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='autogroup\x00') r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x4004000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, r2, 0x94afad92614ef120, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x33}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x4044010) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) 9.415064444s ago: executing program 2 (id=896): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000003c0)={@loopback, @loopback, r2}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x2616) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 8.726560551s ago: executing program 5 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth1_vlan\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x2280) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20100) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) r9 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x828000, &(0x7f00000001c0)=ANY=[@ANYBLOB="667fa8", @ANYRESHEX, @ANYBLOB=',rootmodm=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r0, @ANYBLOB=',default_permissions,blksize=0x0000000000001a00,allow_other,max_read=0x0000000000000006,max_read=0x0000000000010001,blksize=0x0000000000000200,default_permissions,uid>', @ANYRESDEC=0xee00, @ANYRES16=r8, @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0xee00, @ANYBLOB=',hash,fsname=/dev/input/event#\x00,euid<', @ANYRESDEC=r3, @ANYBLOB], 0x0, 0x0, &(0x7f0000000380)="a084fa6b8a76cdb46521557921f3f37397db14a086579eb6071fa05c117408fad3e953c50be3aa14c2388a569558541e9b61f3b4f79321eef45acf69a39797c6f92dce28fcad00588ef3d43dc3c60dd1a82fa05091765f1c3371b68455dbfe2783e76ba5afb9926c6e307ebf9109992010906d5a8062023d4f04d069b71db05210fe8e8f878a4aa3eee2675ac630fb697b6e0e00fcfc7b9cacdaa0054cf2965510c3f8c5695b653959299039a88681691d5f82be7515f6e5d7e2cf08ecb97dc595cd6b00a99ebccc24abff0ef27b8994747fe8ffe6dc725ec7b526edcb2d46") ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000480)={r9, 0xffffffff, 0x783c86a3, 0x1}) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000080)=""/196) 8.556779105s ago: executing program 3 (id=898): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/167) 7.798155983s ago: executing program 2 (id=899): syz_usb_connect(0x6, 0x371, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="000000001e0021002b0800000000be1547c00d91740007070000004f64f5ea3033c95b70936b3640540cdbc0bc1bb9520e3c4bcee852ef50d61b13496124e4d658a6567bd73497ea28cf34d2d618b3abacfc19d39f9b9daa9628e24d463e8a1853953604acffd3a5afcd7accfbdc398a81d0157c80b77d93cb8054865dbba87e26a1455d8e506d2d34e7a59d2e694a323432d2e2eba2726b152b953647cb762da538344b2baf3c8299d92e2081620610ed82226e6f342edd1c21526cd34b777b95b5b9ac4d38510b9873"], 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='0', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4, 0x21}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}}, 0x0) io_uring_enter(r2, 0x4149, 0x4c4c, 0x20, &(0x7f0000000100)={[0xfe2]}, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) read$usbfs(0xffffffffffffffff, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000340)='devtmpfs\x00', 0xc1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x40001, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000280)={0x8, 0xd, @name="0428a441fcfabf06942e088e6e544caf2e83ea13f768c882a3fccba3c0c58727"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x327042, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000580)) 7.707593175s ago: executing program 3 (id=900): r0 = memfd_secret(0x80000) syz_mount_image$hfsplus(&(0x7f0000000380), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@umask={'umask', 0x3d, 0x1}}, {@type={'type', 0x3d, "98acdea6"}}, {@part={'part', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'cp737'}}]}, 0x1, 0x5f1, &(0x7f000000ab40)="$eJzs3U9vHGcdB/DvbGwnDiJ126QtCISVHECNSLzeNvUBiYAQ8qFClbj00oOVbBIrG7eyt8itEHL4e+UdtAg5Z04cEIdIcOYlYIlDD0jcfQua2dl4G2/9p3G86+bzkZ59nmeemWee+Xnm2Z1ZWRvgubX4biYfpsji5bfXy/rWZquztdm61y8nOZ2kkUz0shQrSTGZXE8v5Rvlwrq74ov2894nby181nxwv1ebqFO1fmOv7Q5mo06ZTXKqzo+qvxtP2d/pgXIZsEv9wMGoPdpl4zCbP+V1C4yDove+uctMcjbJmf77WD07NI53dEfvULMcAAAAnFAvbGc76zk36nEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASVL//n9Rp0a/PJui//v/U/Wy1OUT7eGoBwAAAAAAAAAAR+A729nOes7164+K6jv/i1XlfPX6tXyYtbSzmitZz1K66WY1zSQzAx1NrS91u6vNA2w5P3TL+eM5XgAAAAAAAAD4ivp1Fne+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHFQJKd6WZXO98szaUwkOZNkqlxvI/l7v3ySPRz1AAAAAOAYvLCd7aznXL/+qKju+V+p7vvP5MOspJvldNNJOzerZwG9u/7G1mars7XZulem3f3+6H+HGkbVY3rPHobvea5a40LV/uepZDE/zc9zObN5J6tZzi+ylG7amc1PqtJSiszUTy9m+uMcPt7rn6u9s99YX6tGMp1bWa7GdiU38n46uZlGdQzVOnvv8X4ZneKHtQPG6Gadl0f0xzo/fhtDls1UEZl8HJG5OvZlNF7cOxKHPE+e3FMzjcfPoM4/g5ifrfMy1r8fWcyHeTIS8wNn3yt7RyK5+J9v//VOZ+XunVtrl8fnkL6kJyPRGojEq89VJKbqaPRm0f5sWdp/trxYbXsuy/lZ3s/NtPNmFvJm5vNG3shcFnJtIK4X9r/Wbic5zLV26Xt1YTrJH+p8PJRxfXEgroMz3UzVNrhkJ0ovHf2MNPHNulDu4zd1Ph6ejERzIBIv7x2JPz0qX9c6K3dX7yx9cMD9fbfOy8v2d2M1N5fny0vlH6uqff7sKNteHtrWrNrOP25r7Gq78O+v1237XalT9We43T3NV22vDm1rVW2vDbQN+5QDwNg7+/rZqen/Tv9r+tPp307fmX77zI9PL5z+1lQm/znxt1N/aTxo/KB4PZ/mVzv3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJe39tHHd5c6nfaqgsKJLUzUZ/O4jOerUBjxxAQ8c1e79z64uvbRx99fvrd0u327vdJqNa/NL1xbmL929dZypz3Xex31MIFnYOdNf9QjAQAAAAAAAAAAAA7qOP6dYNTHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxsi+9m8mGKNOeuzJX1rc1Wp0z98s6aE0kaSYpfJsU/kuvppcwMdFd80X7e++Sthc+aD+7v9DXRX7+x13YHs1GnzCY5VedH1d+Np+6veHyEZcAu9QMHo/b/AAAA//+udQwr") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x50009404, &(0x7f00000004c0)={0x0, 0x10, 0x3a, 0xffffffff}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{@any, 0x200}, @local, 0x9, 0xfffffffffffffff1, 0x3, 0xfffffffffffffff9, 0x1, 0x0, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x82831, r0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000400)="fe", 0x1, 0x20004015, 0x0, 0x0) shutdown(r3, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x3) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000002c0)=0xeeee8000) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="babbbbab4eaf7befbbbbbbaaaaaaaaaabb86dd6000a07864757dcbab91cadb81350cb6a16d000000103a0000000000000000000000ffffac141400ff0200000000000000000000000000018b00907800"/91], 0x0) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(r0, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x10042, 0x0) write(r5, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./dir0\x00', 0x1ed) mount(&(0x7f0000000b00)=@filename='ubi0:testvol\x00', &(0x7f0000000a00)='./dir0\x00', &(0x7f0000000c00)='ubifs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x5, 0x0, 0x1, 0x0, 0x800, 0x0, 0xffffe, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ftruncate(r0, 0x9) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000600)={0x1000, 0x0, 0x3c00, 0x1e0, 0x3, 0x192b, 0x1, 0x2, {0x2, 0x805, 0x1}, {0x5, 0x6}, {0xa, 0x9, 0x1}, {0x200, 0x8}, 0x2, 0x10, 0x0, 0x6, 0x1, 0x566, 0x9, 0x5, 0x6, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0xb}) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x7, 0x141282) 7.656017227s ago: executing program 6 (id=901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x14, 0x18, 0x1, 0x70bd2c, 0x24dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x4000000) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, &(0x7f0000002400)=""/4071, 0xfe7) r3 = getpid() io_setup(0x401, &(0x7f0000000040)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x2c, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r7, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f00000007c0)=""/82, 0x52, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000640)=""/200, 0xc8, 0x0, 0x2, 0x3}}, 0x48) 7.654929277s ago: executing program 5 (id=902): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10041, 0x0) 7.472636591s ago: executing program 5 (id=903): mprotect(&(0x7f00006ce000/0x3000)=nil, 0x3000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000040000fcffffef1000000008000600000000001800018014000200776c616e310000000000000000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x20004810}, 0x8) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x2c, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/244, 0xf4}], 0x1}, 0x11f41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) r8 = socket$inet6(0xa, 0x3, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 6.66116064s ago: executing program 3 (id=904): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000540)={{}, "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"}) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000780)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000001040)={&(0x7f0000000c00)={{@host}, {@my=0x1, 0xa}, 0x400, "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"}, 0x418, 0x6}) 6.526410153s ago: executing program 2 (id=905): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407205feca00000000000109022e0001010080fa0904000004ffffff0007058103"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) recvmmsg(r2, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000002840)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f00000028c0)=""/143, 0x8f}, 0x41b}], 0x1, 0x40000000, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600000000020061efe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="8018100090780000080a0000007f000000030000"], 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x2, 0x6}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)) (async) syz_usb_connect(0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407205feca00000000000109022e0001010080fa0904000004ffffff0007058103"], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) socket(0xa, 0x5, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) (async) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) (async) recvmmsg(r2, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000002840)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f00000028c0)=""/143, 0x8f}, 0x41b}], 0x1, 0x40000000, 0x0) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async) syz_emit_ethernet(0x56, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600000000020061efe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="8018100090780000080a0000007f000000030000"], 0x0) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x2, 0x6}) (async) 5.940161838s ago: executing program 3 (id=906): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x3, 0x7, 0x6f, @time={0x6, 0xce}, {0xc, 0x1}, {0xd, 0x9}, @connect={{0x7, 0x6a}, {0x6, 0x40}}}], 0x1c) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./bus\x00') 5.609629606s ago: executing program 36 (id=906): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x3, 0x7, 0x6f, @time={0x6, 0xce}, {0xc, 0x1}, {0xd, 0x9}, @connect={{0x7, 0x6a}, {0x6, 0x40}}}], 0x1c) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./bus\x00') 5.598501346s ago: executing program 8 (id=842): r0 = socket(0x2, 0x5, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x32, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}, {0x7, 0x89, 0x1d, 0x6d92}]}, 0x10) socket$igmp6(0xa, 0x3, 0x2) truncate(0x0, 0xe96f) (async) setns(0xc9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x9) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x9) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x80001, 0x5a) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "f1392a24199b59c5"}, 0x28) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.458557569s ago: executing program 8 (id=908): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000003c0)={@loopback, @loopback, r2}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x2616) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 4.883280523s ago: executing program 2 (id=909): r0 = socket(0x11, 0xa, 0xffffffd) r1 = fcntl$dupfd(r0, 0x406, r0) getpeername$packet(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000091, 0x0, 0xfffffffffffffffe}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0xf, 0x18, 0x0, 0xff32) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r1}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x6, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 4.664289398s ago: executing program 2 (id=910): epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1ff}, 0x8) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0xfd15, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000005900)='./file1\x00', 0x8, &(0x7f0000005b40)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000000100)={[{@delalloc}, {}, {@nodioread_nolock}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@inlinecrypt}, {@sysvgroups}]}, 0x18, 0x569, &(0x7f0000000780)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB]) fallocate(r5, 0x0, 0x0, 0x1001f0) fallocate(r4, 0x8, 0x2000, 0x8000) (fail_nth: 1) 4.57913934s ago: executing program 5 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth1_vlan\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x2280) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20100) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) r9 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x828000, &(0x7f00000001c0)=ANY=[@ANYBLOB="667fa8", @ANYRESHEX, @ANYBLOB=',rootmodm=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r0, @ANYBLOB=',default_permissions,blksize=0x0000000000001a00,allow_other,max_read=0x0000000000000006,max_read=0x0000000000010001,blksize=0x0000000000000200,default_permissions,uid>', @ANYRESDEC=0xee00, @ANYRES16=r8, @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0xee00, @ANYBLOB=',hash,fsname=/dev/input/event#\x00,euid<', @ANYRESDEC=r3, @ANYBLOB="bb"], 0x0, 0x0, &(0x7f0000000380)="a084fa6b8a76cdb46521557921f3f37397db14a086579eb6071fa05c117408fad3e953c50be3aa14c2388a569558541e9b61f3b4f79321eef45acf69a39797c6f92dce28fcad00588ef3d43dc3c60dd1a82fa05091765f1c3371b68455dbfe2783e76ba5afb9926c6e307ebf9109992010906d5a8062023d4f04d069b71db05210fe8e8f878a4aa3eee2675ac630fb697b6e0e00fcfc7b9cacdaa0054cf2965510c3f8c5695b653959299039a88681691d5f82be7515f6e5d7e2cf08ecb97dc595cd6b00a99ebccc24abff0ef27b8994747fe8ffe6dc725ec7b526edcb2d46") ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000480)={r9, 0xffffffff, 0x783c86a3, 0x1}) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000080)=""/196) 4.481213453s ago: executing program 8 (id=912): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000300), &(0x7f0000000200)=0x14) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x80, 0x113, 0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e000000050000000200000000000000001000001ea891ce2bc8169e61ce77807c4e3528d10ea913400680e023d67ba45d7987b9dec04f86c736305ae4ab3ece0b39c1491eb01ccf1b3d632afcb9740ee4756de727675712", @ANYRES32=0x1, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000010000000f00"/28], 0x50) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x5051, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0xb0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x404, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0xbe1}}}}}}}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r8 = memfd_secret(0x0) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x7fffffff, 0x26, &(0x7f0000000500)=""/38, 0x40f00, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x3, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r2, r3, r8, r9], &(0x7f0000000880)=[{0x5, 0x1, 0x3, 0x4}, {0x2, 0x5, 0xb, 0x9}, {0x3, 0x2, 0xd, 0xa}, {0x0, 0x2, 0x8, 0x8}], 0x10, 0x200}, 0x94) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000006c0), &(0x7f0000000740)=0x4) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0xb, 0x50, {0x50, 0x10, "d34ce872de2cbff853c5fc0f1fb58e5b8f8b6f6b9bc562a6f0fa2fe6e1d69d6f08d89ca2f8b8a6fd0d514fba18bc8b432f1d7dd7117abb3b8da7754394b4bbaf619b8494be8d9bd6e135af7b8850"}}, &(0x7f0000000180)={0x0, 0x3, 0x20, @string={0x20, 0x3, "7805f32bb7ce92863bdbcb1b39b495c3c29bb4eafac0975758025cffa6ab"}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x0, 0x14, 0xac, "99006a0b8ce8dac2ee65f86138d130dd1d6e45304c27b8e979ed820985c908b62ace8a4c51287bb6a2ac17fced2c601ba819bddb9d9647061a56d27adc5ccc1acd933d43f67d7b8cbd08dcb37a1fdd3413e0f8bbf64b93efc89d37e844e9388c4a5e99350d72a7ce4415d5cab6bbb5fe1803168153a39cbda1d72cbb4adaf65aa2509d516dba9e96149b3f09d3a471a2d1b9ae5038636518938c7b420b88b2cfc6cb4bc3b83d7de499d17391"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9b}, &(0x7f0000000340)={0x20, 0x81, 0x3, "dcb727"}, &(0x7f0000000380)=ANY=[@ANYBLOB="208203000000a5ede8"], &(0x7f00000003c0)=ANY=[@ANYBLOB="20830102000011"], &(0x7f0000000400)={0x20, 0x84, 0x4, "3c50d0cd"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "dbfeb7"}}) 3.062449927s ago: executing program 6 (id=913): r0 = memfd_secret(0x80000) syz_mount_image$hfsplus(&(0x7f0000000380), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@umask={'umask', 0x3d, 0x1}}, {@type={'type', 0x3d, "98acdea6"}}, {@part={'part', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'cp737'}}]}, 0x1, 0x5f1, &(0x7f000000ab40)="$eJzs3U9vHGcdB/DvbGwnDiJ126QtCISVHECNSLzeNvUBiYAQ8qFClbj00oOVbBIrG7eyt8itEHL4e+UdtAg5Z04cEIdIcOYlYIlDD0jcfQua2dl4G2/9p3G86+bzkZ59nmeemWee+Xnm2Z1ZWRvgubX4biYfpsji5bfXy/rWZquztdm61y8nOZ2kkUz0shQrSTGZXE8v5Rvlwrq74ov2894nby181nxwv1ebqFO1fmOv7Q5mo06ZTXKqzo+qvxtP2d/pgXIZsEv9wMGoPdpl4zCbP+V1C4yDove+uctMcjbJmf77WD07NI53dEfvULMcAAAAnFAvbGc76zk36nEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASVL//n9Rp0a/PJui//v/U/Wy1OUT7eGoBwAAAAAAAAAAR+A729nOes7164+K6jv/i1XlfPX6tXyYtbSzmitZz1K66WY1zSQzAx1NrS91u6vNA2w5P3TL+eM5XgAAAAAAAAD4ivp1Fne+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHFQJKd6WZXO98szaUwkOZNkqlxvI/l7v3ySPRz1AAAAAOAYvLCd7aznXL/+qKju+V+p7vvP5MOspJvldNNJOzerZwG9u/7G1mars7XZulem3f3+6H+HGkbVY3rPHobvea5a40LV/uepZDE/zc9zObN5J6tZzi+ylG7amc1PqtJSiszUTy9m+uMcPt7rn6u9s99YX6tGMp1bWa7GdiU38n46uZlGdQzVOnvv8X4ZneKHtQPG6Gadl0f0xzo/fhtDls1UEZl8HJG5OvZlNF7cOxKHPE+e3FMzjcfPoM4/g5ifrfMy1r8fWcyHeTIS8wNn3yt7RyK5+J9v//VOZ+XunVtrl8fnkL6kJyPRGojEq89VJKbqaPRm0f5sWdp/trxYbXsuy/lZ3s/NtPNmFvJm5vNG3shcFnJtIK4X9r/Wbic5zLV26Xt1YTrJH+p8PJRxfXEgroMz3UzVNrhkJ0ovHf2MNPHNulDu4zd1Ph6ejERzIBIv7x2JPz0qX9c6K3dX7yx9cMD9fbfOy8v2d2M1N5fny0vlH6uqff7sKNteHtrWrNrOP25r7Gq78O+v1237XalT9We43T3NV22vDm1rVW2vDbQN+5QDwNg7+/rZqen/Tv9r+tPp307fmX77zI9PL5z+1lQm/znxt1N/aTxo/KB4PZ/mVzv3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJe39tHHd5c6nfaqgsKJLUzUZ/O4jOerUBjxxAQ8c1e79z64uvbRx99fvrd0u327vdJqNa/NL1xbmL929dZypz3Xex31MIFnYOdNf9QjAQAAAAAAAAAAAA7qOP6dYNTHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxsi+9m8mGKNOeuzJX1rc1Wp0z98s6aE0kaSYpfJsU/kuvppcwMdFd80X7e++Sthc+aD+7v9DXRX7+x13YHs1GnzCY5VedH1d+Np+6veHyEZcAu9QMHo/b/AAAA//+udQwr") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x50009404, &(0x7f00000004c0)={0x0, 0x10, 0x3a, 0xffffffff}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{@any, 0x200}, @local, 0x9, 0xfffffffffffffff1, 0x3, 0xfffffffffffffff9, 0x1, 0x0, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x82831, r0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000400)="fe", 0x1, 0x20004015, 0x0, 0x0) shutdown(r3, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x3) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000002c0)=0xeeee8000) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="babbbbab4eaf7befbbbbbbaaaaaaaaaabb86dd6000a07864757dcbab91cadb81350cb6a16d000000103a0000000000000000000000ffffac141400ff0200000000000000000000000000018b00907800"/91], 0x0) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(r0, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x10042, 0x0) write(r5, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./dir0\x00', 0x1ed) mount(&(0x7f0000000b00)=@filename='ubi0:testvol\x00', &(0x7f0000000a00)='./dir0\x00', &(0x7f0000000c00)='ubifs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x5, 0x0, 0x1, 0x0, 0x800, 0x0, 0xffffe, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ftruncate(r0, 0x9) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000600)={0x1000, 0x0, 0x3c00, 0x1e0, 0x3, 0x192b, 0x1, 0x2, {0x2, 0x805, 0x1}, {0x5, 0x6}, {0xa, 0x9, 0x1}, {0x200, 0x8}, 0x2, 0x10, 0x0, 0x6, 0x1, 0x566, 0x9, 0x5, 0x6, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0xb}) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x7, 0x141282) 1.493959674s ago: executing program 5 (id=914): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x8000000232b) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x5) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@fat=@check_strict}, {@fat=@check_normal}, {@numtail}, {@numtail}, {}, {@uni_xlateno}, {@numtail}, {@fat=@errors_remount}, {@numtail}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8, 0x1) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='omfs\x00', 0x0, &(0x7f0000000340)) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f0000000080)={0x80, 0x14, 0x0, 0x0, 0x7995}, 0x9add, 0x0, 0x0, 0x48000000, 0xffff0001, 0x3, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2d, 0x25dfdbfd, 0x7, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x4000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x77ba) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r7, 0x0) 472.796989ms ago: executing program 5 (id=915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2f00) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r3, 0x800a6f2f, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) r4 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x8, 0x3, 0x377}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syz_tun\x00', 0x1000}) sendmmsg$inet(r5, &(0x7f00000027c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)="518664", 0x3}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000700)="6d1a9c", 0x3}], 0x1}}], 0x2, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2, 0xf}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c", 0x24}, {&(0x7f0000000740)="0b0080ad4350", 0x6}], 0x2}, 0x30008b08) 402.523161ms ago: executing program 2 (id=916): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'pimreg0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x3, 0x7, 0x81, 0x57e, 0x8, 0x2, 0x4, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xff, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x0, 0x400, 0x2, 0x3, 0x959c, 0x8, 0xa2, 0x2, 0x4, 0xfdf, 0x4, 0xffffffff, 0x7584, 0x1, 0xff, 0x1a5a, 0x10, 0x0, 0xfffffff7, 0x4, 0x89, 0xffffff00, 0xa, 0x224, 0xa, 0x6, 0x9, 0x400, 0x3d, 0x80000001, 0xfffffff5, 0x2b6395a6, 0x8005510, 0x4, 0x3ff, 0x6, 0x6, 0x7f, 0x7, 0xaf96, 0x40000000, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x5, 0x3, 0x4, 0xa, 0x1, 0xd640, 0x7, 0x4000008, 0x3, 0x1, 0x8000011, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7ffb, 0x40000000, 0x8001, 0x400d07, 0x1, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x3509, 0xde9, 0x7fff, 0x80, 0x105, 0x80000000, 0x6, 0x5, 0x2, 0xc, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000100)={0x4c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000040)={0x5, 0x8, 0x800, {0x8, 0x9}, 0x6, 0xffffffcd}) 206.774716ms ago: executing program 6 (id=917): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), 0x404, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) dup2(r1, r0) 0s ago: executing program 6 (id=918): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (fail_nth: 3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): bhb_loop+0x30/0x80 [ 367.927254][ T6892] ? clear_bhb_loop+0x30/0x80 [ 367.931940][ T6892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.937839][ T6892] RIP: 0033:0x7fcc4bc590d9 [ 367.942259][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.961866][ T6892] RSP: 002b:00007fcc49e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 367.970456][ T6892] RAX: ffffffffffffffda RBX: 00007fcc4bee1180 RCX: 00007fcc4bc590d9 [ 367.978451][ T6892] RDX: 0000000000000150 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 367.986439][ T6892] RBP: 00007fcc49e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 367.994415][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.002420][ T6892] R13: 00007fcc4bee1218 R14: 00007fcc4bee1180 R15: 00007ffe9055da08 [ 368.010429][ T6892] [ 368.013544][ T6892] ERROR: Out of memory at tomoyo_realpath_from_path. [ 368.301850][ T4290] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 368.560415][ T6901] loop3: detected capacity change from 0 to 256 [ 368.671719][ T6901] FAT-fs (loop3): Unrecognized mount option "utf8=" or missing value [ 369.611973][ T4290] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 370.098466][ T6890] loop2: detected capacity change from 0 to 32768 [ 370.128670][ T4290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.182163][ T4290] usb 1-1: Product: syz [ 370.186415][ T4290] usb 1-1: Manufacturer: syz [ 370.284027][ T4290] usb 1-1: SerialNumber: syz [ 370.332583][ T4290] usb 1-1: can't set config #1, error -71 [ 370.388093][ T6921] loop0: detected capacity change from 0 to 256 [ 370.391997][ T4290] usb 1-1: USB disconnect, device number 10 [ 370.484844][ T6921] FAT-fs (loop0): Unrecognized mount option "./file2" or missing value [ 371.041986][ T4290] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 372.132270][ T4290] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 372.149382][ T4290] usb 1-1: config 0 has no interface number 0 [ 372.182331][ T4290] usb 1-1: config 0 interface 255 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 372.268509][ T4290] usb 1-1: config 0 interface 255 altsetting 255 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 372.340722][ T4290] usb 1-1: config 0 interface 255 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 372.412129][ T4290] usb 1-1: config 0 interface 255 has no altsetting 0 [ 372.441601][ T4290] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 372.491327][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.556160][ T4290] usb 1-1: config 0 descriptor?? [ 372.582330][ T6921] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 373.381947][ T6962] loop5: detected capacity change from 0 to 4096 [ 373.791579][ T6964] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.470054][ T4290] usb 1-1: USB disconnect, device number 11 [ 376.373133][ T6989] loop5: detected capacity change from 0 to 4096 [ 376.477053][ T6991] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.924451][ T6993] loop0: detected capacity change from 0 to 512 [ 377.068719][ T6993] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 377.101862][ T6993] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #13: comm syz.0.550: iget: bad i_size value: 12154757448730 [ 377.180060][ T6993] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.550: couldn't read orphan inode 13 (err -117) [ 377.229804][ T6993] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,barrier,jqfmt=vfsv1,nodelalloc,noblock_validity,grpjquota=.,errors=continue. Quota mode: writeback. [ 377.522326][ T6986] loop3: detected capacity change from 0 to 32768 [ 377.592803][ T7007] fuse: Bad value for 'fd' [ 377.637787][ T7005] Console: switching to colour VGA+ 80x25 [ 377.872059][ T4231] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 378.322356][ T4231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.452384][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.458769][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.480497][ T6995] loop6: detected capacity change from 0 to 32768 [ 378.487239][ T4231] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 378.559411][ T4231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 378.610177][ T4231] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 378.680801][ T4231] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.724717][ T4231] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 378.806470][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.165482][ T7031] loop2: detected capacity change from 0 to 4096 [ 381.022007][ T4231] usb 1-1: can't set config #1, error -71 [ 381.028999][ T4231] usb 1-1: USB disconnect, device number 12 [ 381.487941][ T7033] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.209329][ T7040] loop3: detected capacity change from 0 to 4096 [ 384.050684][ T7045] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.990647][ T7037] netlink: 165 bytes leftover after parsing attributes in process `syz.6.563'. [ 385.147150][ T7058] loop0: detected capacity change from 0 to 256 [ 386.302710][ T7058] FAT-fs (loop0): Unrecognized mount option "utf8=" or missing value [ 386.323642][ T7063] FAULT_INJECTION: forcing a failure. [ 386.323642][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 386.336915][ T7063] CPU: 0 PID: 7063 Comm: syz.3.566 Not tainted syzkaller #0 [ 386.344278][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.354370][ T7063] Call Trace: [ 386.357685][ T7063] [ 386.360645][ T7063] dump_stack_lvl+0x188/0x250 [ 386.365361][ T7063] ? show_regs_print_info+0x20/0x20 [ 386.370599][ T7063] ? load_image+0x410/0x410 [ 386.375145][ T7063] ? __lock_acquire+0x7b50/0x7b50 [ 386.380220][ T7063] should_fail+0x383/0x4b0 [ 386.384666][ T7063] should_failslab+0x5/0x20 [ 386.389202][ T7063] slab_pre_alloc_hook+0x51/0xc0 [ 386.394167][ T7063] __kmalloc+0x6b/0x340 [ 386.398346][ T7063] ? __vb2_queue_alloc+0x133/0x1390 [ 386.403575][ T7063] __vb2_queue_alloc+0x133/0x1390 [ 386.408637][ T7063] ? core_sys_select+0x6eb/0x8f0 [ 386.413620][ T7063] vb2_core_reqbufs+0x8e4/0xf30 [ 386.418515][ T7063] ? vb2_verify_memory_type+0x570/0x570 [ 386.424105][ T7063] __vb2_init_fileio+0x2c2/0xc50 [ 386.429071][ T7063] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 386.434990][ T7063] ? _raw_spin_unlock+0x40/0x40 [ 386.439894][ T7063] vb2_core_poll+0x5a4/0x7a0 [ 386.444502][ T7063] vb2_fop_poll+0x14b/0x310 [ 386.449014][ T7063] ? vb2_fop_read+0x340/0x340 [ 386.453701][ T7063] v4l2_poll+0x13d/0x2b0 [ 386.457955][ T7063] ? v4l2_write+0x2b0/0x2b0 [ 386.462480][ T7063] do_select+0x1009/0x1780 [ 386.466906][ T7063] ? do_select+0x851/0x1780 [ 386.471425][ T7063] ? core_sys_select+0x8f0/0x8f0 [ 386.476372][ T7063] ? poll_initwait+0x150/0x150 [ 386.481154][ T7063] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 386.487466][ T7063] ? __lock_acquire+0x7b50/0x7b50 [ 386.492512][ T7063] ? __lock_acquire+0x7b50/0x7b50 [ 386.497553][ T7063] ? __might_fault+0xb3/0x110 [ 386.502243][ T7063] core_sys_select+0x6eb/0x8f0 [ 386.507041][ T7063] ? poll_select_set_timeout+0x150/0x150 [ 386.512706][ T7063] ? sigprocmask+0x190/0x190 [ 386.517302][ T7063] ? __context_tracking_exit+0x4c/0x80 [ 386.522782][ T7063] __se_sys_pselect6+0x2f4/0x3c0 [ 386.527856][ T7063] ? __x64_sys_pselect6+0xf0/0xf0 [ 386.532943][ T7063] ? __x64_sys_pselect6+0x1d/0xf0 [ 386.537981][ T7063] do_syscall_64+0x4c/0xa0 [ 386.542404][ T7063] ? clear_bhb_loop+0x30/0x80 [ 386.547084][ T7063] ? clear_bhb_loop+0x30/0x80 [ 386.551769][ T7063] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 386.557671][ T7063] RIP: 0033:0x7fec2a6380d9 [ 386.562094][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.582188][ T7063] RSP: 002b:00007fec28890028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 386.590628][ T7063] RAX: ffffffffffffffda RBX: 00007fec2a8bffa0 RCX: 00007fec2a6380d9 [ 386.598691][ T7063] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000040 [ 386.606667][ T7063] RBP: 00007fec28890090 R08: 0000000000000000 R09: 0000000000000000 [ 386.614664][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.622782][ T7063] R13: 00007fec2a8c0038 R14: 00007fec2a8bffa0 R15: 00007ffccb55d758 [ 386.630774][ T7063] [ 386.744039][ T7065] loop5: detected capacity change from 0 to 128 [ 386.861981][ T7065] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 387.245471][ T7080] program syz.2.572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.531273][ T7080] misc userio: The device must be registered before sending interrupts [ 388.101897][ T4290] Bluetooth: hci2: command 0x0405 tx timeout [ 388.585064][ T7098] loop0: detected capacity change from 0 to 4096 [ 391.483179][ T7098] NILFS (loop0): error -4 creating segctord thread [ 394.561978][ T5129] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 394.992743][ T5129] usb 7-1: unable to get BOS descriptor or descriptor too short [ 395.152171][ T5129] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.191136][ T5129] usb 7-1: config 1 interface 0 has no altsetting 0 [ 395.315856][ T7141] loop3: detected capacity change from 0 to 512 [ 395.396356][ T7141] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 395.412181][ T7141] EXT4-fs (loop3): Unrecognized mount option "dont_appraise" or missing value [ 395.500737][ T7144] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 395.500737][ T7144] The task syz.3.588 (7144) triggered the difference, watch for misbehavior. [ 395.592195][ T5129] usb 7-1: string descriptor 0 read error: -22 [ 395.599656][ T5129] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 395.627085][ T5129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.777346][ T7147] loop5: detected capacity change from 0 to 256 [ 395.978761][ T7140] loop0: detected capacity change from 0 to 32768 [ 396.030986][ T5129] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 396.122774][ T7140] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 396.153896][ T7140] BTRFS info (device loop0): using free space tree [ 396.160472][ T7140] BTRFS info (device loop0): has skinny extents [ 396.290979][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.549111][ T7153] loop5: detected capacity change from 0 to 4096 [ 398.363452][ T7166] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 398.923758][ T4234] usb 7-1: USB disconnect, device number 4 [ 399.157454][ T7176] loop3: detected capacity change from 0 to 4096 [ 401.034923][ T7180] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.897173][ T7140] BTRFS error (device loop0): open_ctree failed: -12 [ 402.052151][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:1106' [ 402.061816][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 402.069407][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.079491][ T4200] Workqueue: hci1 hci_rx_work [ 402.084217][ T4200] Call Trace: [ 402.087526][ T4200] [ 402.090482][ T4200] dump_stack_lvl+0x188/0x250 [ 402.095198][ T4200] ? show_regs_print_info+0x20/0x20 [ 402.100435][ T4200] ? load_image+0x410/0x410 [ 402.104991][ T4200] sysfs_create_dir_ns+0x26a/0x290 [ 402.110143][ T4200] ? sysfs_warn_dup+0xa0/0xa0 [ 402.114846][ T4200] ? kthread+0x42e/0x520 [ 402.119116][ T4200] ? do_raw_spin_unlock+0x11d/0x230 [ 402.124320][ T4200] kobject_add_internal+0x5ba/0xcd0 [ 402.129539][ T4200] kobject_add+0x160/0x230 [ 402.133959][ T4200] ? kobject_init+0x1c0/0x1c0 [ 402.138645][ T4200] ? __raw_spin_lock_init+0x41/0x100 [ 402.143933][ T4200] ? klist_children_get+0x50/0x50 [ 402.148999][ T4200] ? get_device_parent+0x121/0x3e0 [ 402.154154][ T4200] device_add+0x470/0x1050 [ 402.158621][ T4200] ? device_initialize+0x2a5/0x4d0 [ 402.163773][ T4200] hci_conn_add_sysfs+0xd1/0x1e0 [ 402.168753][ T4200] le_conn_complete_evt+0xc2e/0x14d0 [ 402.174085][ T4200] ? cs_le_create_conn+0x5e0/0x5e0 [ 402.179245][ T4200] ? __mutex_trylock_common+0x15c/0x260 [ 402.184833][ T4200] hci_le_meta_evt+0x285/0x3ca0 [ 402.189725][ T4200] ? hci_event_packet+0x363/0x1310 [ 402.194882][ T4200] ? __lock_acquire+0x7b50/0x7b50 [ 402.199951][ T4200] ? hci_remote_host_features_evt+0x240/0x240 [ 402.206020][ T4200] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 402.211651][ T4200] ? mark_lock+0x94/0x320 [ 402.216037][ T4200] ? mutex_unlock+0x10/0x10 [ 402.220561][ T4200] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 402.226538][ T4200] ? lock_chain_count+0x20/0x20 [ 402.231386][ T4200] ? __rwlock_init+0x140/0x140 [ 402.236145][ T4200] hci_event_packet+0xe0b/0x1310 [ 402.241087][ T4200] ? _raw_spin_unlock+0x40/0x40 [ 402.245941][ T4200] ? rcu_lock_release+0x20/0x20 [ 402.250824][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 402.256121][ T4200] hci_rx_work+0x255/0xa10 [ 402.260540][ T4200] process_one_work+0x867/0xff0 [ 402.265398][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 402.271019][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 402.276427][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 402.281481][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 402.287045][ T4200] ? wq_worker_running+0x97/0x170 [ 402.292071][ T4200] worker_thread+0xad7/0x12a0 [ 402.296761][ T4200] kthread+0x42e/0x520 [ 402.300831][ T4200] ? rcu_lock_release+0x20/0x20 [ 402.305686][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 402.310271][ T4200] ret_from_fork+0x1f/0x30 [ 402.314689][ T4200] [ 402.331997][ T4200] kobject_add_internal failed for hci1:1106 with -EEXIST, don't try to register things with the same name in the same directory. [ 402.345550][ T4200] Bluetooth: hci1: failed to register connection device [ 402.567348][ T7188] loop5: detected capacity change from 0 to 128 [ 402.838000][ T7196] loop3: detected capacity change from 0 to 4096 [ 402.949780][ T7197] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 403.529373][ T7188] ADFS-fs (loop5): error: can't find an ADFS filesystem on dev loop5. [ 403.650564][ T7206] FAULT_INJECTION: forcing a failure. [ 403.650564][ T7206] name failslab, interval 1, probability 0, space 0, times 0 [ 403.711719][ T7206] CPU: 1 PID: 7206 Comm: syz.0.601 Not tainted syzkaller #0 [ 403.719074][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.729160][ T7206] Call Trace: [ 403.732464][ T7206] [ 403.735395][ T7206] dump_stack_lvl+0x188/0x250 [ 403.740089][ T7206] ? show_regs_print_info+0x20/0x20 [ 403.745280][ T7206] ? load_image+0x410/0x410 [ 403.749809][ T7206] ? __might_sleep+0xf0/0xf0 [ 403.754391][ T7206] ? __lock_acquire+0x7b50/0x7b50 [ 403.759425][ T7206] ? netlink_insert+0xe90/0x11f0 [ 403.764373][ T7206] should_fail+0x383/0x4b0 [ 403.768784][ T7206] should_failslab+0x5/0x20 [ 403.773277][ T7206] slab_pre_alloc_hook+0x51/0xc0 [ 403.778228][ T7206] kmem_cache_alloc_node+0x47/0x2c0 [ 403.783419][ T7206] ? __alloc_skb+0xf4/0x750 [ 403.787917][ T7206] __alloc_skb+0xf4/0x750 [ 403.792252][ T7206] netlink_sendmsg+0x654/0xbe0 [ 403.797017][ T7206] ? netlink_getsockopt+0x570/0x570 [ 403.802225][ T7206] ? aa_sock_msg_perm+0x94/0x150 [ 403.807175][ T7206] ? apparmor_socket_sendmsg+0x88/0x230 [ 403.812712][ T7206] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 403.817991][ T7206] ? security_socket_sendmsg+0x7c/0xa0 [ 403.823448][ T7206] ? netlink_getsockopt+0x570/0x570 [ 403.828640][ T7206] ____sys_sendmsg+0x5be/0x8f0 [ 403.833403][ T7206] ? __sys_sendmsg_sock+0x30/0x30 [ 403.838428][ T7206] ? import_iovec+0x6f/0xa0 [ 403.842928][ T7206] ___sys_sendmsg+0x236/0x2e0 [ 403.847605][ T7206] ? __sys_sendmsg+0x290/0x290 [ 403.852380][ T7206] __se_sys_sendmsg+0x1b7/0x2a0 [ 403.857226][ T7206] ? __x64_sys_sendmsg+0x80/0x80 [ 403.862154][ T7206] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 403.868137][ T7206] ? lockdep_hardirqs_on+0x94/0x140 [ 403.873337][ T7206] do_syscall_64+0x4c/0xa0 [ 403.877759][ T7206] ? clear_bhb_loop+0x30/0x80 [ 403.882427][ T7206] ? clear_bhb_loop+0x30/0x80 [ 403.887095][ T7206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.892982][ T7206] RIP: 0033:0x7f2b4785b0d9 [ 403.897394][ T7206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.916992][ T7206] RSP: 002b:00007f2b45ab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.925407][ T7206] RAX: ffffffffffffffda RBX: 00007f2b47ae2fa0 RCX: 00007f2b4785b0d9 [ 403.933371][ T7206] RDX: 00000000000040c0 RSI: 0000200000000040 RDI: 0000000000000003 [ 403.941341][ T7206] RBP: 00007f2b45ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 403.949309][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.957271][ T7206] R13: 00007f2b47ae3038 R14: 00007f2b47ae2fa0 R15: 00007fffab5d7a78 [ 403.965244][ T7206] [ 404.719933][ T7216] loop5: detected capacity change from 0 to 4096 [ 404.989034][ T7215] loop3: detected capacity change from 0 to 128 [ 407.085787][ T1092] block nbd5: Attempted send on invalid socket [ 407.093123][ T1092] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.150870][ T7219] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 407.456318][ T7215] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 407.559084][ T7215] hpfs: filesystem error: improperly stopped [ 407.604301][ T7215] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 407.722191][ T7215] hpfs: You really don't want any checks? You are crazy... [ 407.742626][ T7215] hpfs: Code page index out of array [ 407.810615][ T7215] hpfs: code page support is disabled [ 407.830130][ T7215] hpfs: hpfs_map_4sectors(): unaligned read [ 408.210926][ T7215] hpfs: hpfs_map_4sectors(): unaligned read [ 408.500158][ T7215] hpfs: filesystem error: unable to find root dir [ 408.638435][ T7226] loop2: detected capacity change from 0 to 512 [ 408.792064][ T7226] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 409.756060][ T7226] EXT4-fs (loop2): 1 truncate cleaned up [ 409.780583][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 409.781929][ T7226] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 409.806666][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'. [ 409.966458][ T7242] device syzkaller0 entered promiscuous mode [ 410.131955][ T4231] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 410.184054][ T4290] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 410.346308][ T7250] device syzkaller0 entered promiscuous mode [ 410.401900][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 410.461833][ T4290] usb 3-1: Using ep0 maxpacket: 32 [ 410.572411][ T4231] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 410.590907][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.603521][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.644070][ T7255] loop6: detected capacity change from 0 to 4096 [ 410.656023][ T4231] usb 1-1: config 0 has no interface number 0 [ 410.665920][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.677141][ T4231] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 411.992705][ T4290] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 412.002525][ T4231] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.015992][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.020665][ T7256] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.024906][ T4231] usb 1-1: config 0 interface 52 has no altsetting 0 [ 412.276580][ T4290] usb 3-1: config 0 descriptor?? [ 412.355372][ T4290] usb 3-1: can't set config #0, error -71 [ 412.570467][ T4290] usb 3-1: USB disconnect, device number 13 [ 412.618759][ T4231] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 412.660398][ T4231] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 412.709742][ T4231] usb 1-1: Manufacturer: syz [ 412.742144][ T4231] usb 1-1: config 0 descriptor?? [ 412.822001][ T4231] usb 1-1: can't set config #0, error -71 [ 412.842167][ T4231] usb 1-1: USB disconnect, device number 13 [ 413.033969][ T7265] 9pnet: Insufficient options for proto=fd [ 413.847573][ T7258] loop3: detected capacity change from 0 to 32768 [ 414.792622][ T7269] loop2: detected capacity change from 0 to 4096 [ 418.172880][ T7269] NILFS (loop2): error -4 creating segctord thread [ 418.432734][ T7278] loop6: detected capacity change from 0 to 64 [ 418.672447][ T7272] nvme_rdma: malformed address passed: malformed:4420 [ 419.136582][ T7278] hfs: unable to parse mount options [ 420.490801][ T7308] loop2: detected capacity change from 0 to 4096 [ 421.213257][ T7294] loop3: detected capacity change from 0 to 32768 [ 422.017107][ T7304] device syzkaller0 entered promiscuous mode [ 422.023913][ T7300] loop0: detected capacity change from 0 to 1024 [ 422.382771][ T7294] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.622 (7294) [ 422.887426][ T7306] netlink: 268 bytes leftover after parsing attributes in process `syz.0.628'. [ 423.023054][ T7310] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 423.344636][ T7294] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 423.362312][ T7294] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 423.398936][ T7294] BTRFS info (device loop3): use zstd compression, level 3 [ 423.532175][ T7294] BTRFS info (device loop3): using free space tree [ 423.538755][ T7294] BTRFS info (device loop3): has skinny extents [ 424.155022][ T7294] BTRFS error (device loop3): open_ctree failed: -12 [ 424.362478][ T4175] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (4175) [ 424.506771][ T4228] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 424.525936][ T4228] dvb_usb_az6027: probe of 4-1:0.0 failed with error -110 [ 424.536771][ T4228] usb 4-1: USB disconnect, device number 18 [ 424.763853][ T7343] loop5: detected capacity change from 0 to 4096 [ 426.990661][ T4231] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 427.004171][ T4234] Bluetooth: hci2: command 0x0406 tx timeout [ 427.012825][ T7316] loop2: detected capacity change from 0 to 32768 [ 427.526865][ T7348] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 428.001904][ T4231] usb 1-1: device descriptor read/64, error -71 [ 429.092776][ T7362] loop5: detected capacity change from 0 to 512 [ 429.180789][ T7362] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 429.492154][ T7366] loop3: detected capacity change from 0 to 4096 [ 429.858298][ T7368] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.903845][ T7362] EXT4-fs (loop5): 1 truncate cleaned up [ 430.099920][ T7362] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 431.527060][ T7377] loop5: detected capacity change from 0 to 4096 [ 431.861083][ T7378] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 432.056140][ T7374] device syzkaller0 entered promiscuous mode [ 434.347650][ T7393] loop0: detected capacity change from 0 to 4096 [ 435.260625][ T7397] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 436.287786][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:1106' [ 436.298021][ T4202] CPU: 0 PID: 4202 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 436.305610][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.315696][ T4202] Workqueue: hci4 hci_rx_work [ 436.320416][ T4202] Call Trace: [ 436.323711][ T4202] [ 436.326701][ T4202] dump_stack_lvl+0x188/0x250 [ 436.331378][ T4202] ? show_regs_print_info+0x20/0x20 [ 436.336579][ T4202] ? load_image+0x410/0x410 [ 436.341094][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 436.346205][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 436.350965][ T4202] ? kthread+0x42e/0x520 [ 436.355323][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 436.360516][ T4202] kobject_add_internal+0x5ba/0xcd0 [ 436.365721][ T4202] kobject_add+0x160/0x230 [ 436.370172][ T4202] ? kobject_init+0x1c0/0x1c0 [ 436.374867][ T4202] ? __raw_spin_lock_init+0x41/0x100 [ 436.380159][ T4202] ? klist_children_get+0x50/0x50 [ 436.385184][ T4202] ? get_device_parent+0x121/0x3e0 [ 436.390303][ T4202] device_add+0x470/0x1050 [ 436.394814][ T4202] ? device_initialize+0x2a5/0x4d0 [ 436.400039][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 436.404979][ T4202] le_conn_complete_evt+0xc2e/0x14d0 [ 436.410267][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 436.415480][ T4202] ? __mutex_trylock_common+0x15c/0x260 [ 436.421717][ T4202] hci_le_meta_evt+0x285/0x3ca0 [ 436.426608][ T4202] ? hci_event_packet+0x363/0x1310 [ 436.431739][ T4202] ? __lock_acquire+0x7b50/0x7b50 [ 436.436820][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 436.442935][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 436.448587][ T4202] ? mark_lock+0x94/0x320 [ 436.452930][ T4202] ? mutex_unlock+0x10/0x10 [ 436.457448][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 436.463453][ T4202] ? lock_chain_count+0x20/0x20 [ 436.468324][ T4202] ? __rwlock_init+0x140/0x140 [ 436.473094][ T4202] hci_event_packet+0xe0b/0x1310 [ 436.478048][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 436.482939][ T4202] ? rcu_lock_release+0x20/0x20 [ 436.487814][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 436.493026][ T4202] hci_rx_work+0x255/0xa10 [ 436.497722][ T4202] process_one_work+0x867/0xff0 [ 436.502599][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 436.508327][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 436.513799][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 436.518873][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 436.524425][ T4202] ? wq_worker_running+0x97/0x170 [ 436.529454][ T4202] worker_thread+0xad7/0x12a0 [ 436.534148][ T4202] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 436.540046][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 436.545995][ T4202] kthread+0x42e/0x520 [ 436.550074][ T4202] ? rcu_lock_release+0x20/0x20 [ 436.554924][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 436.559520][ T4202] ret_from_fork+0x1f/0x30 [ 436.563954][ T4202] [ 436.568943][ T4202] kobject_add_internal failed for hci4:1106 with -EEXIST, don't try to register things with the same name in the same directory. [ 436.582290][ T4202] Bluetooth: hci4: failed to register connection device [ 436.991987][ T7] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 437.782102][ T7] usb 6-1: config 1 has an invalid descriptor of length 147, skipping remainder of the config [ 437.921828][ T7] usb 6-1: config 1 interface 0 altsetting 128 has an invalid endpoint with address 0x11, skipping [ 437.941803][ T7] usb 6-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 437.963084][ T7] usb 6-1: config 1 interface 0 has no altsetting 0 [ 438.362251][ T7416] loop2: detected capacity change from 0 to 4096 [ 438.754937][ T1092] block nbd2: Attempted send on invalid socket [ 438.761323][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.954383][ T7417] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 439.022768][ T7] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 439.865690][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.872089][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.298611][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.307008][ T7] usb 6-1: Product: syz [ 440.311251][ T7] usb 6-1: Manufacturer: syz [ 440.315916][ T7] usb 6-1: SerialNumber: syz [ 440.344671][ T7] usb 6-1: can't set config #1, error -71 [ 440.361868][ T7] usb 6-1: USB disconnect, device number 5 [ 445.689036][ T7453] loop0: detected capacity change from 0 to 4096 [ 448.871582][ T7453] NILFS (loop0): error -4 creating segctord thread [ 449.102138][ T7] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 449.451934][ T21] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 449.492902][ T4288] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 449.543916][ T7466] loop6: detected capacity change from 0 to 32768 [ 449.578464][ T7467] loop5: detected capacity change from 0 to 32768 [ 449.652258][ T7466] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 449.672537][ T7466] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 449.691534][ T7467] (syz.5.667,7467,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 449.692446][ T7466] BTRFS info (device loop6): use zstd compression, level 3 [ 449.720061][ T7466] BTRFS info (device loop6): using free space tree [ 449.727062][ T7466] BTRFS info (device loop6): has skinny extents [ 449.735587][ T7467] (syz.5.667,7467,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 449.761868][ T4288] usb 4-1: Using ep0 maxpacket: 32 [ 449.806947][ T7467] JBD2: Ignoring recovery information on journal [ 449.888866][ T7467] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 449.902040][ T4288] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 449.910628][ T4288] usb 4-1: config 0 has no interface number 0 [ 449.917286][ T21] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.936229][ T21] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 449.953265][ T4288] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 449.953329][ T7466] BTRFS info (device loop6): enabling ssd optimizations [ 449.982579][ T21] usb 3-1: config 1 interface 0 has no altsetting 0 [ 450.021362][ T4288] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 450.054645][ T26] audit: type=1800 audit(1787311148.989:6): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.666" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 450.234837][ T21] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 450.248611][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.258358][ T21] usb 3-1: Product: syz [ 450.263145][ T21] usb 3-1: Manufacturer: syz [ 450.268847][ T21] usb 3-1: SerialNumber: syz [ 450.292163][ T7461] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 450.299660][ T4288] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 450.312960][ T7461] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 450.336993][ T4288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.352190][ T4288] usb 4-1: Product: syz [ 450.359041][ T4288] usb 4-1: Manufacturer: syz [ 450.384673][ T4288] usb 4-1: SerialNumber: syz [ 450.399574][ T4288] usb 4-1: config 0 descriptor?? [ 450.405336][ T7493] loop0: detected capacity change from 0 to 1024 [ 450.555430][ T7493] UBIFS error (pid: 7493): cannot open "ubi0:testvol", error -19 [ 450.716372][ T4288] radio-si470x 4-1:0.35: this is not a si470x device. [ 450.820640][ T7509] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 450.877197][ T4704] ocfs2: Unmounting device (7,5) on (node local) [ 450.947413][ T7465] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222022 combination not found [ 451.083096][ T7465] udc-core: couldn't find an available UDC or it's busy [ 451.090098][ T7465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 451.166549][ T4229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.208488][ T7461] udc-core: couldn't find an available UDC or it's busy [ 451.220183][ T7461] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 451.265609][ T7465] nvme_fabrics: missing parameter 'transport=%s' [ 451.414539][ T7465] nvme_fabrics: missing parameter 'nqn=%s' [ 451.513841][ T4229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.962469][ T4229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.072028][ T21] (unnamed net_device) (uninitialized): Assigned a random MAC address: fa:7c:48:b1:c9:95 [ 452.082373][ T4288] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 452.145807][ T21] rtl8150 3-1:1.0: eth9: rtl8150 is detected [ 452.170103][ T4229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.202368][ T21] usb 3-1: USB disconnect, device number 14 [ 452.235562][ T4288] usb 4-1: USB disconnect, device number 19 [ 452.311238][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'. [ 452.836694][ T7538] netlink: 64 bytes leftover after parsing attributes in process `syz.5.678'. [ 454.567341][ T7558] loop6: detected capacity change from 0 to 128 [ 454.650154][ T7558] EXT4-fs (loop6): Ignoring removed oldalloc option [ 454.753442][ T7558] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nodelalloc,oldalloc,grpjquota=,,errors=continue. Quota mode: none. [ 454.772154][ T7558] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.880799][ T7564] loop3: detected capacity change from 0 to 4096 [ 454.954493][ T7542] loop2: detected capacity change from 0 to 32768 [ 455.091711][ T7542] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.679 (7542) [ 455.147141][ T7567] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 455.181500][ T26] audit: type=1804 audit(1787311154.109:7): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.683" name="/newroot/72/file0/file0" dev="loop6" ino=13 res=1 errno=0 [ 455.202744][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.211602][ T7542] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 455.231369][ T7542] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 455.276906][ T7542] BTRFS info (device loop2): use zstd compression, level 3 [ 455.361662][ T7542] BTRFS info (device loop2): using free space tree [ 455.442670][ T7542] BTRFS info (device loop2): has skinny extents [ 455.459253][ T7555] chnl_net:caif_netlink_parms(): no params data found [ 456.694200][ T7542] BTRFS error (device loop2): open_ctree failed: -12 [ 456.816567][ T4249] Bluetooth: hci0: command 0x0409 tx timeout [ 456.952394][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.011946][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.020278][ T7555] device bridge_slave_0 entered promiscuous mode [ 457.108680][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.121931][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.130137][ T7555] device bridge_slave_1 entered promiscuous mode [ 457.141336][ T7601] jffs2: notice: (7601) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 457.305929][ T7604] loop2: detected capacity change from 0 to 1024 [ 457.326209][ T7555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.465001][ T7555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.555228][ T7555] team0: Port device team_slave_0 added [ 457.976865][ T7555] team0: Port device team_slave_1 added [ 458.332913][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.377070][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.572533][ T7555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.600689][ T7618] loop2: detected capacity change from 0 to 512 [ 458.812552][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.851764][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.902140][ T2238] Bluetooth: hci0: command 0x041b tx timeout [ 459.079276][ T7555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.942067][ T4229] device hsr_slave_0 left promiscuous mode [ 460.062372][ T4229] device hsr_slave_1 left promiscuous mode [ 460.098082][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.151342][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.190982][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.204078][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.240631][ T4229] device bridge_slave_1 left promiscuous mode [ 460.271677][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.320309][ T4229] device bridge_slave_0 left promiscuous mode [ 460.342785][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.398329][ T4229] device veth1_macvtap left promiscuous mode [ 460.422237][ T4229] device veth0_macvtap left promiscuous mode [ 460.428387][ T4229] device veth1_vlan left promiscuous mode [ 460.471881][ T4229] device veth0_vlan left promiscuous mode [ 460.635497][ T7643] loop6: detected capacity change from 0 to 4096 [ 460.738305][ T7644] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 460.996644][ T4516] Bluetooth: hci0: command 0x040f tx timeout [ 461.306972][ T7639] loop2: detected capacity change from 0 to 32768 [ 461.413399][ T7639] JBD2: Ignoring recovery information on journal [ 461.599553][ T7639] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 461.655312][ T7652] loop6: detected capacity change from 0 to 512 [ 461.670142][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 461.730406][ T7652] EXT4-fs (loop6): 1 orphan inode deleted [ 461.740121][ T7652] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 461.755657][ T7652] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.801092][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 461.860189][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.984064][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 462.031052][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.051303][ T13] infiniband syz1: ib_query_port failed (-19) [ 462.441040][ T7660] loop6: detected capacity change from 0 to 4096 [ 463.150067][ T7661] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 463.901771][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 464.243384][ T4229] bond0 (unregistering): Released all slaves [ 464.466637][ T7555] device hsr_slave_0 entered promiscuous mode [ 464.474059][ T7665] netlink: 224 bytes leftover after parsing attributes in process `syz.6.697'. [ 464.489584][ T7555] device hsr_slave_1 entered promiscuous mode [ 464.502445][ T7555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.510042][ T7555] Cannot create hsr debugfs directory [ 464.576929][ T4231] bond0 speed is unknown, defaulting to 1000 [ 467.096806][ T7680] loop6: detected capacity change from 0 to 64 [ 467.303233][ T7680] attempt to access beyond end of device [ 467.303233][ T7680] loop6: rw=0, want=1026, limit=64 [ 467.360228][ T7680] Buffer I/O error on dev loop6, logical block 512, async page read [ 467.392581][ T7555] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 467.429361][ T7555] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 467.457025][ T7680] attempt to access beyond end of device [ 467.457025][ T7680] loop6: rw=0, want=113154, limit=64 [ 467.458363][ T7555] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 467.510330][ T7680] Buffer I/O error on dev loop6, logical block 56576, async page read [ 467.526166][ T7555] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 467.596531][ T7684] attempt to access beyond end of device [ 467.596531][ T7684] loop6: rw=0, want=1026, limit=64 [ 467.672231][ T7684] Buffer I/O error on dev loop6, logical block 512, async page read [ 467.711993][ T7684] attempt to access beyond end of device [ 467.711993][ T7684] loop6: rw=0, want=113154, limit=64 [ 467.744119][ T7684] Buffer I/O error on dev loop6, logical block 56576, async page read [ 467.912410][ T7555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.944843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.977169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.014506][ T7555] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.050917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 468.071280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.104669][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.111833][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.153432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.175198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.211268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.238152][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.245339][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.270282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.312116][ T2238] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 468.340737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.364177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.388056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.391375][ T7704] loop3: detected capacity change from 0 to 256 [ 468.427045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.447001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.477772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.486523][ T7704] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 468.498072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.501948][ T2238] usb 7-1: device descriptor read/64, error -71 [ 468.518770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.559552][ T7555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.614182][ T7555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 468.840294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.849403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.982268][ T2238] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 469.272077][ T2238] usb 7-1: device descriptor read/64, error -71 [ 469.402843][ T2238] usb usb7-port1: attempt power cycle [ 469.755554][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:1106' [ 469.765370][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 469.773088][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.783174][ T4201] Workqueue: hci5 hci_rx_work [ 469.787899][ T4201] Call Trace: [ 469.791250][ T4201] [ 469.794233][ T4201] dump_stack_lvl+0x188/0x250 [ 469.798951][ T4201] ? show_regs_print_info+0x20/0x20 [ 469.804194][ T4201] ? load_image+0x410/0x410 [ 469.808745][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 469.813888][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 469.818634][ T4201] ? kthread+0x42e/0x520 [ 469.822916][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 469.828153][ T4201] kobject_add_internal+0x5ba/0xcd0 [ 469.833390][ T4201] kobject_add+0x160/0x230 [ 469.837858][ T4201] ? kobject_init+0x1c0/0x1c0 [ 469.842567][ T4201] ? __raw_spin_lock_init+0x41/0x100 [ 469.847968][ T4201] ? klist_children_get+0x50/0x50 [ 469.853026][ T4201] ? get_device_parent+0x121/0x3e0 [ 469.858171][ T4201] device_add+0x470/0x1050 [ 469.862624][ T4201] ? device_initialize+0x2a5/0x4d0 [ 469.867776][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 469.872748][ T4201] le_conn_complete_evt+0xc2e/0x14d0 [ 469.878068][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 469.883203][ T4201] ? __mutex_trylock_common+0x15c/0x260 [ 469.888772][ T4201] hci_le_meta_evt+0x285/0x3ca0 [ 469.893646][ T4201] ? hci_event_packet+0x363/0x1310 [ 469.898766][ T4201] ? __lock_acquire+0x7b50/0x7b50 [ 469.903814][ T4201] ? hci_remote_host_features_evt+0x240/0x240 [ 469.909904][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 469.915559][ T4201] ? mark_lock+0x94/0x320 [ 469.919975][ T4201] ? mutex_unlock+0x10/0x10 [ 469.924514][ T4201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 469.930512][ T4201] ? lock_chain_count+0x20/0x20 [ 469.935375][ T4201] ? __rwlock_init+0x140/0x140 [ 469.940148][ T4201] hci_event_packet+0xe0b/0x1310 [ 469.945099][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 469.949954][ T4201] ? rcu_lock_release+0x20/0x20 [ 469.954816][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 469.960021][ T4201] hci_rx_work+0x255/0xa10 [ 469.964453][ T4201] process_one_work+0x867/0xff0 [ 469.969321][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 469.974960][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 469.980253][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 469.985281][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 469.991025][ T4201] ? wq_worker_running+0x97/0x170 [ 469.996057][ T4201] worker_thread+0xad7/0x12a0 [ 470.000758][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 470.006663][ T4201] kthread+0x42e/0x520 [ 470.010776][ T4201] ? rcu_lock_release+0x20/0x20 [ 470.015669][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 470.020261][ T4201] ret_from_fork+0x1f/0x30 [ 470.024790][ T4201] [ 470.032979][ T2238] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 470.045897][ T4201] kobject_add_internal failed for hci5:1106 with -EEXIST, don't try to register things with the same name in the same directory. [ 470.059467][ T4201] Bluetooth: hci5: failed to register connection device [ 470.132081][ T2238] usb 7-1: device descriptor read/8, error -71 [ 470.324011][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.331573][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.375044][ T7555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.402131][ T2238] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 470.522099][ T2238] usb 7-1: device descriptor read/8, error -71 [ 470.536247][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:1106' [ 470.546522][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 470.554110][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.564193][ T4201] Workqueue: hci4 hci_rx_work [ 470.568915][ T4201] Call Trace: [ 470.572215][ T4201] [ 470.575166][ T4201] dump_stack_lvl+0x188/0x250 [ 470.580145][ T4201] ? show_regs_print_info+0x20/0x20 [ 470.585392][ T4201] ? load_image+0x410/0x410 [ 470.589949][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 470.595104][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 470.599850][ T4201] ? kthread+0x42e/0x520 [ 470.604135][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 470.609368][ T4201] kobject_add_internal+0x5ba/0xcd0 [ 470.614625][ T4201] kobject_add+0x160/0x230 [ 470.619076][ T4201] ? kobject_init+0x1c0/0x1c0 [ 470.623787][ T4201] ? __raw_spin_lock_init+0x41/0x100 [ 470.629103][ T4201] ? klist_children_get+0x50/0x50 [ 470.634154][ T4201] ? get_device_parent+0x121/0x3e0 [ 470.639302][ T4201] device_add+0x470/0x1050 [ 470.643740][ T4201] ? device_initialize+0x2a5/0x4d0 [ 470.648882][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 470.653856][ T4201] le_conn_complete_evt+0xc2e/0x14d0 [ 470.659185][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 470.665028][ T4201] ? __mutex_trylock_common+0x15c/0x260 [ 470.670618][ T4201] hci_le_meta_evt+0x285/0x3ca0 [ 470.675593][ T4201] ? hci_event_packet+0x363/0x1310 [ 470.681000][ T4201] ? __lock_acquire+0x7b50/0x7b50 [ 470.686065][ T4201] ? hci_remote_host_features_evt+0x240/0x240 [ 470.692163][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 470.697831][ T4201] ? mark_lock+0x94/0x320 [ 470.702188][ T4201] ? mutex_unlock+0x10/0x10 [ 470.706729][ T4201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 470.712756][ T4201] ? lock_chain_count+0x20/0x20 [ 470.717642][ T4201] ? __rwlock_init+0x140/0x140 [ 470.722436][ T4201] hci_event_packet+0xe0b/0x1310 [ 470.727421][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 470.732300][ T4201] ? rcu_lock_release+0x20/0x20 [ 470.737189][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 470.742416][ T4201] hci_rx_work+0x255/0xa10 [ 470.746877][ T4201] process_one_work+0x867/0xff0 [ 470.751791][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 470.757463][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 470.762793][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 470.767842][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 470.773416][ T4201] ? wq_worker_running+0x97/0x170 [ 470.778474][ T4201] worker_thread+0xad7/0x12a0 [ 470.783195][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 470.789122][ T4201] kthread+0x42e/0x520 [ 470.793216][ T4201] ? rcu_lock_release+0x20/0x20 [ 470.798103][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 470.802729][ T4201] ret_from_fork+0x1f/0x30 [ 470.807189][ T4201] [ 470.817879][ T2238] usb usb7-port1: unable to enumerate USB device [ 470.827935][ T4201] kobject_add_internal failed for hci4:1106 with -EEXIST, don't try to register things with the same name in the same directory. [ 470.841407][ T4201] Bluetooth: hci4: failed to register connection device [ 470.896475][ T7721] loop5: detected capacity change from 0 to 40427 [ 470.912777][ T7721] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 470.928707][ T7721] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 470.942679][ T7721] F2FS-fs (loop5): invalid crc value [ 471.039415][ T7721] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 471.416101][ T7721] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 471.423332][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.643185][ T7754] loop6: detected capacity change from 0 to 4096 [ 471.650607][ T7721] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 472.513233][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 473.134443][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 473.162586][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.141971][ T7759] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 474.156030][ T7555] device veth0_vlan entered promiscuous mode [ 474.165458][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.200875][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.328426][ T7555] device veth1_vlan entered promiscuous mode [ 475.001758][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'. [ 475.010937][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'. [ 475.071982][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 475.080951][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 475.119155][ T7555] device veth0_macvtap entered promiscuous mode [ 475.143277][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 475.196854][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.438039][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 475.472204][ T7555] device veth1_macvtap entered promiscuous mode [ 475.701788][ T7780] loop6: detected capacity change from 0 to 4096 [ 476.232073][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.338596][ T7782] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 476.609411][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.691846][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.752926][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.817640][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.881877][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.942037][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.994104][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.083174][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.101862][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.150339][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.241447][ T7793] FAULT_INJECTION: forcing a failure. [ 477.241447][ T7793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.333602][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.716'. [ 477.363122][ T7793] CPU: 1 PID: 7793 Comm: syz.5.715 Not tainted syzkaller #0 [ 477.370459][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.380532][ T7793] Call Trace: [ 477.383829][ T7793] [ 477.386787][ T7793] dump_stack_lvl+0x188/0x250 [ 477.391497][ T7793] ? show_regs_print_info+0x20/0x20 [ 477.396728][ T7793] ? load_image+0x410/0x410 [ 477.401266][ T7793] ? __lock_acquire+0x7b50/0x7b50 [ 477.406323][ T7793] should_fail+0x383/0x4b0 [ 477.410772][ T7793] _copy_from_user+0x2e/0x170 [ 477.415477][ T7793] i2cdev_ioctl+0x342/0x7b0 [ 477.419999][ T7793] ? i2cdev_write+0x120/0x120 [ 477.424730][ T7793] ? bpf_lsm_file_ioctl+0x5/0x10 [ 477.429695][ T7793] ? security_file_ioctl+0x7c/0xa0 [ 477.434823][ T7793] ? i2cdev_write+0x120/0x120 [ 477.439526][ T7793] __se_sys_ioctl+0xfa/0x170 [ 477.444138][ T7793] do_syscall_64+0x4c/0xa0 [ 477.448574][ T7793] ? clear_bhb_loop+0x30/0x80 [ 477.453271][ T7793] ? clear_bhb_loop+0x30/0x80 [ 477.457969][ T7793] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.463883][ T7793] RIP: 0033:0x7fcc4bc590d9 [ 477.468328][ T7793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.487957][ T7793] RSP: 002b:00007fcc49eb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.496404][ T7793] RAX: ffffffffffffffda RBX: 00007fcc4bee0fa0 RCX: 00007fcc4bc590d9 [ 477.504397][ T7793] RDX: 0000200000000580 RSI: 0000000000000720 RDI: 0000000000000003 [ 477.512383][ T7793] RBP: 00007fcc49eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 477.520643][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.528639][ T7793] R13: 00007fcc4bee1038 R14: 00007fcc4bee0fa0 R15: 00007ffe9055da08 [ 477.536648][ T7793] [ 477.767137][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.778010][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.788008][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.798480][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.808390][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.819276][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.860054][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.897457][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.925164][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.949482][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.970573][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 478.001260][ T7555] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.029627][ T7555] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.066381][ T7555] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.100412][ T7555] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.476128][ T7809] loop6: detected capacity change from 0 to 4096 [ 478.901267][ T7810] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 479.560851][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.588034][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.740052][ T4733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.771834][ T4733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.979021][ T7800] loop3: detected capacity change from 0 to 32768 [ 480.078870][ T7800] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.717 (7800) [ 480.437471][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 480.449822][ T7800] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 480.454869][ T7804] loop5: detected capacity change from 0 to 32768 [ 480.469213][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 480.498878][ T7800] BTRFS info (device loop3): using free space tree [ 480.511918][ T7800] BTRFS info (device loop3): has skinny extents [ 481.330261][ T7804] jfs_dirty_inode called on read-only volume [ 481.393345][ T7850] loop2: detected capacity change from 0 to 512 [ 481.443905][ T7804] Is remount racy? [ 481.602743][ T7850] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 481.610876][ T7850] System zones: 0-2, 18-18, 34-34 [ 481.694791][ T7850] EXT4-fs (loop2): 1 orphan inode deleted [ 481.700578][ T7850] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,debug,nombcache,,errors=continue. Quota mode: none. [ 481.815230][ T7850] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.868283][ T7800] BTRFS error (device loop3): open_ctree failed: -12 [ 483.823738][ T7872] loop5: detected capacity change from 0 to 512 [ 483.920465][ T7875] jffs2: notice: (7875) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 483.990103][ T7872] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 484.023767][ T7851] loop7: detected capacity change from 0 to 32768 [ 484.086924][ T7851] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.674 (7851) [ 484.128730][ T7872] EXT4-fs (loop5): 1 truncate cleaned up [ 484.181493][ T7872] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 484.246863][ T7851] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 484.312115][ T7851] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 484.406994][ T7851] BTRFS info (device loop7): use zstd compression, level 3 [ 484.467001][ T7851] BTRFS info (device loop7): using free space tree [ 484.480594][ T7891] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.728: corrupted xattr entries [ 484.549459][ T7892] loop6: detected capacity change from 0 to 4096 [ 484.612947][ T7851] BTRFS info (device loop7): has skinny extents [ 484.684728][ T7891] EXT4-fs (loop5): Remounting filesystem read-only [ 484.952122][ T7872] EXT4-fs error (device loop5): __ext4_new_inode:1082: comm syz.5.728: reserved inode found cleared - inode=1 [ 485.071212][ T7872] EXT4-fs (loop5): Remounting filesystem read-only [ 485.217967][ T7872] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #2: block 13: comm syz.5.728: lblock 0 mapped to illegal pblock 13 (length 1) [ 486.082118][ T7872] EXT4-fs (loop5): Remounting filesystem read-only [ 486.090683][ T7851] BTRFS error (device loop7): open_ctree failed: -12 [ 486.099679][ T4175] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by udevd (4175) [ 486.112235][ T7891] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #2: block 13: comm syz.5.728: lblock 0 mapped to illegal pblock 13 (length 1) [ 486.259595][ T7891] EXT4-fs (loop5): Remounting filesystem read-only [ 486.316563][ T7924] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 486.593618][ T7927] loop2: detected capacity change from 0 to 4096 [ 486.663101][ T7895] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #2: block 13: comm syz.5.728: lblock 0 mapped to illegal pblock 13 (length 1) [ 487.259860][ T7895] EXT4-fs (loop5): Remounting filesystem read-only [ 487.286928][ T7929] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.199748][ T7957] jffs2: notice: (7957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 488.224189][ T7950] loop3: detected capacity change from 0 to 32768 [ 488.523622][ T7968] netlink: 'syz.5.743': attribute type 3 has an invalid length. [ 488.613065][ T7950] XFS (loop3): Mounting V5 Filesystem [ 489.297512][ T7983] loop2: detected capacity change from 0 to 4096 [ 489.386944][ T7950] XFS (loop3): Ending clean mount [ 489.612670][ T7993] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 489.777540][ T4188] XFS (loop3): Unmounting Filesystem [ 490.106199][ T8001] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 490.272025][ T4249] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 490.313198][ T7957] loop7: detected capacity change from 0 to 32768 [ 490.362670][ T8006] FAULT_INJECTION: forcing a failure. [ 490.362670][ T8006] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 490.402013][ T8006] CPU: 0 PID: 8006 Comm: syz.5.751 Not tainted syzkaller #0 [ 490.409370][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.419459][ T8006] Call Trace: [ 490.422767][ T8006] [ 490.425720][ T8006] dump_stack_lvl+0x188/0x250 [ 490.430437][ T8006] ? show_regs_print_info+0x20/0x20 [ 490.435665][ T8006] ? load_image+0x410/0x410 [ 490.440203][ T8006] ? __lock_acquire+0x7b50/0x7b50 [ 490.445273][ T8006] should_fail+0x383/0x4b0 [ 490.449717][ T8006] prepare_alloc_pages+0x1e3/0x5b0 [ 490.454864][ T8006] __alloc_pages+0x11b/0x480 [ 490.459480][ T8006] ? zone_statistics+0x170/0x170 [ 490.464473][ T8006] ? alloc_pages+0x452/0x560 [ 490.469093][ T8006] alloc_skb_with_frags+0x20f/0x720 [ 490.474326][ T8006] ? mark_lock+0x94/0x320 [ 490.478682][ T8006] sock_alloc_send_pskb+0x87f/0x9a0 [ 490.484013][ T8006] ? __might_fault+0xb3/0x110 [ 490.488732][ T8006] ? sock_kzfree_s+0x50/0x50 [ 490.493347][ T8006] ? verify_lock_unused+0x140/0x140 [ 490.498585][ T8006] packet_sendmsg+0x322a/0x4fd0 [ 490.503485][ T8006] ? __might_sleep+0xf0/0xf0 [ 490.508113][ T8006] ? aa_sk_perm+0x7dc/0x910 [ 490.512648][ T8006] ? packet_getsockopt+0x9a0/0x9a0 [ 490.517788][ T8006] ? unpack_trans_table+0x606/0x1690 [ 490.523102][ T8006] ? apparmor_socket_sendmsg+0x88/0x230 [ 490.528682][ T8006] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 490.533990][ T8006] ? security_socket_sendmsg+0x7c/0xa0 [ 490.539480][ T8006] __sys_sendto+0x46d/0x620 [ 490.544009][ T8006] ? __ia32_sys_getpeername+0x80/0x80 [ 490.549446][ T8006] ? lock_chain_count+0x20/0x20 [ 490.554340][ T8006] __x64_sys_sendto+0xda/0xf0 [ 490.559047][ T8006] do_syscall_64+0x4c/0xa0 [ 490.563492][ T8006] ? clear_bhb_loop+0x30/0x80 [ 490.568193][ T8006] ? clear_bhb_loop+0x30/0x80 [ 490.572890][ T8006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 490.578816][ T8006] RIP: 0033:0x7fcc4bc590d9 [ 490.583256][ T8006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.603153][ T8006] RSP: 002b:00007fcc49eb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 490.611602][ T8006] RAX: ffffffffffffffda RBX: 00007fcc4bee0fa0 RCX: 00007fcc4bc590d9 [ 490.619600][ T8006] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000006 [ 490.627592][ T8006] RBP: 00007fcc49eb1090 R08: 0000200000000540 R09: 0000000000000014 [ 490.635591][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.643587][ T8006] R13: 00007fcc4bee1038 R14: 00007fcc4bee0fa0 R15: 00007ffe9055da08 [ 490.651600][ T8006] [ 490.773828][ T4249] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 490.810308][ T7957] ERROR: (device loop7): dtSearch: DT_GETPAGE: dtree page corrupt [ 490.810308][ T7957] [ 490.988589][ T4249] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.031919][ T7957] ERROR: (device loop7): remounting filesystem as read-only [ 491.076464][ T4249] usb 7-1: config 0 has no interface number 0 [ 491.102218][ T7957] jfs_lookup: dtSearch returned -5 [ 491.112063][ T4249] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 491.195125][ T4249] usb 7-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 491.218175][ T7952] ERROR: (device loop7): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 491.218175][ T7952] [ 491.270279][ T4249] usb 7-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 491.325731][ T4249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.355378][ T8015] ERROR: (device loop7): dtSearch: DT_GETPAGE: dtree page corrupt [ 491.355378][ T8015] [ 491.392663][ T4249] usb 7-1: config 0 descriptor?? [ 491.443900][ T8015] jfs_lookup: dtSearch returned -5 [ 491.605886][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.784773][ T4516] usb 7-1: USB disconnect, device number 10 [ 491.833913][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.753'. [ 491.905236][ T8020] netlink: 16 bytes leftover after parsing attributes in process `syz.5.753'. [ 492.727349][ T4516] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 493.800218][ T8042] syz.3.757 (8042) used greatest stack depth: 18640 bytes left [ 494.001916][ T4516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.121850][ T4230] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 494.324723][ T4516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.334897][ T4516] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 495.139299][ T4516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.177681][ T8055] jffs2: notice: (8055) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 495.195803][ T4516] usb 6-1: config 0 descriptor?? [ 495.243349][ T4516] usb 6-1: can't set config #0, error -71 [ 495.252466][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 495.320140][ T4516] usb 6-1: USB disconnect, device number 6 [ 495.531906][ T4230] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.552758][ T4230] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.593337][ T8065] loop5: detected capacity change from 0 to 8 [ 495.596988][ T8064] loop3: detected capacity change from 0 to 4096 [ 495.651986][ T4230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 495.658697][ T4230] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 495.726928][ T8069] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.767757][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.793063][ T4230] usb 3-1: config 0 descriptor?? [ 495.988337][ T8065] SQUASHFS error: zlib decompression failed, data probably corrupt [ 496.027112][ T4230] usb 3-1: can't set config #0, error -71 [ 496.033671][ T8065] SQUASHFS error: Failed to read block 0x4de: -5 [ 496.082591][ T8065] SQUASHFS error: Failed to read block 0x4e2: -5 [ 496.102885][ T4230] usb 3-1: USB disconnect, device number 15 [ 496.222503][ T8065] SQUASHFS error: Failed to read block 0x9ca: -5 [ 496.309407][ T8065] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 496.542160][ T8065] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 496.548820][ T8065] SQUASHFS error: Failed to read block 0x535f2: -5 [ 496.564000][ T26] audit: type=1800 audit(1787311195.499:8): pid=8065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.764" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 496.784101][ T8090] loop3: detected capacity change from 0 to 4096 [ 497.404154][ T8093] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 497.436495][ T7499] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 497.533800][ T8096] loop2: detected capacity change from 0 to 256 [ 497.791805][ T7499] usb 7-1: device descriptor read/64, error -71 [ 498.082204][ T7499] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 498.352498][ T7499] usb 7-1: device descriptor read/64, error -71 [ 498.610425][ T8096] loop2: detected capacity change from 0 to 4096 [ 498.632250][ T7499] usb usb7-port1: attempt power cycle [ 498.669874][ T8109] loop5: detected capacity change from 0 to 1024 [ 498.693376][ T8111] jffs2: notice: (8111) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 498.736904][ T8109] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 498.763095][ T8109] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8002c018, mo2=0002] [ 498.839518][ T8109] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,noquota,debug,noblock_validity,nodelalloc,,errors=continue. Quota mode: none. [ 498.870070][ T8109] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.888910][ T8109] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.772: bg 0: block 112: padding at end of block bitmap is not set [ 499.071973][ T7499] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 499.126469][ T8124] FAULT_INJECTION: forcing a failure. [ 499.126469][ T8124] name failslab, interval 1, probability 0, space 0, times 0 [ 499.152351][ T7499] usb 7-1: device descriptor read/8, error -71 [ 499.160423][ T8124] CPU: 1 PID: 8124 Comm: syz.5.775 Not tainted syzkaller #0 [ 499.163161][ T8126] jffs2: notice: (8126) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 499.167759][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.167778][ T8124] Call Trace: [ 499.167786][ T8124] [ 499.167795][ T8124] dump_stack_lvl+0x188/0x250 [ 499.167829][ T8124] ? show_regs_print_info+0x20/0x20 [ 499.167854][ T8124] ? load_image+0x410/0x410 [ 499.167880][ T8124] ? __might_sleep+0xf0/0xf0 [ 499.167902][ T8124] ? __lock_acquire+0x7b50/0x7b50 [ 499.167925][ T8124] ? netlink_insert+0xe90/0x11f0 [ 499.167955][ T8124] should_fail+0x383/0x4b0 [ 499.167983][ T8124] should_failslab+0x5/0x20 [ 499.168002][ T8124] slab_pre_alloc_hook+0x51/0xc0 [ 499.168026][ T8124] kmem_cache_alloc_node+0x47/0x2c0 [ 499.168045][ T8124] ? __alloc_skb+0xf4/0x750 [ 499.168069][ T8124] __alloc_skb+0xf4/0x750 [ 499.168092][ T8124] netlink_sendmsg+0x654/0xbe0 [ 499.168122][ T8124] ? netlink_getsockopt+0x570/0x570 [ 499.168143][ T8124] ? aa_sock_msg_perm+0x94/0x150 [ 499.272938][ T8124] ? apparmor_socket_sendmsg+0x88/0x230 [ 499.278594][ T8124] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 499.283893][ T8124] ? security_socket_sendmsg+0x7c/0xa0 [ 499.289378][ T8124] ? netlink_getsockopt+0x570/0x570 [ 499.294681][ T8124] ____sys_sendmsg+0x5be/0x8f0 [ 499.299461][ T8124] ? __sys_sendmsg_sock+0x30/0x30 [ 499.304930][ T8124] ? import_iovec+0x6f/0xa0 [ 499.309443][ T8124] ___sys_sendmsg+0x236/0x2e0 [ 499.314133][ T8124] ? __sys_sendmsg+0x290/0x290 [ 499.318949][ T8124] __se_sys_sendmsg+0x1b7/0x2a0 [ 499.324243][ T8124] ? __x64_sys_sendmsg+0x80/0x80 [ 499.329543][ T8124] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 499.335540][ T8124] ? lockdep_hardirqs_on+0x94/0x140 [ 499.340747][ T8124] do_syscall_64+0x4c/0xa0 [ 499.345164][ T8124] ? clear_bhb_loop+0x30/0x80 [ 499.349859][ T8124] ? clear_bhb_loop+0x30/0x80 [ 499.354540][ T8124] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 499.360437][ T8124] RIP: 0033:0x7fcc4bc590d9 [ 499.364855][ T8124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.384479][ T8124] RSP: 002b:00007fcc49eb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.392928][ T8124] RAX: ffffffffffffffda RBX: 00007fcc4bee0fa0 RCX: 00007fcc4bc590d9 [ 499.400904][ T8124] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 499.408885][ T8124] RBP: 00007fcc49eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 499.416860][ T8124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.424844][ T8124] R13: 00007fcc4bee1038 R14: 00007fcc4bee0fa0 R15: 00007ffe9055da08 [ 499.432886][ T8124] [ 499.851396][ T8137] loop6: detected capacity change from 0 to 4096 [ 499.934514][ T8140] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 501.317782][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.351955][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.629862][ T8154] jffs2: notice: (8154) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 502.959266][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 502.980949][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 503.002055][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 503.019795][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 503.027806][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 503.045253][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 503.053242][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 503.067601][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 503.078123][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 504.203329][ T8201] loop2: detected capacity change from 0 to 4096 [ 504.264661][ T8204] fuse: Bad value for 'group_id' [ 504.352014][ T8206] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 504.449848][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:1106' [ 504.459678][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 504.467257][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.477343][ T4201] Workqueue: hci4 hci_rx_work [ 504.482058][ T4201] Call Trace: [ 504.485363][ T4201] [ 504.488317][ T4201] dump_stack_lvl+0x188/0x250 [ 504.493037][ T4201] ? show_regs_print_info+0x20/0x20 [ 504.498275][ T4201] ? load_image+0x410/0x410 [ 504.503018][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 504.508199][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 504.512911][ T4201] ? kthread+0x42e/0x520 [ 504.517196][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 504.522527][ T4201] kobject_add_internal+0x5ba/0xcd0 [ 504.527867][ T4201] kobject_add+0x160/0x230 [ 504.532422][ T4201] ? kobject_init+0x1c0/0x1c0 [ 504.537135][ T4201] ? __raw_spin_lock_init+0x41/0x100 [ 504.542450][ T4201] ? klist_children_get+0x50/0x50 [ 504.547503][ T4201] ? get_device_parent+0x121/0x3e0 [ 504.552659][ T4201] device_add+0x470/0x1050 [ 504.557114][ T4201] ? device_initialize+0x2a5/0x4d0 [ 504.562250][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 504.567200][ T4201] le_conn_complete_evt+0xc2e/0x14d0 [ 504.572498][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 504.577607][ T4201] ? __mutex_trylock_common+0x15c/0x260 [ 504.583163][ T4201] hci_le_meta_evt+0x285/0x3ca0 [ 504.588116][ T4201] ? hci_event_packet+0x363/0x1310 [ 504.593227][ T4201] ? __lock_acquire+0x7b50/0x7b50 [ 504.598275][ T4201] ? hci_remote_host_features_evt+0x240/0x240 [ 504.604439][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 504.610064][ T4201] ? mark_lock+0x94/0x320 [ 504.614678][ T4201] ? mutex_unlock+0x10/0x10 [ 504.619208][ T4201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 504.625187][ T4201] ? lock_chain_count+0x20/0x20 [ 504.630042][ T4201] ? __rwlock_init+0x140/0x140 [ 504.634904][ T4201] hci_event_packet+0xe0b/0x1310 [ 504.639856][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 504.644718][ T4201] ? rcu_lock_release+0x20/0x20 [ 504.649690][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 504.655124][ T4201] hci_rx_work+0x255/0xa10 [ 504.659587][ T4201] process_one_work+0x867/0xff0 [ 504.664465][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 504.670379][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 504.675672][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 504.680701][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 504.686328][ T4201] ? wq_worker_running+0x97/0x170 [ 504.691697][ T4201] worker_thread+0xad7/0x12a0 [ 504.696484][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 504.702383][ T4201] kthread+0x42e/0x520 [ 504.706465][ T4201] ? rcu_lock_release+0x20/0x20 [ 504.711356][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 504.715941][ T4201] ret_from_fork+0x1f/0x30 [ 504.720374][ T4201] [ 504.736390][ T4201] kobject_add_internal failed for hci4:1106 with -EEXIST, don't try to register things with the same name in the same directory. [ 504.750025][ T4201] Bluetooth: hci4: failed to register connection device [ 506.775507][ T8230] loop6: detected capacity change from 0 to 512 [ 506.873701][ T8230] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 506.913103][ T4617] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 506.943174][ T8230] EXT4-fs error (device loop6): ext4_quota_enable:6440: comm syz.6.797: Bad quota inum: 2, type: 1 [ 506.957207][ T8230] EXT4-fs warning (device loop6): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 507.045860][ T8234] EXT4-fs (loop6): Unrecognized mount option "" or missing value [ 507.161999][ T4617] usb 6-1: Using ep0 maxpacket: 32 [ 507.179889][ T8236] team0: Device ip6gre1 is of different type [ 507.282067][ T4617] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 507.295024][ T4617] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.313551][ T8211] loop3: detected capacity change from 0 to 40427 [ 507.326591][ T4617] usb 6-1: config 0 has no interface number 0 [ 507.359219][ T8211] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 507.369758][ T4617] usb 6-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 507.393233][ T8211] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 507.412677][ T4617] usb 6-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.445501][ T4617] usb 6-1: config 0 interface 184 has no altsetting 0 [ 507.452134][ T8211] F2FS-fs (loop3): invalid crc value [ 507.460101][ T8211] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 507.623125][ T4617] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 507.642210][ T4617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.651330][ T4617] usb 6-1: Product: syz [ 507.704090][ T4617] usb 6-1: Manufacturer: syz [ 507.708983][ T4617] usb 6-1: SerialNumber: syz [ 507.747174][ T8243] jffs2: notice: (8243) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 507.749999][ T4617] usb 6-1: config 0 descriptor?? [ 507.824610][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.7.804'. [ 507.850930][ T8247] netlink: 580 bytes leftover after parsing attributes in process `syz.7.804'. [ 507.852914][ T4617] smsc75xx v1.0.0 [ 507.874722][ T4617] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 507.915384][ T4617] smsc75xx: probe of 6-1:0.184 failed with error -22 [ 509.054459][ T8268] loop7: detected capacity change from 0 to 4096 [ 509.261176][ T8273] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 509.744793][ T8252] loop6: detected capacity change from 0 to 32768 [ 510.076883][ T4231] usb 6-1: USB disconnect, device number 7 [ 511.695440][ T7507] Bluetooth: hci4: command 0x0406 tx timeout [ 511.826624][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:1106' [ 511.836382][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 511.843959][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.854055][ T4201] Workqueue: hci4 hci_rx_work [ 511.858775][ T4201] Call Trace: [ 511.862069][ T4201] [ 511.865019][ T4201] dump_stack_lvl+0x188/0x250 [ 511.869739][ T4201] ? show_regs_print_info+0x20/0x20 [ 511.874968][ T4201] ? load_image+0x410/0x410 [ 511.879518][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 511.884659][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 511.889364][ T4201] ? kthread+0x42e/0x520 [ 511.893632][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 511.898852][ T4201] kobject_add_internal+0x5ba/0xcd0 [ 511.904097][ T4201] kobject_add+0x160/0x230 [ 511.908553][ T4201] ? kobject_init+0x1c0/0x1c0 [ 511.913256][ T4201] ? __raw_spin_lock_init+0x41/0x100 [ 511.918556][ T4201] ? klist_children_get+0x50/0x50 [ 511.923588][ T4201] ? get_device_parent+0x121/0x3e0 [ 511.928718][ T4201] device_add+0x470/0x1050 [ 511.933136][ T4201] ? device_initialize+0x2a5/0x4d0 [ 511.938346][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 511.943293][ T4201] le_conn_complete_evt+0xc2e/0x14d0 [ 511.948596][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 511.953725][ T4201] ? __mutex_trylock_common+0x15c/0x260 [ 511.959311][ T4201] hci_le_meta_evt+0x285/0x3ca0 [ 511.964285][ T4201] ? hci_event_packet+0x363/0x1310 [ 511.969555][ T4201] ? __lock_acquire+0x7b50/0x7b50 [ 511.977129][ T4201] ? hci_remote_host_features_evt+0x240/0x240 [ 511.983226][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 511.989116][ T4201] ? mark_lock+0x94/0x320 [ 511.993471][ T4201] ? mutex_unlock+0x10/0x10 [ 511.997994][ T4201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 512.004248][ T4201] ? lock_chain_count+0x20/0x20 [ 512.009105][ T4201] ? __rwlock_init+0x140/0x140 [ 512.013884][ T4201] hci_event_packet+0xe0b/0x1310 [ 512.018840][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 512.023696][ T4201] ? rcu_lock_release+0x20/0x20 [ 512.028557][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 512.033766][ T4201] hci_rx_work+0x255/0xa10 [ 512.038203][ T4201] process_one_work+0x867/0xff0 [ 512.043178][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 512.048839][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 512.054143][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 512.059191][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 512.064921][ T4201] ? wq_worker_running+0x97/0x170 [ 512.069954][ T4201] worker_thread+0xad7/0x12a0 [ 512.074658][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 512.080564][ T4201] kthread+0x42e/0x520 [ 512.084639][ T4201] ? rcu_lock_release+0x20/0x20 [ 512.089495][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 512.094093][ T4201] ret_from_fork+0x1f/0x30 [ 512.098532][ T4201] [ 512.109901][ T4201] kobject_add_internal failed for hci4:1106 with -EEXIST, don't try to register things with the same name in the same directory. [ 512.123516][ T4201] Bluetooth: hci4: failed to register connection device [ 512.197821][ T6087] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by udevd (6087) [ 512.241641][ T8307] jffs2: notice: (8307) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 512.451767][ T7495] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 512.651965][ T7495] usb 3-1: device descriptor read/64, error -71 [ 512.951814][ T7495] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 513.094692][ T8293] loop3: detected capacity change from 0 to 40427 [ 513.136455][ T8293] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 513.161514][ T8293] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 513.171211][ T7495] usb 3-1: device descriptor read/64, error -71 [ 513.230967][ T8293] F2FS-fs (loop3): invalid crc value [ 513.292077][ T7495] usb usb3-port1: attempt power cycle [ 513.465701][ T8293] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 513.473688][ T8341] jffs2: notice: (8341) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 513.705748][ T8343] loop7: detected capacity change from 0 to 4096 [ 514.885175][ T8346] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.458366][ T7495] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 517.241835][ T7495] usb 3-1: device not accepting address 18, error -71 [ 517.496164][ T8379] jffs2: notice: (8379) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 517.517054][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'. [ 517.738600][ T8387] loop2: detected capacity change from 0 to 4096 [ 517.848815][ T8393] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 517.884634][ T8387] NILFS (loop2): bad btree node (ino=3, blocknr=42): level = 255, flags = 0xff, nchildren = 511 [ 517.942073][ T4515] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 517.953564][ T8387] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 518.071653][ T8400] nfs: Deprecated parameter 'nointr' [ 518.085855][ T8387] Remounting filesystem read-only [ 518.128352][ T8387] NILFS (loop2): error -5 preparing GC: cannot mark copying blocks dirty [ 518.191894][ T4515] usb 7-1: Using ep0 maxpacket: 16 [ 518.242126][ T8371] loop7: detected capacity change from 0 to 32768 [ 518.326285][ T8371] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 518.352176][ T4515] usb 7-1: unable to get BOS descriptor or descriptor too short [ 518.432069][ T4515] usb 7-1: config 1 has an invalid descriptor of length 27, skipping remainder of the config [ 518.472440][ T4515] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 520.135560][ T4515] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 124, changing to 7 [ 520.147012][ T4515] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 520.611245][ T8410] loop5: detected capacity change from 0 to 4096 [ 521.891965][ T1108] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 522.302192][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.340341][ T1108] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 522.519517][ T8410] NILFS (loop5): error -4 creating segctord thread [ 522.531947][ T4515] usb 7-1: string descriptor 0 read error: -71 [ 522.532396][ T1108] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.538253][ T4515] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 522.577805][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 522.607342][ T1108] usb 3-1: SerialNumber: syz [ 522.693149][ T1108] usb 3-1: bad CDC descriptors [ 522.696717][ T4515] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.751854][ T4515] usb 7-1: can't set config #1, error -71 [ 522.778202][ T4515] usb 7-1: USB disconnect, device number 15 [ 522.899019][ T1108] usb 3-1: USB disconnect, device number 20 [ 522.954664][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.844'. [ 523.243271][ T8456] jffs2: notice: (8456) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 524.354814][ T8453] chnl_net:caif_netlink_parms(): no params data found [ 524.553320][ T8440] loop6: detected capacity change from 0 to 40427 [ 524.698254][ T8440] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 524.761095][ T8440] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 525.069784][ T8470] loop2: detected capacity change from 0 to 32768 [ 525.151930][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 525.494383][ T8440] F2FS-fs (loop6): invalid crc value [ 525.500068][ T8440] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-12) [ 525.673620][ T8453] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.681452][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.690579][ T8453] device bridge_slave_0 entered promiscuous mode [ 525.699956][ T8453] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.807194][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.887680][ T8453] device bridge_slave_1 entered promiscuous mode [ 526.236568][ T8470] XFS (loop2): Mounting V5 Filesystem [ 526.736408][ T8470] XFS (loop2): Ending clean mount [ 526.779430][ T8470] XFS (loop2): Quotacheck needed: Please wait. [ 527.080997][ T8510] loop5: detected capacity change from 0 to 4096 [ 527.081836][ T8470] XFS (loop2): Quotacheck: Done. [ 527.167593][ T4343] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.232973][ T7495] Bluetooth: hci0: command 0x041b tx timeout [ 527.243948][ T4187] XFS (loop2): Unmounting Filesystem [ 527.528823][ T8519] loop6: detected capacity change from 0 to 4096 [ 528.083606][ T8518] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 529.124646][ T8453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.470113][ T8453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.064765][ T8453] team0: Port device team_slave_0 added [ 530.079875][ T7495] Bluetooth: hci0: command 0x040f tx timeout [ 530.105506][ T8519] NILFS (loop6): error -4 creating segctord thread [ 530.157076][ T8529] jffs2: notice: (8529) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 530.241590][ T4343] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.300080][ T8453] team0: Port device team_slave_1 added [ 530.387292][ T7345] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 530.400294][ T4343] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.470869][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.493142][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.537571][ T8453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.590142][ T4343] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.640186][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.650843][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.682495][ T8453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.782090][ T7345] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 530.791181][ T7345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.804300][ T8453] device hsr_slave_0 entered promiscuous mode [ 530.817947][ T7345] usb 6-1: config 0 descriptor?? [ 530.831529][ T8453] device hsr_slave_1 entered promiscuous mode [ 530.838781][ T8453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.849377][ T8453] Cannot create hsr debugfs directory [ 530.863274][ T7345] cp210x 6-1:0.0: cp210x converter detected [ 531.116515][ T8524] udc-core: couldn't find an available UDC or it's busy [ 531.130704][ T8524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 531.132205][ T7345] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 531.276140][ T7345] usb 6-1: cp210x converter now attached to ttyUSB0 [ 531.550317][ T4231] usb 6-1: USB disconnect, device number 8 [ 532.018049][ T4231] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 532.239018][ T4231] cp210x 6-1:0.0: device disconnected [ 532.241008][ T8567] loop3: detected capacity change from 0 to 4096 [ 532.493789][ T8575] FAULT_INJECTION: forcing a failure. [ 532.493789][ T8575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.707399][ T8575] CPU: 1 PID: 8575 Comm: syz.2.864 Not tainted syzkaller #0 [ 532.714852][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.725458][ T8575] Call Trace: [ 532.728764][ T8575] [ 532.731725][ T8575] dump_stack_lvl+0x188/0x250 [ 532.736439][ T8575] ? show_regs_print_info+0x20/0x20 [ 532.741664][ T8575] ? load_image+0x410/0x410 [ 532.746197][ T8575] ? __lock_acquire+0x7b50/0x7b50 [ 532.751247][ T8575] ? preempt_schedule_irq+0xe6/0x160 [ 532.756580][ T8575] should_fail+0x383/0x4b0 [ 532.761141][ T8575] _copy_from_iter+0x234/0x1160 [ 532.766021][ T8575] ? __lock_acquire+0x7b50/0x7b50 [ 532.771180][ T8575] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 532.776605][ T8575] ? __virt_addr_valid+0x3c6/0x470 [ 532.781749][ T8575] ? __phys_addr_symbol+0x2b/0x70 [ 532.786796][ T8575] ? __check_object_size+0x30c/0x410 [ 532.792131][ T8575] netlink_sendmsg+0x758/0xbe0 [ 532.796968][ T8575] ? netlink_getsockopt+0x570/0x570 [ 532.802203][ T8575] ? netlink_getsockopt+0x570/0x570 [ 532.807692][ T8575] ____sys_sendmsg+0x5be/0x8f0 [ 532.812579][ T8575] ? __sys_sendmsg_sock+0x30/0x30 [ 532.817731][ T8575] ? import_iovec+0x6f/0xa0 [ 532.822268][ T8575] ___sys_sendmsg+0x236/0x2e0 [ 532.826995][ T8575] ? __sys_sendmsg+0x290/0x290 [ 532.831913][ T8575] __se_sys_sendmsg+0x1b7/0x2a0 [ 532.836814][ T8575] ? __x64_sys_sendmsg+0x80/0x80 [ 532.839740][ T7507] Bluetooth: hci0: command 0x0419 tx timeout [ 532.841775][ T8575] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 532.841817][ T8575] ? lockdep_hardirqs_on+0x94/0x140 [ 532.841843][ T8575] do_syscall_64+0x4c/0xa0 [ 532.863822][ T8575] ? clear_bhb_loop+0x30/0x80 [ 532.868646][ T8575] ? clear_bhb_loop+0x30/0x80 [ 532.873507][ T8575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.879710][ T8575] RIP: 0033:0x7f6e888960d9 [ 532.884417][ T8575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.904262][ T8575] RSP: 002b:00007f6e86aee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.912732][ T8575] RAX: ffffffffffffffda RBX: 00007f6e88b1dfa0 RCX: 00007f6e888960d9 [ 532.920925][ T8575] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 532.928935][ T8575] RBP: 00007f6e86aee090 R08: 0000000000000000 R09: 0000000000000000 [ 532.936945][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.945777][ T8575] R13: 00007f6e88b1e038 R14: 00007f6e88b1dfa0 R15: 00007ffe4d485798 [ 532.953804][ T8575] [ 533.058831][ T8567] EXT4-fs (loop3): Test dummy encryption mode enabled [ 533.100448][ T8567] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 533.147295][ T8579] loop5: detected capacity change from 0 to 40427 [ 533.300203][ T8579] F2FS-fs (loop5): invalid crc_offset: 4177530876 [ 533.351849][ T8453] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 533.448147][ T8579] F2FS-fs (loop5): Wrong journal entry on segno 65538 [ 533.456048][ T8579] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 533.496339][ T8453] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 533.576580][ T8600] loop2: detected capacity change from 0 to 4096 [ 533.626408][ T8453] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 533.695531][ T8453] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 533.758686][ T8607] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 533.769927][ T8606] xt_connbytes: Forcing CT accounting to be enabled [ 533.776713][ T8606] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 534.221905][ T7345] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 534.305456][ T8617] netlink: 'syz.5.869': attribute type 2 has an invalid length. [ 534.389095][ T8620] 9pnet: Insufficient options for proto=fd [ 534.401094][ T8619] jffs2: notice: (8619) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 534.515894][ T8453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.582541][ T7345] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 534.622267][ T7345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 534.651110][ T7345] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 534.669639][ T7345] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 534.699170][ T7345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.739061][ T7345] usb 4-1: config 0 descriptor?? [ 534.744782][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.760966][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.782153][ T8609] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 534.848814][ T8453] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.047700][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 535.092698][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 535.188269][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.195497][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.055051][ T7495] kernel write not supported for file /input/mice (pid: 7495 comm: kworker/0:10) [ 536.132264][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 536.140593][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 536.176932][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 536.186911][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.194057][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.384094][ T8657] netlink: 60 bytes leftover after parsing attributes in process `syz.2.879'. [ 536.426489][ T7345] hid-multitouch 0003:1FD2:6007.0004: ignoring exceeding usage max [ 536.436914][ T7345] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x2 [ 536.449605][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 536.458834][ T7345] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 536.484143][ T7345] usb 4-1: USB disconnect, device number 20 [ 536.495116][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 536.501651][ T8656] loop2: detected capacity change from 0 to 2048 [ 536.665599][ T8654] loop6: detected capacity change from 0 to 4096 [ 536.706230][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 536.729363][ T8654] EXT4-fs (loop6): Test dummy encryption mode enabled [ 536.746887][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 536.749334][ T8663] loop5: detected capacity change from 0 to 4096 [ 536.781613][ T8654] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 536.843143][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 536.852923][ T8667] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.854295][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 536.877119][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 536.886197][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 536.895664][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 536.904618][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 536.913457][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 536.943705][ T8453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 538.086410][ T8684] jffs2: notice: (8684) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 538.089166][ T8679] fido_id[8679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 538.476737][ T4343] device hsr_slave_0 left promiscuous mode [ 538.675780][ T4343] device hsr_slave_1 left promiscuous mode [ 538.738035][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.984618][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.162159][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.169622][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.272737][ T4343] device bridge_slave_1 left promiscuous mode [ 539.279125][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.395140][ T4343] device bridge_slave_0 left promiscuous mode [ 539.435537][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.446830][ T8704] MTD: Couldn't look up './mnt': -15 [ 539.486382][ T4343] device veth1_macvtap left promiscuous mode [ 539.506422][ T4343] device veth0_macvtap left promiscuous mode [ 539.538919][ T4343] device veth1_vlan left promiscuous mode [ 539.553475][ T8685] loop5: detected capacity change from 0 to 40427 [ 539.554340][ T4343] device veth0_vlan left promiscuous mode [ 539.572208][ T4617] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 539.574242][ T8669] loop2: detected capacity change from 0 to 32768 [ 539.622513][ T8685] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 539.647061][ T8669] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.881 (8669) [ 539.649243][ T8685] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 539.688744][ T8685] F2FS-fs (loop5): invalid crc value [ 539.729219][ T8685] F2FS-fs (loop5): Found nat_bits in checkpoint [ 539.739846][ T8669] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 539.794691][ T8669] BTRFS info (device loop2): setting nodatasum [ 539.812432][ T8669] BTRFS info (device loop2): force zlib compression, level 3 [ 539.822520][ T4617] usb 7-1: Using ep0 maxpacket: 16 [ 539.834633][ T8669] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 539.861102][ T8685] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 539.884854][ T8669] BTRFS info (device loop2): use lzo compression, level 0 [ 539.905009][ T8669] BTRFS info (device loop2): turning on flush-on-commit [ 539.946578][ T8669] BTRFS info (device loop2): enabling auto defrag [ 539.953744][ T4617] usb 7-1: config 222 has an invalid interface number: 31 but max is 0 [ 539.971365][ T4617] usb 7-1: config 222 has no interface number 0 [ 539.990325][ T8669] BTRFS info (device loop2): max_inline at 4096 [ 540.003296][ T4617] usb 7-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 540.003935][ T8669] BTRFS info (device loop2): using free space tree [ 540.043666][ T8669] BTRFS info (device loop2): has skinny extents [ 540.047115][ T4617] usb 7-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 540.090435][ T4617] usb 7-1: config 222 interface 31 has no altsetting 0 [ 540.263948][ T4617] usb 7-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 540.284237][ T4617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.301793][ T4617] usb 7-1: Product: syz [ 540.306805][ T4617] usb 7-1: Manufacturer: syz [ 540.311530][ T4617] usb 7-1: SerialNumber: syz [ 540.362158][ T8701] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 540.463307][ T8669] BTRFS error (device loop2): open_ctree failed: -12 [ 540.475399][ T4178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4178) [ 540.602357][ T8701] udc-core: couldn't find an available UDC or it's busy [ 540.621889][ T8701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 540.745185][ T4617] ldusb 7-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 540.797663][ T4617] usb 7-1: USB disconnect, device number 16 [ 540.835256][ T4617] ldusb 7-1:222.31: LD USB Device #0 now disconnected [ 540.935557][ T4343] team0 (unregistering): Port device team_slave_1 removed [ 540.948930][ T4704] attempt to access beyond end of device [ 540.948930][ T4704] loop5: rw=2049, want=45104, limit=40427 [ 541.002622][ T4343] team0 (unregistering): Port device team_slave_0 removed [ 541.051214][ T4343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.106325][ T4343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.771113][ T4343] bond0 (unregistering): Released all slaves [ 541.821799][ T7501] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 542.119394][ T8453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.152544][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 542.160396][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 542.185193][ T8742] loop5: detected capacity change from 0 to 4096 [ 542.264467][ T8742] EXT4-fs (loop5): Test dummy encryption mode enabled [ 542.306606][ T8742] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 542.362030][ T7501] usb 7-1: unable to get BOS descriptor or descriptor too short [ 542.452065][ T7501] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.480439][ T7501] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 542.522157][ T7501] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.675435][ T8764] jffs2: notice: (8764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 542.772310][ T7501] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 542.781604][ T7501] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.810241][ T8768] netlink: 128 bytes leftover after parsing attributes in process `syz.5.895'. [ 542.811744][ T7501] usb 7-1: Product: syz [ 542.832052][ T8768] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 542.870189][ T7501] usb 7-1: Manufacturer: syz [ 542.880346][ T7501] usb 7-1: SerialNumber: syz [ 542.914813][ T8774] netlink: 'syz.5.895': attribute type 4 has an invalid length. [ 542.937658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 542.970568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 543.018969][ T8453] device veth0_vlan entered promiscuous mode [ 543.025941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 543.035729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 543.065640][ T8453] device veth1_vlan entered promiscuous mode [ 543.086159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 543.106864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 543.132605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 543.305887][ T8453] device veth0_macvtap entered promiscuous mode [ 543.362515][ T8453] device veth1_macvtap entered promiscuous mode [ 543.405608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 543.413451][ T7501] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 543.421410][ T7501] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 543.431626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 543.441053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 543.449493][ T7501] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 543.615933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 543.851359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 544.249003][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.281883][ T7501] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 544.303363][ T8791] loop3: detected capacity change from 0 to 1024 [ 544.310125][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.327859][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.340725][ T7501] usb 7-1: USB disconnect, device number 17 [ 544.391802][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.448865][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.476946][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.487407][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.498468][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.587264][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.615339][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 544.625466][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 544.639459][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.669932][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.755921][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.791869][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.818371][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.862605][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.876666][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.887577][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.908939][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.941832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 544.951562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.025338][ T8791] UBIFS error (pid: 8791): cannot open "ubi0:testvol", error -19 [ 545.029112][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.037850][ T8453] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.078765][ T8453] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.079749][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-diskseq/585.tmp-b7:3' failed: Read-only file system [ 545.090949][ T8453] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.130706][ T8453] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.259964][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 545.433505][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-uuid/c002970e-44c2-3eff-9630-c49fa665f579.tmp-b7:3' failed: Read-only file system [ 545.588813][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-diskseq/585.tmp-b7:3' failed: Read-only file system [ 545.653144][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 545.700450][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-uuid/c002970e-44c2-3eff-9630-c49fa665f579.tmp-b7:3' failed: Read-only file system [ 545.723406][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.757173][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.789774][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 545.858609][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.870043][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.880113][ T7501] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 545.920990][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 546.005277][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-diskseq/585.tmp-b7:3' failed: Read-only file system [ 546.111177][ T6087] udevd[6087]: symlink '../../loop8' '/dev/disk/by-diskseq/349.tmp-b7:8' failed: Read-only file system [ 546.142929][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-diskseq/585.tmp-b7:3' failed: Read-only file system [ 546.322077][ T7501] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.371766][ T7501] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.421910][ T7501] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.461860][ T7501] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 546.507789][ T8829] jffs2: notice: (8829) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 546.515947][ T7501] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 546.594851][ T7501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.703834][ T7501] cxacru 3-1:1.0: cxacru_bind: interface has incorrect endpoints [ 546.722677][ T7501] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 546.971862][ T7502] usb 3-1: USB disconnect, device number 21 [ 548.509827][ T8833] chnl_net:caif_netlink_parms(): no params data found [ 548.911778][ T4301] Bluetooth: hci3: command 0x0409 tx timeout [ 549.221886][ T4301] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 549.295657][ T8854] loop2: detected capacity change from 0 to 40427 [ 549.495043][ T8854] F2FS-fs (loop2): invalid crc value [ 549.511908][ T4301] usb 9-1: Using ep0 maxpacket: 32 [ 549.618877][ T8854] F2FS-fs (loop2): Found nat_bits in checkpoint [ 549.642636][ T4301] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 549.757637][ T4301] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.771411][ T8854] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 549.882218][ T8847] FAULT_INJECTION: forcing a failure. [ 549.882218][ T8847] name failslab, interval 1, probability 0, space 0, times 0 [ 549.895861][ T8847] CPU: 0 PID: 8847 Comm: syz.2.910 Not tainted syzkaller #0 [ 549.903187][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.913263][ T8847] Call Trace: [ 549.916562][ T8847] [ 549.919535][ T8847] dump_stack_lvl+0x188/0x250 [ 549.924266][ T8847] ? show_regs_print_info+0x20/0x20 [ 549.929508][ T8847] ? load_image+0x410/0x410 [ 549.934042][ T8847] ? __might_sleep+0xf0/0xf0 [ 549.938658][ T8847] ? __lock_acquire+0x7b50/0x7b50 [ 549.943727][ T8847] should_fail+0x383/0x4b0 [ 549.948175][ T8847] should_failslab+0x5/0x20 [ 549.952698][ T8847] slab_pre_alloc_hook+0x51/0xc0 [ 549.957945][ T8847] __kmalloc_node+0x6d/0x3a0 [ 549.962650][ T8847] ? __exchange_data_block+0x428/0x2a90 [ 549.968226][ T8847] __exchange_data_block+0x428/0x2a90 [ 549.973670][ T8847] ? mark_lock+0x94/0x320 [ 549.978027][ T8847] ? __f2fs_ioc_move_range+0xd40/0xd40 [ 549.983518][ T8847] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 549.989529][ T8847] ? lock_chain_count+0x20/0x20 [ 549.994416][ T8847] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 550.000071][ T8847] ? lockdep_hardirqs_on+0x94/0x140 [ 550.005306][ T8847] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 550.011009][ T8847] f2fs_collapse_range+0x233/0x390 [ 550.016154][ T8847] f2fs_fallocate+0x462/0x890 [ 550.020861][ T8847] vfs_fallocate+0x57e/0x6f0 [ 550.025493][ T8847] __x64_sys_fallocate+0xbd/0x100 [ 550.030548][ T8847] do_syscall_64+0x4c/0xa0 [ 550.034985][ T8847] ? clear_bhb_loop+0x30/0x80 [ 550.039781][ T8847] ? clear_bhb_loop+0x30/0x80 [ 550.044485][ T8847] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 550.050488][ T8847] RIP: 0033:0x7f6e888960d9 [ 550.054931][ T8847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.074995][ T8847] RSP: 002b:00007f6e86aee028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 550.083442][ T8847] RAX: ffffffffffffffda RBX: 00007f6e88b1dfa0 RCX: 00007f6e888960d9 [ 550.091709][ T8847] RDX: 0000000000002000 RSI: 0000000000000008 RDI: 000000000000000a [ 550.099707][ T8847] RBP: 00007f6e86aee090 R08: 0000000000000000 R09: 0000000000000000 [ 550.107705][ T8847] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 550.115788][ T8847] R13: 00007f6e88b1e038 R14: 00007f6e88b1dfa0 R15: 00007ffe4d485798 [ 550.123816][ T8847] [ 550.273464][ T4301] usb 9-1: config 0 descriptor?? [ 550.275693][ T8861] loop6: detected capacity change from 0 to 1024 [ 550.442709][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.463159][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.553497][ T8874] loop5: detected capacity change from 0 to 4096 [ 550.615626][ T4301] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 550.656049][ T8875] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 550.708868][ T6087] udevd[6087]: symlink '../../loop6' '/dev/disk/by-diskseq/588.tmp-b7:6' failed: Read-only file system [ 550.731608][ T8833] device bridge_slave_0 entered promiscuous mode [ 550.889146][ T4301] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 550.903099][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.913976][ T4178] udevd[4178]: symlink '../../loop2' '/dev/disk/by-diskseq/587.tmp-b7:2' failed: Read-only file system [ 550.929034][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.939704][ T8833] device bridge_slave_1 entered promiscuous mode [ 550.947186][ T4301] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 550.959443][ T4178] udevd[4178]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 550.973517][ T4301] usb 9-1: media controller created [ 550.983980][ T8859] udc-core: couldn't find an available UDC or it's busy [ 551.002023][ T8859] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 551.423027][ T6087] udevd[6087]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 551.445916][ T4301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.488795][ T8833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.550339][ T6087] udevd[6087]: symlink '../../loop6' '/dev/disk/by-uuid/c002970e-44c2-3eff-9630-c49fa665f579.tmp-b7:6' failed: Read-only file system [ 551.585254][ T8833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.596825][ T4599] udevd[4599]: symlink '../../loop5' '/dev/disk/by-diskseq/589.tmp-b7:5' failed: Read-only file system [ 551.638878][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 551.663685][ T4599] udevd[4599]: symlink '../../loop5' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:5' failed: Read-only file system [ 551.704683][ T4178] udevd[4178]: symlink '../../loop2' '/dev/disk/by-diskseq/587.tmp-b7:2' failed: Read-only file system [ 551.752740][ T6087] udevd[6087]: symlink '../../loop6' '/dev/disk/by-diskseq/588.tmp-b7:6' failed: Read-only file system [ 551.761223][ T4187] attempt to access beyond end of device [ 551.761223][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 551.779078][ T4178] udevd[4178]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 551.877238][ T8833] team0: Port device team_slave_0 added [ 551.955147][ T8833] team0: Port device team_slave_1 added [ 552.012472][ T8893] FAULT_INJECTION: forcing a failure. [ 552.012472][ T8893] name failslab, interval 1, probability 0, space 0, times 0 [ 552.012927][ T8893] [ 552.012933][ T8893] ====================================================== [ 552.012940][ T8893] WARNING: possible circular locking dependency detected [ 552.012946][ T8893] syzkaller #0 Not tainted [ 552.012955][ T8893] ------------------------------------------------------ [ 552.012961][ T8893] syz.6.918/8893 is trying to acquire lock: [ 552.012970][ T8893] ffffffff8c3139c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 552.013020][ T8893] [ 552.013020][ T8893] but task is already holding lock: [ 552.013025][ T8893] ffff888075def958 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380 [ 552.013066][ T8893] [ 552.013066][ T8893] which lock already depends on the new lock. [ 552.013066][ T8893] [ 552.013070][ T8893] [ 552.013070][ T8893] the existing dependency chain (in reverse order) is: [ 552.013076][ T8893] [ 552.013076][ T8893] -> #2 (&port->lock){-.-.}-{2:2}: [ 552.013099][ T8893] _raw_spin_lock_irqsave+0xb0/0x100 [ 552.013118][ T8893] tty_port_default_wakeup+0x1f/0xf0 [ 552.013134][ T8893] serial8250_tx_chars+0x615/0x800 [ 552.013152][ T8893] serial8250_handle_irq+0x4f5/0x5f0 [ 552.013168][ T8893] serial8250_default_handle_irq+0xb4/0x1a0 [ 552.013187][ T8893] serial8250_interrupt+0x9b/0x1c0 [ 552.013202][ T8893] __handle_irq_event_percpu+0x299/0x9d0 [ 552.013221][ T8893] handle_irq_event+0xa5/0x220 [ 552.013237][ T8893] handle_edge_irq+0x242/0xb20 [ 552.013255][ T8893] __common_interrupt+0xd7/0x1e0 [ 552.013271][ T8893] common_interrupt+0xb0/0xd0 [ 552.013287][ T8893] asm_common_interrupt+0x22/0x40 [ 552.013303][ T8893] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 552.013319][ T8893] uart_write+0x62f/0x880 [ 552.013333][ T8893] n_tty_write+0xd19/0x1220 [ 552.013351][ T8893] file_tty_write+0x50c/0x8a0 [ 552.013368][ T8893] vfs_write+0x748/0xd70 [ 552.013382][ T8893] ksys_write+0x153/0x260 [ 552.013397][ T8893] do_syscall_64+0x4c/0xa0 [ 552.013412][ T8893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 552.013430][ T8893] [ 552.013430][ T8893] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 552.013453][ T8893] _raw_spin_lock_irqsave+0xb0/0x100 [ 552.013470][ T8893] serial8250_console_write+0x16c/0xf50 [ 552.013486][ T8893] console_unlock+0xb47/0x10f0 [ 552.013501][ T8893] vprintk_emit+0xc0/0x150 [ 552.013516][ T8893] _printk+0xda/0x130 [ 552.013534][ T8893] register_console+0x693/0x970 [ 552.013549][ T8893] univ8250_console_init+0x41/0x50 [ 552.013565][ T8893] console_init+0x177/0x5d0 [ 552.013582][ T8893] start_kernel+0x2fc/0x540 [ 552.013600][ T8893] secondary_startup_64_no_verify+0xb1/0xbb [ 552.013618][ T8893] [ 552.013618][ T8893] -> #0 (console_owner){-.-.}-{0:0}: [ 552.013639][ T8893] __lock_acquire+0x2c66/0x7b50 [ 552.013658][ T8893] lock_acquire+0x19e/0x400 [ 552.013675][ T8893] console_lock_spinning_enable+0x51/0x60 [ 552.013691][ T8893] console_unlock+0x8b5/0x10f0 [ 552.013705][ T8893] vprintk_emit+0xc0/0x150 [ 552.013718][ T8893] _printk+0xda/0x130 [ 552.013735][ T8893] should_fail+0x364/0x4b0 [ 552.013751][ T8893] should_failslab+0x5/0x20 [ 552.013766][ T8893] slab_pre_alloc_hook+0x51/0xc0 [ 552.013782][ T8893] __kmalloc+0x6b/0x340 [ 552.013804][ T8893] __tty_buffer_request_room+0x1db/0x500 [ 552.013819][ T8893] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 552.013836][ T8893] n_hdlc_send_frames+0x35b/0x980 [ 552.013852][ T8893] n_hdlc_tty_write+0x6e8/0x850 [ 552.013867][ T8893] file_tty_write+0x50c/0x8a0 [ 552.013883][ T8893] vfs_write+0x748/0xd70 [ 552.013898][ T8893] ksys_write+0x153/0x260 [ 552.013911][ T8893] do_syscall_64+0x4c/0xa0 [ 552.013926][ T8893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 552.013942][ T8893] [ 552.013942][ T8893] other info that might help us debug this: [ 552.013942][ T8893] [ 552.013947][ T8893] Chain exists of: [ 552.013947][ T8893] console_owner --> &port_lock_key --> &port->lock [ 552.013947][ T8893] [ 552.013973][ T8893] Possible unsafe locking scenario: [ 552.013973][ T8893] [ 552.013977][ T8893] CPU0 CPU1 [ 552.013982][ T8893] ---- ---- [ 552.013985][ T8893] lock(&port->lock); [ 552.013995][ T8893] lock(&port_lock_key); [ 552.014006][ T8893] lock(&port->lock); [ 552.014018][ T8893] lock(console_owner); [ 552.014027][ T8893] [ 552.014027][ T8893] *** DEADLOCK *** [ 552.014027][ T8893] [ 552.014031][ T8893] 4 locks held by syz.6.918/8893: [ 552.014041][ T8893] #0: ffff888025b53098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 552.014080][ T8893] #1: ffff888025b53130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x23c/0x8a0 [ 552.014120][ T8893] #2: ffff888075def958 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380 [ 552.014161][ T8893] #3: ffffffff8c313aa0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 552.014199][ T8893] [ 552.014199][ T8893] stack backtrace: [ 552.014204][ T8893] CPU: 0 PID: 8893 Comm: syz.6.918 Not tainted syzkaller #0 [ 552.014221][ T8893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.014231][ T8893] Call Trace: [ 552.014236][ T8893] [ 552.014243][ T8893] dump_stack_lvl+0x188/0x250 [ 552.014263][ T8893] ? load_image+0x410/0x410 [ 552.014282][ T8893] ? show_regs_print_info+0x20/0x20 [ 552.014306][ T8893] ? print_circular_bug+0x12b/0x1a0 [ 552.014324][ T8893] check_noncircular+0x296/0x330 [ 552.014343][ T8893] ? add_chain_block+0x9b0/0x9b0 [ 552.014359][ T8893] ? lockdep_lock+0xf1/0x1f0 [ 552.014378][ T8893] ? lockdep_unlock+0x143/0x2e0 [ 552.014402][ T8893] __lock_acquire+0x2c66/0x7b50 [ 552.014428][ T8893] ? format_decode+0x19b/0x1330 [ 552.014449][ T8893] ? verify_lock_unused+0x140/0x140 [ 552.014474][ T8893] ? sprintf+0xe4/0x140 [ 552.014494][ T8893] lock_acquire+0x19e/0x400 [ 552.014513][ T8893] ? console_lock_spinning_enable+0x2c/0x60 [ 552.014529][ T8893] ? prb_read_valid+0x60/0x60 [ 552.014547][ T8893] ? read_lock_is_recursive+0x10/0x10 [ 552.014565][ T8893] ? do_raw_spin_lock+0x128/0x2f0 [ 552.014583][ T8893] ? __rwlock_init+0x140/0x140 [ 552.014602][ T8893] ? do_raw_spin_unlock+0x11d/0x230 [ 552.014621][ T8893] console_lock_spinning_enable+0x51/0x60 [ 552.014636][ T8893] ? console_lock_spinning_enable+0x2c/0x60 [ 552.014652][ T8893] console_unlock+0x8b5/0x10f0 [ 552.014668][ T8893] ? read_lock_is_recursive+0x10/0x10 [ 552.014691][ T8893] ? console_trylock_spinning+0x370/0x370 [ 552.014710][ T8893] ? __down_trylock_console_sem+0x19f/0x1f0 [ 552.014728][ T8893] ? vprintk_emit+0xa7/0x150 [ 552.014744][ T8893] ? printk_parse_prefix+0x310/0x310 [ 552.014761][ T8893] ? vprintk_emit+0xa7/0x150 [ 552.014777][ T8893] ? console_trylock+0x70/0x70 [ 552.014801][ T8893] ? __lock_acquire+0x13dc/0x7b50 [ 552.014824][ T8893] ? vprintk_emit+0x150/0x150 [ 552.014841][ T8893] ? mark_lock+0x94/0x320 [ 552.014856][ T8893] ? verify_lock_unused+0x140/0x140 [ 552.014879][ T8893] vprintk_emit+0xc0/0x150 [ 552.014896][ T8893] _printk+0xda/0x130 [ 552.014917][ T8893] ? load_image+0x410/0x410 [ 552.014941][ T8893] should_fail+0x364/0x4b0 [ 552.014960][ T8893] should_failslab+0x5/0x20 [ 552.014977][ T8893] slab_pre_alloc_hook+0x51/0xc0 [ 552.014996][ T8893] __kmalloc+0x6b/0x340 [ 552.015011][ T8893] ? __tty_buffer_request_room+0x1db/0x500 [ 552.015032][ T8893] __tty_buffer_request_room+0x1db/0x500 [ 552.015052][ T8893] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 552.015072][ T8893] ? __rwlock_init+0x140/0x140 [ 552.015091][ T8893] ? pty_cleanup+0x40/0x40 [ 552.015107][ T8893] n_hdlc_send_frames+0x35b/0x980 [ 552.015130][ T8893] ? _raw_spin_unlock+0x40/0x40 [ 552.015149][ T8893] n_hdlc_tty_write+0x6e8/0x850 [ 552.015172][ T8893] ? n_hdlc_tty_read+0x9e0/0x9e0 [ 552.015190][ T8893] ? sched_dynamic_update+0x210/0x210 [ 552.015213][ T8893] ? __virt_addr_valid+0x3c6/0x470 [ 552.015230][ T8893] ? __phys_addr_symbol+0x2b/0x70 [ 552.015249][ T8893] ? __check_object_size+0x30c/0x410 [ 552.015270][ T8893] file_tty_write+0x50c/0x8a0 [ 552.015290][ T8893] ? n_hdlc_tty_read+0x9e0/0x9e0 [ 552.015310][ T8893] vfs_write+0x748/0xd70 [ 552.015329][ T8893] ? file_end_write+0x250/0x250 [ 552.015349][ T8893] ? __fget_files+0x402/0x470 [ 552.015369][ T8893] ? __fdget_pos+0x1e2/0x370 [ 552.015385][ T8893] ? ksys_write+0x70/0x260 [ 552.015403][ T8893] ksys_write+0x153/0x260 [ 552.015421][ T8893] ? __ia32_sys_read+0x80/0x80 [ 552.015440][ T8893] ? lockdep_hardirqs_on+0x94/0x140 [ 552.015460][ T8893] do_syscall_64+0x4c/0xa0 [ 552.015477][ T8893] ? clear_bhb_loop+0x30/0x80 [ 552.015495][ T8893] ? clear_bhb_loop+0x30/0x80 [ 552.015514][ T8893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 552.015533][ T8893] RIP: 0033:0x7f05627630d9 [ 552.015550][ T8893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.015566][ T8893] RSP: 002b:00007f05609bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 552.015585][ T8893] RAX: ffffffffffffffda RBX: 00007f05629eafa0 RCX: 00007f05627630d9 [ 552.015598][ T8893] RDX: 00000000fffffd2c RSI: 0000200000000000 RDI: 0000000000000004 [ 552.015610][ T8893] RBP: 00007f05609bb090 R08: 0000000000000000 R09: 0000000000000000 [ 552.015622][ T8893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.015632][ T8893] R13: 00007f05629eb038 R14: 00007f05629eafa0 R15: 00007ffc2e5cce28 [ 552.015651][ T8893] [ 552.969819][ T8893] CPU: 0 PID: 8893 Comm: syz.6.918 Not tainted syzkaller #0 [ 552.977095][ T8893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.987284][ T8893] Call Trace: [ 552.990571][ T8893] [ 552.993646][ T8893] dump_stack_lvl+0x188/0x250 [ 552.998342][ T8893] ? show_regs_print_info+0x20/0x20 [ 553.003540][ T8893] ? load_image+0x410/0x410 [ 553.008055][ T8893] should_fail+0x383/0x4b0 [ 553.012483][ T8893] should_failslab+0x5/0x20 [ 553.016999][ T8893] slab_pre_alloc_hook+0x51/0xc0 [ 553.021933][ T8893] __kmalloc+0x6b/0x340 [ 553.026090][ T8893] ? __tty_buffer_request_room+0x1db/0x500 [ 553.031909][ T8893] __tty_buffer_request_room+0x1db/0x500 [ 553.037636][ T8893] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 553.044354][ T8893] ? __rwlock_init+0x140/0x140 [ 553.049128][ T8893] ? pty_cleanup+0x40/0x40 [ 553.053542][ T8893] n_hdlc_send_frames+0x35b/0x980 [ 553.058650][ T8893] ? _raw_spin_unlock+0x40/0x40 [ 553.063505][ T8893] n_hdlc_tty_write+0x6e8/0x850 [ 553.068362][ T8893] ? n_hdlc_tty_read+0x9e0/0x9e0 [ 553.074078][ T8893] ? sched_dynamic_update+0x210/0x210 [ 553.079770][ T8893] ? __virt_addr_valid+0x3c6/0x470 [ 553.084914][ T8893] ? __phys_addr_symbol+0x2b/0x70 [ 553.089960][ T8893] ? __check_object_size+0x30c/0x410 [ 553.095416][ T8893] file_tty_write+0x50c/0x8a0 [ 553.100368][ T8893] ? n_hdlc_tty_read+0x9e0/0x9e0 [ 553.106268][ T8893] vfs_write+0x748/0xd70 [ 553.110540][ T8893] ? file_end_write+0x250/0x250 [ 553.115407][ T8893] ? __fget_files+0x402/0x470 [ 553.120093][ T8893] ? __fdget_pos+0x1e2/0x370 [ 553.124694][ T8893] ? ksys_write+0x70/0x260 [ 553.129579][ T8893] ksys_write+0x153/0x260 [ 553.133920][ T8893] ? __ia32_sys_read+0x80/0x80 [ 553.138769][ T8893] ? lockdep_hardirqs_on+0x94/0x140 [ 553.143980][ T8893] do_syscall_64+0x4c/0xa0 [ 553.148442][ T8893] ? clear_bhb_loop+0x30/0x80 [ 553.153134][ T8893] ? clear_bhb_loop+0x30/0x80 [ 553.157816][ T8893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 553.163730][ T8893] RIP: 0033:0x7f05627630d9 [ 553.168156][ T8893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.190037][ T8893] RSP: 002b:00007f05609bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 553.199090][ T8893] RAX: ffffffffffffffda RBX: 00007f05629eafa0 RCX: 00007f05627630d9 [ 553.207068][ T8893] RDX: 00000000fffffd2c RSI: 0000200000000000 RDI: 0000000000000004 [ 553.215066][ T8893] RBP: 00007f05609bb090 R08: 0000000000000000 R09: 0000000000000000 [ 553.223120][ T8893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.231342][ T8893] R13: 00007f05629eb038 R14: 00007f05629eafa0 R15: 00007ffc2e5cce28 [ 553.239328][ T8893] [ 553.317465][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.329246][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.359765][ T8833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.380851][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.398189][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.464774][ T8833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.612092][ T4301] az6027: usb out operation failed. (-71) [ 553.625198][ T4301] stb0899_attach: Driver disabled by Kconfig [ 553.645102][ T4301] az6027: no front-end attached [ 553.645102][ T4301] [ 553.665866][ T8833] device hsr_slave_0 entered promiscuous mode [ 553.685491][ T8833] device hsr_slave_1 entered promiscuous mode [ 553.692669][ T8833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.700386][ T8833] Cannot create hsr debugfs directory [ 553.705867][ T4301] az6027: usb out operation failed. (-71) [ 553.705883][ T4301] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 553.706842][ T4301] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input9 [ 553.774297][ T4301] dvb-usb: schedule remote query interval to 400 msecs. [ 553.781295][ T4301] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 553.812780][ T4301] usb 9-1: USB disconnect, device number 2 [ 553.821279][ T7502] Bluetooth: hci3: command 0x040f tx timeout [ 553.845468][ T4343] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.864778][ T4301] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 553.930197][ T4343] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.007312][ T4343] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.057656][ T4343] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.190373][ T8833] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 554.219643][ T8833] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 554.229533][ T8833] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 554.238883][ T8833] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 554.320782][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.335037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 554.350932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.363107][ T8833] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.388691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 554.399279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 554.412127][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.419261][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.430692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 554.439853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.451338][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.460306][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.472716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 554.481614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 554.513317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 554.525903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.542509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 554.556474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.572777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.587861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.604430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.614211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.627243][ T8833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.639742][ T8833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.648023][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.656731][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.703813][ T26] audit: type=1326 audit(1787311253.629:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.2.916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e888960d9 code=0x7fc00000 [ 554.858426][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.866748][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.882005][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.048405][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.059876][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.090486][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.104541][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.117113][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.125929][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.144698][ T8833] device veth0_vlan entered promiscuous mode [ 555.180458][ T4343] device hsr_slave_0 left promiscuous mode [ 555.189593][ T4343] device hsr_slave_1 left promiscuous mode [ 555.196507][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.206181][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.215578][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.226417][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.235348][ T4343] device bridge_slave_1 left promiscuous mode [ 555.241627][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.251975][ T4343] device bridge_slave_0 left promiscuous mode [ 555.258327][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.271258][ T4343] device veth1_macvtap left promiscuous mode [ 555.277357][ T4343] device veth0_macvtap left promiscuous mode [ 555.285063][ T4343] device veth1_vlan left promiscuous mode [ 555.290929][ T4343] device veth0_vlan left promiscuous mode [ 555.379991][ T4343] team0 (unregistering): Port device team_slave_1 removed [ 555.394802][ T4343] team0 (unregistering): Port device team_slave_0 removed [ 555.410095][ T4343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.423521][ T4343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.470151][ T4343] bond0 (unregistering): Released all slaves [ 555.511639][ T8833] device veth1_vlan entered promiscuous mode [ 555.535857][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 555.574519][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.586578][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.600875][ T8833] device veth0_macvtap entered promiscuous mode [ 555.610875][ T8833] device veth1_macvtap entered promiscuous mode [ 555.633538][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.647035][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.657703][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.671271][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.684830][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.697744][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.708328][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.718833][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.734457][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.744146][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.757366][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.767866][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.778385][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.790733][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.805271][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.817873][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.828657][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.844619][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.857270][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 555.866149][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.871931][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 555.874270][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.890440][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.900229][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.909250][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.920545][ T8833] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.930202][ T8833] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.944613][ T8833] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.956759][ T8833] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.025009][ T8833] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 556.065954][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.076022][ T8833] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 556.085902][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.127968][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 556.149396][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.160303][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.170011][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready